Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
File: QsMDcZht9dVk7mcHRxe2agL_VxI.mft (raw, json)
Hash identifier: Sd26k/gWKZbjZdq2l0A7n4q7k22JV5BZnRRJWF/82Fo=
Subject key identifier: 77:FF:10:FB:0B:7A:2F:76:84:D0:53:9E:11:47:08:6E:65:D0:C3:76
Authority key identifier: 42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
Certificate issuer: /CN=42c30371986df5d564ee67074717b66a02ff5712
Certificate serial: 0196C2026461BDB0C2DCBA52E4650558DAE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
Manifest number: 1427
Signing time: Mon 12 May 2025 01:00:58 +0000
Manifest this update: Mon 12 May 2025 01:00:58 +0000
Manifest next update: Tue 13 May 2025 01:00:58 +0000
Files and hashes: 1: QsMDcZht9dVk7mcHRxe2agL_VxI.crl (hash: O8qccZUZubEdELXbj4R+YD0JOBrjI2t7TmcTlUo1lJw=)
2: hyIZ79qkrdHzxjA2nqjpWKRJazw.roa (hash: uN3TIUn6uJGV9mne7uVtH2Vshh9cYXISPUulyaHzlUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:64:61:bd:b0:c2:dc:ba:52:e4:65:05:58:da:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c30371986df5d564ee67074717b66a02ff5712
Validity
Not Before: May 12 01:00:58 2025 GMT
Not After : May 13 01:00:58 2025 GMT
Subject: CN=77ff10fb0b7a2f7684d0539e1147086e65d0c376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:51:e7:16:b7:d9:8f:eb:2e:0a:dd:9e:27:50:
8c:cd:7d:a4:a6:73:e4:c3:6a:89:69:b3:54:4b:59:
c8:e7:4b:ab:dc:6c:36:c1:22:6f:f8:8b:56:d3:91:
07:a6:d0:f8:33:ea:cc:b1:2a:c0:ae:dc:97:e4:01:
c2:4e:15:39:60:17:f0:b1:d6:b9:8c:51:8d:a5:68:
83:22:64:37:3d:11:3a:01:7e:a9:83:4b:fe:d4:7b:
5b:e6:10:02:86:0e:28:2f:9a:b9:ee:90:24:7e:9b:
2a:74:9b:a3:17:fc:90:cd:e4:6d:05:e7:b4:82:f2:
c8:64:67:e5:01:36:83:67:9d:40:90:89:72:b2:26:
f3:4b:a9:63:60:2a:55:96:0c:3e:a7:ae:97:81:27:
50:c1:d3:e9:75:58:86:84:45:42:8a:a5:9a:52:5b:
23:5a:35:4d:98:bb:83:79:5b:70:48:80:63:60:b1:
27:ed:1c:0b:2b:05:50:ad:53:9e:45:8a:1b:a7:57:
3a:68:8a:94:7d:cc:73:cb:d5:f2:0e:e8:73:a2:77:
41:0b:6b:97:ef:cd:b6:a1:07:e4:20:30:40:de:21:
33:e9:63:33:bf:ea:98:71:7d:c5:7d:05:4b:dd:1e:
90:eb:c3:ea:e3:96:aa:7a:4c:22:a5:c5:85:84:40:
21:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FF:10:FB:0B:7A:2F:76:84:D0:53:9E:11:47:08:6E:65:D0:C3:76
X509v3 Authority Key Identifier:
keyid:42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:fa:cc:bb:5c:b3:09:cc:62:74:bd:e8:22:fe:76:93:11:86:
91:47:b5:8c:23:a9:1e:ef:16:d1:c2:c3:df:a8:5d:88:6d:6f:
45:e0:7a:0a:09:61:54:b3:1b:98:20:8f:a7:27:31:41:a2:cd:
45:8c:1f:26:cd:0e:73:50:b9:53:52:75:86:f0:46:d1:1d:37:
e9:e7:b5:5f:db:d1:ac:45:dd:d1:e8:e2:78:01:e8:b1:42:0e:
69:02:c0:2b:1b:54:79:c4:3b:1e:0b:aa:95:cf:c6:4e:02:9b:
36:1b:89:76:44:f0:88:98:4a:be:a1:73:2d:29:ac:f4:e3:2f:
c4:f1:4f:75:6e:96:f5:38:cb:f7:cf:4f:08:ce:32:c9:06:8d:
23:a4:c2:e0:5f:3d:3d:92:84:35:26:e4:b5:4c:78:aa:42:9b:
4e:ac:2b:2a:df:d6:cb:25:66:d5:ea:d9:d3:49:d5:70:ee:2d:
1d:fe:8c:2d:b5:4d:e7:be:eb:22:ac:0a:1f:ce:ad:b6:b6:7b:
92:70:c5:7a:19:88:24:d6:9d:22:9f:81:7a:8d:3c:8b:6a:10:
28:71:39:39:3b:a2:c7:d3:c2:46:32:08:87:4a:9e:5b:90:93:
8d:39:bd:7f:87:0a:42:ba:2b:c2:07:85:51:21:42:c8:86:d9:
9c:d0:8a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:12:23 2025 by rpki-client