Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
File: Q0XQdzx63gjUSBnjthG9KXo5idM.mft (raw, json)
Hash identifier: OxWwq/DQjlfEVnoc1dkNx990zQj06iDiU7qxxNhkEmc=
Subject key identifier: 8F:36:1A:B6:31:37:7F:19:59:F7:6F:2A:1E:73:CF:91:34:28:2A:FE
Authority key identifier: 43:45:D0:77:3C:7A:DE:08:D4:48:19:E3:B6:11:BD:29:7A:39:89:D3
Certificate issuer: /CN=4345d0773c7ade08d44819e3b611bd297a3989d3
Certificate serial: 0196C382994EC7B01DA699702F1D09ABF362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
Manifest number: 1250
Signing time: Mon 12 May 2025 08:00:38 +0000
Manifest this update: Mon 12 May 2025 08:00:38 +0000
Manifest next update: Tue 13 May 2025 08:00:38 +0000
Files and hashes: 1: D7IbZMa3P-hRRIAm78DqK4wNZ34.roa (hash: 3Rvd3MmyWPzVOpIFhMlT5LNPsKGSgahML9FUxKiCMwI=)
2: O7r63uTdFaICg1i90uf5cyEl-h4.roa (hash: Efs34tr8Lub/IHxUGCrqJn6lA9J8HyHyjcZJAIyTZbQ=)
3: Q0XQdzx63gjUSBnjthG9KXo5idM.crl (hash: NzsXufkQw3mBY6moUB3kF+Z9K3rb3NMuCjqANXV4CVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:82:99:4e:c7:b0:1d:a6:99:70:2f:1d:09:ab:f3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4345d0773c7ade08d44819e3b611bd297a3989d3
Validity
Not Before: May 12 08:00:38 2025 GMT
Not After : May 13 08:00:38 2025 GMT
Subject: CN=8f361ab631377f1959f76f2a1e73cf9134282afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:a2:71:03:92:11:7f:13:10:42:9e:02:c5:37:
36:93:d3:d5:2e:78:1c:46:c2:65:2f:06:9d:5f:a4:
5e:6b:98:9b:83:9f:56:62:31:b9:97:80:17:78:5f:
c8:7e:05:84:66:b6:00:76:b1:01:4b:fe:40:31:ea:
b9:bc:d4:17:b2:a7:87:eb:c2:fa:be:71:75:d0:49:
06:48:74:21:9a:45:b6:94:35:36:d0:bc:a1:30:80:
87:16:42:8f:72:2a:c5:56:48:43:10:36:73:91:3e:
e0:cb:31:71:65:36:c6:82:c7:b2:af:ec:0a:a3:6b:
8f:b5:21:e2:28:8f:11:e8:ab:3c:91:5b:83:1f:2a:
b7:b4:80:49:51:a5:ba:93:58:01:76:47:8d:a0:2a:
f4:8d:86:23:08:f3:fc:52:6b:3c:ac:23:af:77:e9:
bf:d6:e1:e8:86:ef:85:e1:d7:8d:4b:08:ee:06:2f:
92:29:57:d0:b9:f1:0c:8a:95:be:ba:9d:85:15:7c:
65:f8:3f:66:14:5d:58:f1:8d:c2:3a:77:b7:27:85:
1a:4f:81:ac:8f:d0:82:cd:79:48:9c:ba:e2:ac:9d:
67:1d:44:74:63:c8:b0:a6:1c:db:a4:e7:fc:e2:4d:
37:97:75:b8:ea:8f:82:ee:0c:37:3e:68:de:41:5f:
0d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:36:1A:B6:31:37:7F:19:59:F7:6F:2A:1E:73:CF:91:34:28:2A:FE
X509v3 Authority Key Identifier:
keyid:43:45:D0:77:3C:7A:DE:08:D4:48:19:E3:B6:11:BD:29:7A:39:89:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:06:45:e0:db:aa:ba:99:da:cc:a0:4e:dc:a4:7e:89:45:5b:
ee:12:c1:82:40:12:64:b8:9e:74:c3:0b:bf:a1:79:2f:33:d4:
ab:1d:37:6a:f2:c7:0e:cc:df:29:ac:b3:89:6e:62:a7:03:16:
09:c0:a0:b2:0a:30:9d:6c:7d:db:e4:06:1b:ad:da:5a:98:8c:
32:69:b0:3a:e2:66:b2:7f:be:9e:dc:72:c1:3e:7d:b6:5a:14:
e8:d6:d8:d5:39:a3:06:99:b0:9b:c6:64:e8:77:b2:ab:6a:41:
ff:6c:24:26:45:41:d1:95:bb:f9:71:27:3e:f8:f4:77:8c:64:
69:f9:29:e7:4d:f9:e4:de:46:47:b9:b1:b2:bf:50:a5:ac:92:
cc:20:42:ff:5e:a0:15:5a:96:3d:2d:50:98:af:d4:d4:fd:9b:
a8:8e:f7:38:87:47:c0:7c:a4:1f:b2:31:c1:09:6f:22:88:f4:
33:a8:0a:70:eb:98:28:46:58:22:a9:0d:ed:5b:20:95:e6:5c:
19:ad:04:ad:4f:8e:ad:49:70:15:7e:48:84:f2:35:f3:73:08:
c8:c5:0d:aa:7f:84:40:b0:ec:13:2a:c8:d9:ce:d0:fe:2a:ae:
28:e4:2e:39:fe:94:71:ab:2c:17:d4:f9:15:c9:e0:21:36:79:
e3:2e:a3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:35:41 2025 by rpki-client