Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
File: QmstdED7eIRM8BNexRgrP294OoY.mft (raw, json)
Hash identifier: gyKDB1GVUSmnj+MleoVwKDncsHMmhJ0nSYOxTX6gH5g=
Subject key identifier: 7A:7E:88:86:EE:5E:99:3F:BE:74:3D:70:6A:36:F5:0A:2F:3F:17:3F
Authority key identifier: 42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
Certificate issuer: /CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Certificate serial: 0196BC371C40552C3CEBBB4E25D25064B0D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
Manifest number: 06F8
Signing time: Sat 10 May 2025 22:00:50 +0000
Manifest this update: Sat 10 May 2025 22:00:50 +0000
Manifest next update: Sun 11 May 2025 22:00:50 +0000
Files and hashes: 1: QmstdED7eIRM8BNexRgrP294OoY.crl (hash: HVogHoVcpdvRmlcxxXaZUa7WbMnY4M65p4PRGDPh8HY=)
2: z1aZ7-bmH6l6J7mLCP5moL6leU0.roa (hash: yKL3bhklKR6G8Kxo3AuOxdxqmVoJuUJSKeF/iJ4ql/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:37:1c:40:55:2c:3c:eb:bb:4e:25:d2:50:64:b0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Validity
Not Before: May 10 22:00:50 2025 GMT
Not After : May 11 22:00:50 2025 GMT
Subject: CN=7a7e8886ee5e993fbe743d706a36f50a2f3f173f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:db:6e:61:7b:da:7d:f8:2c:a6:c3:8d:19:
70:72:3f:3e:09:28:16:2c:9e:65:7c:ae:9b:73:89:
d8:1d:ab:c2:a7:0c:47:ab:00:cf:8e:bc:f5:32:5c:
10:2f:2f:3c:2c:02:3d:bc:ae:19:c0:49:0f:8d:5b:
b9:e8:c2:93:44:67:a1:7a:95:99:cf:4c:4e:70:50:
67:0e:5c:95:54:f7:08:be:8d:9a:fc:7e:1d:e9:48:
88:f1:11:54:06:ed:65:98:88:1b:5b:21:29:57:f5:
3e:14:64:0e:3e:62:ba:f6:88:ad:5c:6f:a6:c4:59:
b8:59:06:a2:98:bb:70:ef:72:bf:a4:5b:d2:5d:7d:
c1:27:fb:c8:5e:28:83:d6:db:37:67:26:cd:dd:c8:
fa:ab:8f:e6:50:f3:d2:7b:8c:ab:ca:d6:39:83:63:
ab:20:d9:2c:d3:2a:a0:00:a4:82:00:91:b3:77:d3:
fa:13:4b:34:96:52:42:70:5e:3b:3d:0f:cc:a9:9e:
1a:b9:32:60:4d:aa:07:35:fc:bd:24:8d:f6:3a:75:
b5:48:c5:7c:f5:94:81:97:47:40:3b:d6:7b:29:6d:
9e:2f:ff:45:31:2a:bf:61:a2:e7:fa:66:5c:43:e8:
d0:9a:c7:6e:d2:2c:39:ec:c5:3d:ff:a9:d8:2e:31:
dd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7E:88:86:EE:5E:99:3F:BE:74:3D:70:6A:36:F5:0A:2F:3F:17:3F
X509v3 Authority Key Identifier:
keyid:42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:54:25:c2:8f:aa:23:aa:38:87:a9:e0:fd:ec:d8:7d:39:7c:
b1:56:96:9e:a1:d7:f1:6e:dc:55:ac:f5:fc:96:5f:b4:10:85:
f4:e8:f0:44:eb:f8:f2:0b:b7:3d:1f:a3:c0:8f:8a:ff:d7:ab:
ab:35:10:2e:14:fa:cc:39:3d:d2:9d:fc:5e:77:8b:15:39:1b:
20:11:68:35:87:e0:b9:eb:01:3f:b1:b9:35:85:c5:ba:8e:5b:
5f:74:0a:24:fe:63:2b:44:a5:34:d7:5a:48:f3:2c:5d:b8:02:
66:d9:23:b3:a0:15:4c:65:e0:8b:a3:33:e8:01:33:88:d5:64:
ab:84:bd:e0:91:11:07:b1:bc:ba:ad:e2:31:ae:36:bb:63:cc:
e9:a5:7a:ae:7b:5c:7f:3a:fd:11:c4:cf:4c:74:02:f9:ac:c5:
f9:2e:28:e3:4a:e8:c7:cd:ac:f5:78:8e:92:4b:51:95:25:02:
25:57:8a:a3:cf:d4:55:7f:08:83:78:7d:5e:54:e1:5d:a2:56:
20:05:b2:15:7d:c7:03:60:f5:1c:d8:63:0c:71:b0:65:77:86:
fc:cd:31:7a:33:46:c1:2b:a4:e4:4c:68:d5:fe:3b:d4:8c:2e:
24:ab:aa:e3:3b:c4:be:5d:45:62:ed:ce:b0:c3:90:f9:8e:58:
9f:0c:d7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:36:03 2025 by rpki-client