Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
File: 0xQt8vZwlAzPWksnoNDJh-zIhlY.mft (raw, json)
Hash identifier: FHXCnEK/Yuk/v6yGEIVfJSlc0dFlrlE6VrMrw1Urtrw=
Subject key identifier: BF:CA:FA:C7:79:FE:60:1B:D3:19:85:03:AD:E3:5B:38:12:6E:24:DB
Authority key identifier: D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56
Certificate issuer: /CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656
Certificate serial: 0196A8E73FB204C87E14863E9FB6D819E6EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
Manifest number: 023A
Signing time: Wed 07 May 2025 04:00:49 +0000
Manifest this update: Wed 07 May 2025 04:00:49 +0000
Manifest next update: Thu 08 May 2025 04:00:49 +0000
Files and hashes: 1: 0xQt8vZwlAzPWksnoNDJh-zIhlY.crl (hash: FIUWymeFJ55I3ewHSrMIf67/CnXjB0fxX8vA5z8N+2A=)
2: DxWkaJkNeo1GnfX8PTB6m_7NDo8.roa (hash: 1C13Qsc+uAlJmXy/kak788lVFXMyWIaA+AZiv7RcjGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:e7:3f:b2:04:c8:7e:14:86:3e:9f:b6:d8:19:e6:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656
Validity
Not Before: May 7 04:00:49 2025 GMT
Not After : May 8 04:00:49 2025 GMT
Subject: CN=bfcafac779fe601bd3198503ade35b38126e24db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:24:47:6a:a2:9b:ff:3a:0d:cd:8c:af:f7:1d:
ff:4f:9b:a0:cd:c8:21:e4:53:ad:1b:79:d4:0a:3a:
0c:29:4e:f6:38:7d:20:19:49:32:42:b6:be:c1:35:
b7:9a:f5:a1:59:d8:e4:26:ff:5c:00:6b:6a:f0:0e:
3c:23:99:fc:b1:fa:97:b7:2f:f6:ef:f3:d4:98:d4:
95:36:f8:85:16:02:f6:a4:8e:40:5e:95:18:1d:11:
78:d2:fa:7a:1f:46:ed:08:12:e0:05:c7:5a:84:77:
b6:e3:0f:ea:e7:4e:0a:ad:22:2a:8a:63:0f:54:2c:
63:fa:63:c8:6a:31:83:1d:fe:a8:74:5b:88:5b:38:
b6:61:12:59:af:f0:01:e5:10:15:4c:60:26:1d:f4:
89:51:c0:77:b2:df:28:9d:6c:ee:ca:b2:52:f6:25:
25:43:8d:ec:ce:cc:59:4f:80:c6:2c:68:50:26:d1:
52:8e:9f:87:84:e0:3b:41:21:5f:1b:72:68:2e:58:
bf:51:d4:13:e0:7b:20:92:58:46:e0:91:63:f1:61:
18:ed:83:5c:d1:1f:06:ad:19:60:7a:fd:98:85:36:
10:bb:53:80:b0:1a:dc:96:53:f8:97:1b:5c:49:ba:
4c:3b:c6:4b:8a:e3:17:e2:07:3e:5c:7f:f6:7c:e9:
62:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CA:FA:C7:79:FE:60:1B:D3:19:85:03:AD:E3:5B:38:12:6E:24:DB
X509v3 Authority Key Identifier:
keyid:D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:38:25:f0:50:b4:69:ce:8c:d2:a4:cd:94:86:db:05:76:e7:
1d:4d:34:de:cf:7e:9c:d8:1a:f5:b0:ce:6d:b1:fd:70:67:56:
5a:f8:f2:70:19:74:10:e0:a6:59:df:3b:c5:d7:51:1b:98:8d:
dd:f1:65:b6:85:22:1e:d6:63:ef:ba:07:8e:29:a8:74:8f:4f:
33:89:56:ca:e9:de:81:82:dd:71:3b:30:f0:e3:a0:b9:ae:4b:
93:94:a9:2c:3d:0b:99:c9:19:6c:9b:4e:ab:10:a4:8c:19:fd:
a2:4a:20:b1:ac:d1:26:70:9a:3a:5c:07:ed:fa:2d:ec:89:39:
f5:4a:4e:97:59:46:ae:ca:22:8d:be:b2:01:db:dc:29:89:05:
72:c7:13:04:95:31:d4:d3:6b:32:0d:77:53:bd:c6:f2:64:bf:
71:cf:17:41:3c:2e:83:4e:b7:3c:9c:89:4c:e6:c2:e0:0f:74:
9d:12:b4:cc:c8:0e:d1:79:06:87:7d:eb:0f:4b:db:cc:85:2e:
bf:53:d1:68:af:e2:2a:1b:dd:eb:4d:41:13:9b:34:0e:67:54:
ed:10:78:fa:02:6f:f1:17:df:94:8e:ca:66:54:5a:d3:9c:97:
69:9e:99:c4:25:62:03:19:78:0b:d9:1c:67:7d:3e:75:05:ad:
f4:0d:86:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 08:45:53 2025 by rpki-client