Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
File: Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft (raw, json)
Hash identifier: 3jf7YLtmWxNA01S1Vs77j0i4yG+kda84rpyWCtYr6gM=
Subject key identifier: 22:CF:B3:71:FC:7E:A5:47:A4:91:9B:05:99:AE:8A:6F:FC:E9:1A:CA
Authority key identifier: 43:2E:FE:16:EC:6C:00:FD:45:B5:D9:18:D9:B1:72:AC:D0:A5:8D:96
Certificate issuer: /CN=432efe16ec6c00fd45b5d918d9b172acd0a58d96
Certificate serial: 0196D4087B78558B9A2BC873DF6BAB4B952D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
Manifest number: 0FC4
Signing time: Thu 15 May 2025 13:00:47 +0000
Manifest this update: Thu 15 May 2025 13:00:47 +0000
Manifest next update: Fri 16 May 2025 13:00:47 +0000
Files and hashes: 1: Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl (hash: qobbKR0UFf4YwKNmBE1+EJFlBh67cyCfEGeOeR4vXoQ=)
2: TrfKChON90CRCXVKGdWD_lFGLCU.roa (hash: GFMm+kc1nJBxOyEj3z/q6lfVZK3yETv8yRHloXoAgN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d4:08:7b:78:55:8b:9a:2b:c8:73:df:6b:ab:4b:95:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432efe16ec6c00fd45b5d918d9b172acd0a58d96
Validity
Not Before: May 15 13:00:47 2025 GMT
Not After : May 16 13:00:47 2025 GMT
Subject: CN=22cfb371fc7ea547a4919b0599ae8a6ffce91aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:17:08:5f:af:37:cd:db:7b:a2:a3:d8:29:c4:
7b:64:16:55:df:a4:f4:9f:88:25:d5:a1:55:ed:fb:
7e:3a:c8:0a:f8:90:91:41:0d:42:9b:5e:c2:50:ab:
0d:3f:cc:0a:1c:7f:d1:e5:ec:2c:2f:14:40:a1:8a:
55:5a:38:9e:59:df:0f:e7:14:49:7f:f5:35:0f:a0:
85:c4:18:4d:17:99:c1:a6:ad:7d:2d:8b:10:e6:62:
1d:21:3d:52:76:c6:54:5b:e4:7f:b2:56:f3:a8:f5:
fd:98:35:86:7e:af:81:fc:cf:e5:65:0b:c3:06:d0:
20:72:3c:a1:e1:15:95:fa:17:d8:4d:0f:4c:99:e5:
11:0d:c5:8e:46:9b:ae:e7:b9:ef:13:d3:c6:27:74:
c2:58:ae:f7:f6:0a:c2:20:dd:52:30:44:07:56:57:
f2:2b:99:b3:60:4c:42:38:93:ec:ef:c4:b8:67:f2:
f6:ed:6b:41:a5:e9:42:80:ab:87:0f:ac:7f:c3:c9:
66:3c:3c:38:72:16:6c:0a:58:de:c6:b1:34:14:df:
83:fd:e3:b0:4f:ed:17:e0:20:9e:c2:78:7d:03:e4:
fa:33:7a:2a:99:71:b2:ac:d4:27:eb:2a:a7:80:57:
fc:f8:84:df:7d:00:9a:79:58:19:00:55:0d:6e:39:
c1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CF:B3:71:FC:7E:A5:47:A4:91:9B:05:99:AE:8A:6F:FC:E9:1A:CA
X509v3 Authority Key Identifier:
keyid:43:2E:FE:16:EC:6C:00:FD:45:B5:D9:18:D9:B1:72:AC:D0:A5:8D:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:19:57:8c:06:35:6c:7e:bf:08:51:cf:50:ff:40:2b:9c:d3:
df:92:25:fa:50:cd:e7:b5:58:df:bc:b2:0c:35:aa:55:44:35:
23:5f:50:28:5d:f4:bd:58:09:f0:db:13:13:bd:13:a7:0f:28:
83:e6:ab:7a:4b:38:6c:05:31:06:39:75:7c:84:6e:11:86:f8:
c1:d3:06:d0:95:b1:65:87:05:cf:6b:26:1d:19:ed:a2:1c:0c:
7a:4d:6f:9b:33:35:c2:bf:38:ee:70:cb:ec:14:5a:19:e3:99:
57:56:91:46:d6:2e:c9:c8:fc:6b:16:16:c4:f9:9d:1e:d0:c7:
29:e8:98:4e:77:5b:60:b5:d5:6d:c0:82:06:c2:6d:5e:a4:92:
26:74:cd:bd:b3:9f:47:30:bd:26:a6:92:0c:03:9a:b5:e1:6a:
d3:51:31:4b:81:1b:61:8b:32:82:ca:8f:17:74:79:6d:c7:dc:
d6:e2:66:4c:f0:55:b9:a2:3e:46:25:21:99:be:f7:b9:0f:1a:
2e:40:51:74:91:1f:e5:24:a0:54:80:35:96:8a:8f:52:bb:ac:
5f:2d:ef:e0:bc:4f:1b:7a:36:05:fb:82:5b:28:26:03:51:00:
a2:58:54:b5:fb:21:6a:cd:ef:52:f9:1e:19:ba:e6:7c:66:9a:
77:34:77:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:50:14 2025 by rpki-client