Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
File: Q0llhOXPObVodN6Nx3qjpv-eih4.mft (raw, json)
Hash identifier: xAtfV9Ffu3AHezZh7XZiPfxvu1HojxywL6i8HDWfPMI=
Subject key identifier: 98:F3:CA:76:3C:FA:63:CD:FA:51:F7:E0:C2:2B:C5:0C:72:10:9B:BE
Authority key identifier: 43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
Certificate issuer: /CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Certificate serial: 0196A1642441D9A18008F2F2CF1350C5D763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
Manifest number: 11C4
Signing time: Mon 05 May 2025 17:00:16 +0000
Manifest this update: Mon 05 May 2025 17:00:16 +0000
Manifest next update: Tue 06 May 2025 17:00:16 +0000
Files and hashes: 1: Q0llhOXPObVodN6Nx3qjpv-eih4.crl (hash: UR/2SWXPCIB9SETpZAppnbVj4nHKkC+kI8gdzus/h8g=)
2: mF8H3prBEeFw8vv0-wYmE8_MtFk.roa (hash: k6q/MJjxt2Tjd0EikWZoheIRBqYjVQryjlZ0eCvLYRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 17:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:24:41:d9:a1:80:08:f2:f2:cf:13:50:c5:d7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Validity
Not Before: May 5 17:00:16 2025 GMT
Not After : May 6 17:00:16 2025 GMT
Subject: CN=98f3ca763cfa63cdfa51f7e0c22bc50c72109bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:78:a2:8c:19:22:d3:8a:61:29:8e:e0:d7:84:
45:54:b2:1c:87:bf:78:8d:f5:2c:d4:0e:3c:0a:15:
96:a2:44:db:67:06:b6:c4:92:1e:66:bc:d7:1e:51:
34:8e:73:1a:d0:55:3a:18:7f:ea:03:69:a3:58:6a:
ba:22:d1:4b:e9:2c:df:de:7b:cb:0e:b7:39:3f:46:
70:88:3e:38:37:92:a4:91:74:bb:b1:43:7b:03:a9:
18:3b:27:27:55:bd:3f:c8:da:64:31:0f:ea:20:fb:
a2:e8:5d:4b:6b:cf:70:0e:25:b2:aa:56:e8:c9:cf:
02:57:9b:e1:b7:9a:37:26:6f:d2:0a:09:1a:e6:98:
5b:2d:e9:33:f0:7b:64:d1:79:22:d8:38:95:8f:e6:
21:fb:5b:11:49:6f:c4:b2:0c:36:67:41:7a:2f:b4:
56:21:be:96:0b:f3:7c:e3:47:03:dd:b2:97:38:35:
0b:89:36:97:ab:24:c8:91:10:eb:59:df:7a:5b:89:
61:aa:50:3e:7d:c6:e7:24:53:2a:bf:68:66:4a:bd:
a4:01:6d:98:04:7f:99:bf:1f:a0:5f:19:39:e8:26:
7a:d3:c1:29:72:ee:49:09:09:dd:50:58:15:2d:1b:
7e:1c:82:a8:aa:59:db:86:a1:64:b0:99:35:7c:e9:
b3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F3:CA:76:3C:FA:63:CD:FA:51:F7:E0:C2:2B:C5:0C:72:10:9B:BE
X509v3 Authority Key Identifier:
keyid:43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:1d:cb:80:64:6d:fb:7a:10:b9:66:15:df:df:b3:51:53:19:
b2:25:eb:f7:c8:86:41:b5:42:fe:81:4c:04:96:bd:16:a3:45:
cc:b9:ae:2f:ce:22:ba:61:3e:54:dd:bd:99:7b:2e:6e:57:e8:
87:24:2f:c0:db:7f:a3:e1:65:50:04:1b:91:55:93:48:62:44:
8e:b3:71:01:0f:33:71:a4:a0:9b:00:d2:1e:21:15:05:3b:04:
e0:56:6d:72:b0:78:ea:3f:94:3e:36:1b:00:1a:09:8b:43:9b:
92:40:ca:4a:5d:b8:b0:6c:a0:61:52:69:b2:43:aa:22:95:b8:
ca:f0:da:cc:87:66:f4:89:1c:4d:b2:f0:e8:f2:e7:30:28:c0:
98:a7:a6:15:e6:ff:ee:34:6f:47:0a:ba:fa:4f:7a:54:2d:27:
30:2d:45:01:70:4a:09:e8:7d:ee:26:a1:bf:dd:ba:ff:a5:d6:
5e:54:ec:d1:6f:95:4b:66:b9:6e:e5:ff:3d:24:a4:13:4e:1c:
56:4f:39:cc:c4:57:bf:e4:4f:b0:5f:5b:f7:4e:3d:7a:d2:c6:
c9:c1:88:4f:60:92:36:b7:28:ad:b0:7f:b7:c4:77:1b:ae:f3:
3e:12:82:82:b8:c1:c6:82:52:aa:e0:84:a4:4c:59:3f:60:e7:
fd:aa:fc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:33:15 2025 by rpki-client