Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft
File: qqlyrDzBD3FspJhQRaXwgktgyh8.mft (raw, json)
Hash identifier: 74GjLH+NI2MACCIXdnZ+gAh49v9UlgGrbf6reXlzCB4=
Subject key identifier: 7D:B1:83:E2:89:83:1F:4F:20:71:62:80:F2:F5:23:C9:54:2D:35:CB
Authority key identifier: AA:A9:72:AC:3C:C1:0F:71:6C:A4:98:50:45:A5:F0:82:4B:60:CA:1F
Certificate issuer: /CN=aaa972ac3cc10f716ca4985045a5f0824b60ca1f
Certificate serial: 01965E3AE3D6D2AC46A46B4C26CB7A36BD4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqlyrDzBD3FspJhQRaXwgktgyh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft
Manifest number: 0E
Signing time: Tue 22 Apr 2025 16:00:39 +0000
Manifest this update: Tue 22 Apr 2025 16:00:39 +0000
Manifest next update: Wed 23 Apr 2025 16:00:39 +0000
Files and hashes: 1: qqlyrDzBD3FspJhQRaXwgktgyh8.crl (hash: A+zdrLLk3GjtfYOuKBalO7Z9tdawmWPHsLaXn/E4QFw=)
2: yIGIxees9MuARoWN6t0oVINh_4A.roa (hash: geAsTIsbC4XBTKHwgmaJ0ZNmwh/Z8F8NnaAnGD8ONe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqlyrDzBD3FspJhQRaXwgktgyh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:3a:e3:d6:d2:ac:46:a4:6b:4c:26:cb:7a:36:bd:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa972ac3cc10f716ca4985045a5f0824b60ca1f
Validity
Not Before: Apr 22 16:00:39 2025 GMT
Not After : Apr 23 16:00:39 2025 GMT
Subject: CN=7db183e289831f4f20716280f2f523c9542d35cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:29:a5:da:ba:74:52:22:f2:90:6b:15:97:82:
d0:71:59:25:f1:1e:bf:ec:68:b6:e8:65:96:f3:23:
cc:72:79:2f:9c:76:3a:99:95:cc:5b:c0:38:0c:df:
68:29:10:9d:fa:e1:9f:f5:9d:89:60:94:84:b9:ff:
3b:95:d0:8f:5f:32:ce:7d:c7:c1:87:cb:d9:02:eb:
e6:aa:61:41:3e:85:99:83:ae:e0:fc:2d:84:99:e9:
06:8a:d0:d5:cf:5f:9c:42:61:8b:f7:29:21:53:ba:
61:f1:b3:a5:db:ba:a0:68:e1:cb:1e:46:af:a8:d3:
a4:35:29:64:a1:ea:bd:0a:6c:95:48:69:69:19:3e:
4e:e9:82:2e:24:41:f3:c7:65:37:d2:7e:46:29:25:
a1:f0:37:fb:4e:2a:dd:db:3f:55:f6:f4:f1:c7:5a:
73:e9:69:ce:67:32:4b:2c:f9:00:3d:6b:a1:53:ef:
72:a4:9f:db:cf:91:1d:44:92:dd:6e:fc:2e:71:65:
db:11:7f:88:3b:a0:9d:a0:73:9b:93:43:83:45:ae:
28:4a:af:df:0f:d2:1e:ea:ed:9a:55:72:30:06:14:
31:2d:c0:19:76:e3:64:f6:98:6f:20:1c:04:95:a8:
7c:91:b8:09:db:87:a3:4a:af:cd:7a:d6:3f:63:f7:
8b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B1:83:E2:89:83:1F:4F:20:71:62:80:F2:F5:23:C9:54:2D:35:CB
X509v3 Authority Key Identifier:
keyid:AA:A9:72:AC:3C:C1:0F:71:6C:A4:98:50:45:A5:F0:82:4B:60:CA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqlyrDzBD3FspJhQRaXwgktgyh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:33:cd:14:e5:e1:6a:a4:7f:96:d1:ae:ed:05:54:df:a7:96:
bc:5f:d1:0a:b0:2b:cb:cc:83:df:e0:ea:43:14:d3:5f:f7:b6:
73:e7:84:e5:88:e3:86:cb:41:0b:56:f4:b1:59:c8:42:f6:f2:
ed:0b:55:89:3c:d4:8c:27:e9:e8:16:3b:41:2a:ff:a4:6b:82:
1f:be:e1:1a:cd:1d:ca:b6:1a:67:04:00:10:ea:69:4a:1b:db:
a8:76:08:38:82:fb:7a:7b:95:10:71:07:ed:b9:5a:7a:4d:16:
f8:4a:91:3e:99:ff:5d:c1:27:ed:5b:cd:cc:bb:0e:e9:63:5e:
1c:7a:2a:f5:a0:85:44:9a:d9:e0:18:9c:db:53:c7:e0:34:cf:
e8:32:10:cc:a8:23:17:82:c2:ec:b8:ff:c7:e4:99:bf:ed:72:
be:ab:9c:f1:fe:c3:c2:a5:e2:bb:a5:06:03:78:e4:05:1e:97:
13:e1:98:74:9d:be:2d:6e:e5:c8:10:80:64:bd:07:09:a7:ea:
6f:09:7d:ae:2d:b1:62:88:1f:f7:16:1a:e5:0e:8f:1b:8b:d5:
be:ac:3a:19:1d:66:19:54:cb:b2:a2:5b:2f:43:c4:56:07:88:
09:2e:f6:97:7a:b9:ff:99:34:2e:8c:6d:a3:46:bd:b5:95:92:
d4:7e:b1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:05:19 2025 by rpki-client