Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
File: 1QYosB6kR3GDy_-S23oMWBRRlaQ.mft (raw, json)
Hash identifier: FpQ0Tv2dc/BbaTrB1AMAAh5dQF+z4K7/AtN3VT19SSU=
Subject key identifier: 71:F5:E4:70:8B:D0:F5:8E:0C:34:B6:33:B9:23:2D:96:ED:AC:C5:EF
Authority key identifier: D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4
Certificate issuer: /CN=d50628b01ea4477183cbff92db7a0c58145195a4
Certificate serial: 01963E7896412B2C11C0AC0AD10142F0E27E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
Manifest number: 0998
Signing time: Wed 16 Apr 2025 12:00:11 +0000
Manifest this update: Wed 16 Apr 2025 12:00:11 +0000
Manifest next update: Thu 17 Apr 2025 12:00:11 +0000
Files and hashes: 1: 1QYosB6kR3GDy_-S23oMWBRRlaQ.crl (hash: TGI6F4mf1kRAUxMvGypy7RylsnZczHziN27xBnJ5ccE=)
2: _pIpWC2mISR6dq-6G_9xF8Tberk.roa (hash: AVYabGQyAC/dt95JDDKLIXfkPwJWf47FBbAQTadMiJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 12:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:78:96:41:2b:2c:11:c0:ac:0a:d1:01:42:f0:e2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50628b01ea4477183cbff92db7a0c58145195a4
Validity
Not Before: Apr 16 12:00:11 2025 GMT
Not After : Apr 17 12:00:11 2025 GMT
Subject: CN=71f5e4708bd0f58e0c34b633b9232d96edacc5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fa:e9:6b:63:45:79:89:f4:60:f6:8b:f7:87:
11:c1:e9:ff:05:24:61:03:8b:b5:be:80:c6:ca:2c:
7a:ad:f2:a5:a8:6a:98:56:5d:1b:cf:86:23:1a:e2:
76:51:23:cd:b0:cc:b2:36:8c:05:17:95:31:03:b0:
c2:d5:b8:3c:28:65:24:84:39:c9:a4:52:78:cf:55:
01:c9:9c:bd:b5:39:13:73:a2:76:12:fa:36:68:68:
49:ca:63:10:17:34:c0:54:b2:b5:4f:28:be:2b:02:
ac:a2:6b:0f:8e:7e:a0:e5:31:db:8d:3f:d4:23:8a:
6e:75:15:21:b1:ef:0c:0f:7a:f4:58:c2:c4:2e:ce:
1a:7d:d9:9c:3b:95:1c:ff:32:9d:3b:87:c6:a6:37:
db:6b:89:82:23:75:cb:a2:8d:40:bc:b1:62:3c:37:
cc:61:fd:9b:86:13:dd:ea:ec:50:37:c4:79:02:10:
fa:4a:0a:05:cb:ed:71:f0:94:54:c5:a9:b2:d7:45:
df:8d:d2:35:34:d2:fc:ab:db:49:63:d3:b3:05:83:
33:71:ae:dc:6b:25:71:09:b7:b3:08:ff:11:44:ca:
23:2a:7b:7c:62:65:9b:bc:7e:80:01:b9:2e:f0:d0:
63:10:58:6f:86:c3:76:8f:c7:d8:d8:6d:13:e3:70:
31:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F5:E4:70:8B:D0:F5:8E:0C:34:B6:33:B9:23:2D:96:ED:AC:C5:EF
X509v3 Authority Key Identifier:
keyid:D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ea:43:ab:29:54:42:22:a3:d0:ec:5c:38:31:56:d5:41:be:
5b:01:ac:5a:82:0a:80:98:c5:5c:84:c2:ca:b7:c8:d1:43:38:
6d:7d:33:5b:de:fc:c4:7a:88:99:87:b0:bc:8e:c8:f6:5b:ff:
61:65:85:21:ae:44:b0:07:5f:df:f9:34:4c:14:ae:08:4a:44:
e7:b6:3b:15:b0:01:3a:28:a3:e2:f4:77:ac:60:e1:c7:7b:ac:
6e:57:46:94:07:55:ea:6b:09:10:c4:10:89:d2:4e:8e:ad:ad:
18:70:82:2b:fc:00:2f:5c:26:f3:b8:87:d0:0d:0e:35:bb:01:
db:05:33:de:2b:86:50:b5:9e:cf:d6:e9:2c:d9:79:83:e9:d6:
16:01:c8:db:3f:24:ca:71:e2:74:12:80:05:da:46:55:76:59:
4b:00:51:d6:b0:49:c7:6b:63:24:d9:a1:3b:9b:e3:68:97:71:
65:01:0b:22:29:53:cd:65:96:55:4f:86:f2:bc:7c:3b:3c:04:
c9:67:81:ae:8d:5f:8d:68:fe:d3:68:81:5c:d0:d5:90:5a:95:
72:57:69:48:24:9e:79:d6:53:16:27:cc:0a:62:61:7a:7d:ae:
33:4d:79:eb:ef:a4:9c:9b:07:6c:d8:fb:8a:67:1c:7e:07:e6:
cc:0a:cd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:07:04 2025 by rpki-client