Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.mft
File: qBVYhT_rx52BPrLAzly3NvtzwN8.mft (raw, json)
Hash identifier: W3Fr4SfV7W4ki0QOeQfFXBZWwgfEczuewDXByPIbwcE=
Subject key identifier: 8C:2C:9A:93:44:B8:CC:DA:0F:C5:57:0B:D3:F2:55:EE:AC:DE:97:F6
Authority key identifier: A8:15:58:85:3F:EB:C7:9D:81:3E:B2:C0:CE:5C:B7:36:FB:73:C0:DF
Certificate issuer: /CN=a81558853febc79d813eb2c0ce5cb736fb73c0df
Certificate serial: 0196379AF07F7AFC1EA7EF7094583D6A5449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBVYhT_rx52BPrLAzly3NvtzwN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.mft
Manifest number: 1296
Signing time: Tue 15 Apr 2025 04:00:23 +0000
Manifest this update: Tue 15 Apr 2025 04:00:23 +0000
Manifest next update: Wed 16 Apr 2025 04:00:23 +0000
Files and hashes: 1: LgqWUP0536hPg5BCpisRq1CfwzE.roa (hash: vMIIsO4xKqj7JGP30ELt6Q8iCAR8hVZNP/9djB0t8ro=)
2: dJRAHiOGAXHi9ZK3B82VqToDqnk.roa (hash: uJbxE7UmTFUvOg3MJeibMc8I9N/6ZLAzoiFFQ1kOB8U=)
3: qBVYhT_rx52BPrLAzly3NvtzwN8.crl (hash: 40FTQvJ8kSUQ79VnFIcZ/QB+eF1Ul9nMfR7EAt45G0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBVYhT_rx52BPrLAzly3NvtzwN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:37:9a:f0:7f:7a:fc:1e:a7:ef:70:94:58:3d:6a:54:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81558853febc79d813eb2c0ce5cb736fb73c0df
Validity
Not Before: Apr 15 04:00:23 2025 GMT
Not After : Apr 16 04:00:23 2025 GMT
Subject: CN=8c2c9a9344b8ccda0fc5570bd3f255eeacde97f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:95:58:46:db:cc:eb:ad:12:24:44:22:cf:85:
45:58:26:53:68:e4:e1:65:b7:e9:f3:7a:f4:d1:7c:
2a:14:7d:36:5f:b8:e4:7e:52:12:32:b3:3f:51:0f:
51:ae:6b:84:62:81:75:ef:30:a5:af:da:21:08:9f:
f2:d9:3e:9b:b2:bf:f8:ae:2e:ff:d7:f6:3e:ea:07:
b1:b2:7c:46:96:0d:aa:d9:b7:81:b4:c1:26:27:19:
5b:97:8c:c6:6f:64:51:ad:36:48:2e:21:96:9b:2f:
93:8e:d4:59:38:92:9c:ac:93:6a:df:82:c6:72:44:
2d:bf:b2:af:bf:fb:07:b1:4a:dc:b6:da:e4:c0:02:
d3:65:50:db:63:dd:2d:ac:3e:d2:5c:ab:64:01:ca:
bd:ce:8a:0b:f7:fa:1a:8b:ba:ef:5a:f2:fa:16:5d:
8e:9f:54:fa:17:ed:ac:cc:d4:4a:32:a3:30:75:39:
8c:8a:64:a2:67:41:72:34:f6:66:16:4a:26:8a:3b:
11:6b:07:d6:8b:70:a3:3f:16:ad:ca:27:69:e1:c1:
6d:76:d9:08:9f:c3:67:b0:3b:98:ca:92:3f:dc:55:
66:d8:9d:ee:4f:9c:14:dd:b3:ca:29:16:26:ae:f3:
8c:69:94:a2:67:40:72:4b:b4:03:7d:43:1d:e4:77:
6e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2C:9A:93:44:B8:CC:DA:0F:C5:57:0B:D3:F2:55:EE:AC:DE:97:F6
X509v3 Authority Key Identifier:
keyid:A8:15:58:85:3F:EB:C7:9D:81:3E:B2:C0:CE:5C:B7:36:FB:73:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBVYhT_rx52BPrLAzly3NvtzwN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8c:1f:63:fc:db:16:20:55:2c:60:f4:f5:38:4e:ef:45:c1:
ce:7f:3c:1d:50:92:17:81:22:e7:ea:df:9a:0c:94:7e:d2:17:
0e:2c:3a:0b:e4:f3:79:f0:62:3d:ba:7d:6e:fe:68:b7:95:4d:
e8:bf:db:ee:cb:f7:28:0a:a0:a9:7e:f0:80:09:ba:ed:e4:d5:
d1:c6:e0:26:ee:5b:f8:ce:c0:32:fb:57:25:bc:9c:0a:5c:39:
50:3b:6f:18:21:a3:82:30:86:4a:9f:1c:44:3b:4f:62:32:17:
17:93:8f:58:f6:af:a7:00:ae:45:67:30:0b:bd:8c:65:a8:5a:
f5:87:b6:cf:d2:9e:ec:2d:4e:ac:74:58:01:30:04:d1:e7:67:
13:0a:ad:a7:08:25:51:5c:f4:02:7d:ad:64:61:5c:99:bc:69:
e2:ef:20:70:0f:c2:8b:25:07:35:d6:e7:df:12:6b:32:27:3c:
19:cd:18:f5:09:1f:7e:8b:d4:0b:35:81:e3:84:cf:70:d0:e8:
52:ed:56:2a:28:d0:cd:6b:32:b2:0d:79:42:f2:ef:50:0f:6b:
75:d9:28:b1:eb:45:96:6b:65:ea:ec:46:3a:d1:1c:79:87:e2:
cb:08:a7:2d:d7:58:c6:29:5b:ee:1b:4c:bb:3c:c3:b9:14:01:
ec:84:55:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:37:15 2025 by rpki-client