Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
File: Q-BF0CHUiuhhoM5n040VoGdlOjE.mft (raw, json)
Hash identifier: RnDX+OUkDrE+lCBYU/ZYpemby4Y67t5kFaUl4xpkfLo=
Subject key identifier: 33:1E:6F:3C:3B:56:10:7E:46:4B:F1:9E:75:98:F3:60:F4:CF:77:97
Authority key identifier: 43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31
Certificate issuer: /CN=43e045d021d48ae861a0ce67d38d15a067653a31
Certificate serial: 0196C570D171EA2D42197A5B631A7D0BCECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
Manifest number: 0B26
Signing time: Mon 12 May 2025 17:00:27 +0000
Manifest this update: Mon 12 May 2025 17:00:27 +0000
Manifest next update: Tue 13 May 2025 17:00:27 +0000
Files and hashes: 1: Q-BF0CHUiuhhoM5n040VoGdlOjE.crl (hash: KakeCIA3+aR3YEoEESgt891ZGUqvYu/4O5093KsZ9Vs=)
2: XNqUza-1RrV34b84oczapxMF-Cs.roa (hash: Cr97r6Z1ePJazya6FJNCZUabXsw1/WFse2z8LJYuBQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:70:d1:71:ea:2d:42:19:7a:5b:63:1a:7d:0b:ce:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e045d021d48ae861a0ce67d38d15a067653a31
Validity
Not Before: May 12 17:00:27 2025 GMT
Not After : May 13 17:00:27 2025 GMT
Subject: CN=331e6f3c3b56107e464bf19e7598f360f4cf7797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3e:06:ee:c2:c2:82:a5:4a:e7:89:e8:88:27:
8d:e3:48:f6:1a:35:13:bb:c2:8e:0e:04:a5:e0:ec:
89:a7:de:07:b5:b9:b8:0e:12:18:24:1a:e1:ee:6c:
0a:05:a1:63:e5:54:86:7c:bd:3b:69:9a:60:3c:d3:
d0:f1:c5:b2:14:e0:b4:42:fc:32:e2:da:db:5b:de:
51:1b:95:24:5d:69:33:da:ac:aa:52:46:56:67:69:
27:35:b1:df:5d:90:15:e1:3f:85:f0:57:9e:1c:9d:
a2:7c:f6:63:76:82:7a:33:28:5e:d9:68:9e:e8:5b:
5c:39:6c:d6:2a:43:75:9e:31:9e:2c:2d:ff:13:10:
52:3b:40:b9:e7:f3:f6:fd:19:03:59:e6:c6:fa:f7:
17:5c:16:f1:89:81:ac:35:ea:33:e3:d5:0d:e6:c0:
bc:93:87:84:11:ce:8f:ba:2e:60:c3:4a:11:ae:c4:
22:37:e5:ce:2d:f4:c5:91:b1:3d:51:c9:0f:6c:a2:
ee:8c:09:e1:0c:c4:4d:3c:c9:1d:8d:1e:52:ef:fd:
0c:e5:2b:46:a7:ac:58:53:8b:9c:ae:6c:0a:ed:2c:
10:ae:23:8d:7f:40:db:79:a4:38:df:14:af:49:b7:
1c:96:b2:4e:19:f9:9a:ac:ad:45:5c:e5:03:b6:ba:
67:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1E:6F:3C:3B:56:10:7E:46:4B:F1:9E:75:98:F3:60:F4:CF:77:97
X509v3 Authority Key Identifier:
keyid:43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:70:a8:01:61:43:24:0f:b5:72:01:25:c5:85:41:e1:f7:81:
0d:bf:92:f5:b0:1c:66:51:3a:d9:0b:6e:9f:0f:30:25:27:77:
5a:b2:90:43:a1:b4:ce:0d:b8:ac:9e:d3:ee:28:cf:49:66:41:
25:d7:75:9d:0a:2a:f5:c6:82:f8:61:db:08:1b:f8:0f:94:91:
80:05:91:31:06:ee:66:aa:56:31:1a:db:f4:99:a7:4e:12:73:
ea:8c:91:9c:be:5d:26:c5:5e:8b:98:4d:05:0a:cb:38:f0:ea:
ed:58:b2:d7:ef:de:c6:13:a3:cc:01:5c:e3:f8:00:99:60:32:
fe:3b:2a:39:10:de:e6:f5:30:09:dc:4e:28:a1:83:25:0e:91:
b1:89:47:ef:32:17:53:85:83:43:0f:1b:64:4d:8c:a6:7c:85:
f9:9c:36:27:ed:a0:0a:90:54:b5:ec:d6:81:d6:91:c2:b9:c0:
a3:aa:d3:6e:a1:4c:87:f6:47:c7:6c:36:73:b1:6b:92:8c:43:
80:1b:da:82:6c:d0:94:99:1a:15:f9:bf:04:3e:e8:02:b2:d0:
28:98:bb:4e:04:e9:76:c3:1c:5f:ff:80:6b:da:1c:97:fd:fc:
cc:76:a1:9e:63:80:d1:56:34:a8:4e:af:bd:27:4a:83:15:c3:
60:de:a1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:11:22 2025 by rpki-client