Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
File: Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft (raw, json)
Hash identifier: BlYBBDP5xOUL10inVVL6ir7qCvxGk4RsrzduvVrHFOg=
Subject key identifier: 89:E2:4F:C8:04:15:11:5A:EC:B2:B2:A0:3D:4E:66:D1:C2:35:5A:EE
Authority key identifier: 43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
Certificate issuer: /CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Certificate serial: 01969F76326FA339B1478DD2C9F7A49C11C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
Manifest number: 0FFE
Signing time: Mon 05 May 2025 08:00:45 +0000
Manifest this update: Mon 05 May 2025 08:00:45 +0000
Manifest next update: Tue 06 May 2025 08:00:45 +0000
Files and hashes: 1: Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl (hash: z3RSwXugiLCc8Myx6FTCvchTSosxt+1cMPh2zXSfPWE=)
2: va7AQWl8BQjaONNSCF5yVhc4880.roa (hash: AGJNupVoKM3POzJ8IDK+xNNPIdqw4tebW6fT+PeJcHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:76:32:6f:a3:39:b1:47:8d:d2:c9:f7:a4:9c:11:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Validity
Not Before: May 5 08:00:45 2025 GMT
Not After : May 6 08:00:45 2025 GMT
Subject: CN=89e24fc80415115aecb2b2a03d4e66d1c2355aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:41:19:27:03:a4:da:a7:3d:b1:33:e3:4a:d3:
78:76:8a:1f:a3:fe:37:cc:0b:3a:cf:40:54:7c:2b:
58:fa:85:26:94:35:95:5d:db:da:40:32:f1:ea:74:
3a:54:63:d8:b9:00:03:b1:2c:ae:88:6b:47:94:73:
c3:23:9b:c3:8e:e5:57:05:0a:9e:c9:9f:8b:1d:60:
06:7e:0a:dd:41:43:37:0d:85:e4:9b:2b:0c:3d:3c:
53:18:2e:5d:eb:62:06:67:bd:8b:e9:ab:f9:c3:a6:
3a:82:69:2f:6e:8d:e5:04:37:b4:d9:12:d5:29:ba:
94:6c:78:44:cb:5e:3d:fc:87:d2:57:d5:06:d8:67:
35:9e:f2:d2:56:f3:aa:69:ff:ab:20:fd:64:6c:17:
b3:d7:fa:a8:c7:4e:b3:96:0d:d7:8f:1d:ba:51:54:
37:3c:4d:7a:80:9a:25:33:9a:2d:81:0f:9d:5b:8a:
60:1f:c6:53:58:e2:0b:42:8a:3e:86:22:72:62:68:
b9:70:d0:b4:92:33:23:5b:28:91:76:84:1a:5a:93:
cd:c0:b5:af:b0:16:30:35:60:aa:35:b7:1c:aa:22:
fa:fb:6e:d2:dd:93:2a:70:0f:fd:bd:88:ca:af:ae:
c9:e2:7a:bc:87:a9:cc:7d:bb:ee:c4:28:fb:9e:44:
57:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E2:4F:C8:04:15:11:5A:EC:B2:B2:A0:3D:4E:66:D1:C2:35:5A:EE
X509v3 Authority Key Identifier:
keyid:43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:da:e2:2a:97:42:6b:07:a7:87:0c:ae:34:d7:77:39:28:a2:
e9:5e:19:18:05:65:8b:6d:be:4b:59:0f:ae:b0:67:cf:f9:ce:
3f:1a:5a:72:ee:c0:01:86:af:87:f5:36:82:eb:85:1d:29:a0:
bb:a9:9c:5c:0b:c0:57:84:0c:20:9d:0b:e6:f6:cf:22:48:a0:
db:75:18:26:43:b4:63:09:83:74:40:06:bf:5f:56:9b:23:a8:
33:e8:b5:c8:48:e0:70:ba:a8:71:65:1e:08:8d:c5:93:31:59:
b6:f2:39:fd:af:65:4c:84:5a:f3:e5:95:a1:a7:fa:c8:65:f7:
75:f8:3e:3d:0b:37:95:72:50:fa:8e:cc:23:64:fd:59:a2:da:
09:35:8d:fb:e4:a4:c4:23:82:ee:f6:87:2f:04:19:9a:ad:7e:
86:fe:35:bd:c1:28:e3:22:13:bd:4f:a8:85:82:97:1e:c9:7d:
ca:4f:3e:aa:0d:f8:34:b5:c9:36:ee:46:15:68:27:67:7b:37:
fe:eb:a6:3d:65:46:f9:94:98:e7:dc:b3:e5:e5:b9:e2:06:22:
2c:73:9e:f1:d0:e9:5c:ff:1d:3a:f2:3e:6c:73:5a:9a:09:9a:
38:eb:cd:01:3e:07:4d:24:6c:cd:f7:6d:12:25:0d:13:67:f1:
6f:38:1f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:48:51 2025 by rpki-client