Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
File: lQCCqFlGcix_wchk8PvYDcVNzSk.mft (raw, json)
Hash identifier: cA2hDSRZG5oEqbV+oPVcWREH7RXJVPRN696AAnvIC44=
Subject key identifier: 3D:C8:CF:C7:E2:3B:F1:49:85:E3:2C:B8:E2:85:7D:5A:4A:D6:CE:A5
Authority key identifier: 95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
Certificate issuer: /CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Certificate serial: 0196048A460C3C97837F9C938CCE522D5CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
Manifest number: 0714
Signing time: Sat 05 Apr 2025 06:01:32 +0000
Manifest this update: Sat 05 Apr 2025 06:01:32 +0000
Manifest next update: Sun 06 Apr 2025 06:01:32 +0000
Files and hashes: 1: W0dMAnO6aF0Yx6O8KQpDYw42KzU.roa (hash: hYKeaXsd87cAB8WiR9boDz94K2aYD6Hd49egFLgXH3M=)
2: aC_hdK5CbbWAdY5r2a47t0lmkv0.roa (hash: OC741thwNdbktYi4ltIPLb7G2UMVurZWZKeSAWhRUXM=)
3: lQCCqFlGcix_wchk8PvYDcVNzSk.crl (hash: 3Syx8Cx7UfQFEUg5isl4ZZKyojl8nnP4hR+yKGzapcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:04:8a:46:0c:3c:97:83:7f:9c:93:8c:ce:52:2d:5c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Validity
Not Before: Apr 5 06:01:32 2025 GMT
Not After : Apr 6 06:01:32 2025 GMT
Subject: CN=3dc8cfc7e23bf14985e32cb8e2857d5a4ad6cea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f3:3a:2a:a2:68:0d:be:e1:95:14:06:a6:07:
0b:b2:41:92:58:89:03:95:47:ff:a4:87:3e:da:f4:
3d:80:bc:a8:b5:64:92:f6:73:cb:91:a2:74:bb:56:
d1:2a:ae:fa:61:d3:6e:06:4e:84:7f:8c:c8:45:4d:
39:e4:f6:61:25:81:68:64:6b:7a:de:b6:ce:33:1a:
4a:06:93:a1:b5:57:1d:1f:6f:79:65:92:88:34:56:
2d:58:dc:eb:53:f4:8c:7f:55:d5:92:f3:ea:af:a3:
04:7d:75:be:a4:ef:95:31:86:32:97:45:3b:94:5c:
0e:3e:e9:1f:94:e6:0b:61:ff:aa:9e:9b:e5:a2:5e:
62:da:67:1e:1b:0f:8d:f5:92:56:f1:c2:9e:d7:ee:
8d:f7:94:2d:34:ad:d6:31:91:39:41:84:49:ed:36:
63:ff:fb:9f:73:f3:b4:5e:e4:99:c3:c4:c8:35:e9:
d2:03:70:87:d7:df:fc:29:44:93:75:ab:52:4d:48:
59:50:95:de:d7:c3:4e:10:1c:59:ed:fa:01:7b:3d:
14:ac:57:d9:8d:8c:36:60:c5:3a:91:c5:35:97:79:
36:fb:36:16:cf:a3:82:75:2c:78:af:96:9b:c9:c8:
b7:d3:49:3d:9d:48:57:ab:06:7f:ae:d1:e6:f9:fa:
19:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C8:CF:C7:E2:3B:F1:49:85:E3:2C:B8:E2:85:7D:5A:4A:D6:CE:A5
X509v3 Authority Key Identifier:
keyid:95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e5:6e:47:a9:3a:84:2a:67:a1:70:b2:62:24:ed:1a:ec:64:
7f:ae:d7:06:bb:b0:b9:bf:8b:f1:2b:f7:8c:57:e2:dc:68:98:
44:0a:ff:7b:01:82:58:cf:d4:45:0c:ca:63:a8:a3:e9:46:50:
90:ea:81:6c:65:a2:67:1f:54:ba:a4:dc:46:2f:83:f0:6c:2a:
5c:dc:0f:18:9a:51:e9:dd:c2:4d:41:7e:26:29:81:56:85:31:
51:b6:a3:29:e4:3b:ad:e2:24:3b:83:38:0a:0b:01:23:82:ed:
4c:b3:3e:23:5d:e7:35:ce:5f:eb:3b:41:79:a4:eb:fc:9b:57:
4b:4f:4e:f6:74:36:33:65:dc:dc:25:84:c2:cb:40:e5:f2:29:
6f:95:f7:83:30:85:06:76:98:c4:91:09:fa:b7:2a:c8:13:47:
1b:97:83:57:d8:3a:0e:07:4f:b0:c6:6f:e3:7d:5b:6d:64:8e:
a3:55:6e:90:66:13:88:b2:83:25:49:b6:72:5a:44:cd:a1:de:
61:bf:b1:c5:67:29:4f:03:6f:94:8c:e8:bc:15:38:a2:b3:01:
b4:7c:1a:3c:f5:42:ba:fc:dd:c9:f1:df:05:75:b9:e0:e3:73:
56:4d:b1:0f:3a:72:d3:5f:e1:9a:62:a0:3d:6d:30:2c:95:a0:
f0:ce:11:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:32:12 2025 by rpki-client