Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
File: Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft (raw, json)
Hash identifier: Xlu9UTQ9fCRUI+Ig0OqLP0b4T3AetgsaCJ5F8td5/UY=
Subject key identifier: 64:3F:CE:BD:15:A2:B7:19:94:8D:35:44:A2:97:28:AD:C0:F7:26:9C
Authority key identifier: 43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB
Certificate issuer: /CN=431f1480651f1b338be26341e2db3a0aa3b344eb
Certificate serial: 019656139B632D42D255BE0F03DAF925F71B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
Manifest number: 03DF
Signing time: Mon 21 Apr 2025 02:00:47 +0000
Manifest this update: Mon 21 Apr 2025 02:00:47 +0000
Manifest next update: Tue 22 Apr 2025 02:00:47 +0000
Files and hashes: 1: 3ZVx610sqQi3jR1aN5jm4CubkNI.roa (hash: ailedL7i/J97fdockeVNWVcnZPHz5O3htVX32ZMAjHU=)
2: Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl (hash: Qz24FLrTIOVHLjyAOefDObmYZAQPSeXVPoAbo//eUJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:9b:63:2d:42:d2:55:be:0f:03:da:f9:25:f7:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=431f1480651f1b338be26341e2db3a0aa3b344eb
Validity
Not Before: Apr 21 02:00:47 2025 GMT
Not After : Apr 22 02:00:47 2025 GMT
Subject: CN=643fcebd15a2b719948d3544a29728adc0f7269c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:75:a8:6c:98:83:b8:b7:57:59:92:76:cd:
2e:79:1c:d7:32:46:08:64:54:a5:97:ec:11:8b:26:
8f:8f:2f:06:b3:25:b7:b2:e1:7c:f5:10:7d:4c:31:
29:6f:d6:89:a2:89:5a:5a:e6:ea:d1:6b:60:36:0c:
f8:50:06:1a:ec:99:fc:ad:7e:55:aa:00:69:be:a3:
45:e4:e2:3b:fe:82:82:58:81:25:91:8a:51:c3:0e:
b4:e8:ef:cd:44:1c:c3:8f:05:3d:63:ab:b3:41:59:
cb:5b:6a:2a:6a:17:1a:ea:37:4d:e6:e4:84:1e:40:
0d:c9:66:73:e9:56:b0:3b:38:ad:f4:cc:61:5d:46:
df:a9:ec:35:d3:6c:86:af:52:ae:38:29:4c:db:f7:
ac:d6:dd:1e:dc:e5:dd:64:be:99:3d:3f:62:84:ad:
ca:b1:b4:f2:66:6d:2f:be:25:a1:f9:11:83:00:a3:
ef:c0:9d:2c:b4:a2:f0:25:4a:05:70:97:15:fa:87:
06:93:7c:5a:3f:66:9f:f8:6b:24:a6:58:c1:19:68:
58:3d:d1:97:03:6f:80:35:e5:b7:21:1f:f5:5b:bf:
9e:2f:20:e5:5d:ed:69:32:ec:3d:83:bc:ee:7b:ab:
37:ff:f5:7c:24:bf:f0:79:e4:de:b6:42:c7:57:0f:
50:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3F:CE:BD:15:A2:B7:19:94:8D:35:44:A2:97:28:AD:C0:F7:26:9C
X509v3 Authority Key Identifier:
keyid:43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:64:af:58:56:8a:5f:be:bc:e2:ac:31:ac:7c:af:27:1b:95:
4d:65:a7:54:48:b8:32:f7:62:52:07:49:b4:2b:6e:6f:9d:e1:
0c:33:6d:2c:b6:29:b9:97:eb:ac:40:7b:98:09:73:cc:34:1f:
b3:81:a3:d1:94:94:21:79:b9:78:1a:63:7e:8e:4a:d0:3a:1c:
1f:cc:50:4b:db:5a:73:51:b4:95:3d:c5:de:00:08:0f:b7:ac:
c9:af:f9:3f:fb:52:1e:a5:8f:37:e9:06:8f:1d:7e:ab:70:8b:
74:b4:31:ab:1a:0d:fa:df:9d:77:72:42:99:88:3a:d6:27:ad:
25:4c:02:41:5f:9a:6f:28:41:b2:f4:24:04:c2:fe:00:c3:05:
b3:eb:8c:e8:dc:41:37:95:c2:e4:eb:b3:52:82:2f:43:0a:4b:
e8:f4:83:e4:a0:9a:86:68:f4:c8:b4:7f:8b:4c:1b:91:d2:95:
c2:10:01:38:4c:3c:06:0d:c9:2f:7e:81:11:de:15:51:d8:7f:
18:bb:62:2d:4f:7c:a3:fd:7a:2c:53:60:56:40:c0:48:2e:74:
eb:92:ac:5b:75:ea:77:7a:d1:60:41:d8:83:d2:28:c5:50:03:
09:13:58:cf:c7:cb:4d:ea:c3:a7:1f:ef:9b:17:bb:d5:5e:9b:
b0:1d:81:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:41:39 2025 by rpki-client