Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.mft
File: qklDGDthG-Ogd1OCUJSQBIsK1zg.mft (raw, json)
Hash identifier: 04C4EBC5XJyvg4Cz6HbcntYgnrsMR30eWkC/y5ZwNaw=
Subject key identifier: 20:A2:06:EA:77:57:A8:19:B9:32:FB:AE:07:3B:27:49:8C:47:41:75
Authority key identifier: AA:49:43:18:3B:61:1B:E3:A0:77:53:82:50:94:90:04:8B:0A:D7:38
Certificate issuer: /CN=aa4943183b611be3a0775382509490048b0ad738
Certificate serial: 0196545C5D324C9CEBDE7C7240A193DE9D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qklDGDthG-Ogd1OCUJSQBIsK1zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 18:01:01 +0000
Manifest this update: Sun 20 Apr 2025 18:01:01 +0000
Manifest next update: Mon 21 Apr 2025 18:01:01 +0000
Files and hashes: 1: _b9uzDBnaBhrr4RiKYd-HrjhIyY.roa (hash: zuVo5YCjE6oxIWEPlMV6dA4fTWapSfHiFlgPsUG/qhk=)
2: qklDGDthG-Ogd1OCUJSQBIsK1zg.crl (hash: 5+NVdzjjbn9ln/5N1vvVwKiQGVfhLeFvQ6aXYiReCcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qklDGDthG-Ogd1OCUJSQBIsK1zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:5d:32:4c:9c:eb:de:7c:72:40:a1:93:de:9d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa4943183b611be3a0775382509490048b0ad738
Validity
Not Before: Apr 20 18:01:01 2025 GMT
Not After : Apr 21 18:01:01 2025 GMT
Subject: CN=20a206ea7757a819b932fbae073b27498c474175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d3:a2:a4:05:f9:90:d1:90:0d:84:fd:22:a0:
15:ba:cf:17:3f:75:cd:fa:62:b5:87:72:04:49:a8:
04:25:d2:f1:4a:84:1e:3a:0f:58:f6:83:ad:ad:7d:
dd:48:27:0b:d1:26:4e:3e:db:8b:ef:f6:16:4a:6d:
aa:e0:90:34:62:5c:27:0d:5b:e4:fc:61:a8:f6:56:
ad:81:37:aa:bf:1a:f8:eb:00:31:07:c9:bb:6b:66:
be:6b:8e:ef:24:aa:75:0e:6a:da:8c:4b:64:6b:6e:
c8:64:56:7e:f8:a3:a4:c0:08:8e:5d:1e:35:ae:a8:
7c:90:17:52:24:b5:71:74:6c:b4:86:cb:d5:ce:e8:
6c:10:06:1d:79:09:aa:b0:1e:ad:c6:9a:bd:33:d5:
30:40:7a:33:a1:c7:6d:a1:58:32:cc:51:2a:34:a0:
57:a7:81:09:8f:8e:e0:84:af:08:fd:00:10:5f:5f:
cf:d2:4b:d1:26:85:a4:40:f1:19:c1:fc:75:cd:04:
dd:54:3c:ec:ef:d4:a1:09:74:1d:15:e2:fa:1b:73:
88:f7:81:cb:12:4c:bd:76:17:92:80:3b:19:7a:35:
ec:f8:1c:65:f5:f7:ce:ea:69:62:1c:5a:88:33:15:
54:20:fe:b8:ab:4a:82:f5:e7:d9:38:7d:6c:5f:b0:
0a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A2:06:EA:77:57:A8:19:B9:32:FB:AE:07:3B:27:49:8C:47:41:75
X509v3 Authority Key Identifier:
keyid:AA:49:43:18:3B:61:1B:E3:A0:77:53:82:50:94:90:04:8B:0A:D7:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qklDGDthG-Ogd1OCUJSQBIsK1zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:9b:77:1a:ad:8f:9c:50:32:a9:1d:50:e3:95:c3:d4:3a:55:
ba:96:59:8c:e8:32:e2:e1:e0:33:2f:d0:34:7c:5b:ac:9b:0e:
31:24:fe:9a:13:9b:66:73:83:af:10:69:26:4d:85:0a:39:03:
25:bf:0b:09:ee:0e:47:ca:1d:93:7e:9f:50:12:57:9f:c2:d4:
d2:e2:37:b9:4e:e6:eb:77:08:a9:9a:74:ce:28:8c:83:8d:5e:
02:79:eb:ae:a1:48:92:a5:4c:71:58:86:f6:c4:89:2b:e5:f5:
e3:4a:85:98:19:ca:bb:87:1e:e0:4d:88:71:67:57:62:fb:30:
c9:e1:96:53:55:f3:62:20:7a:9a:4f:16:90:5b:ae:ad:12:f8:
b7:89:42:df:50:67:00:c9:48:3c:29:eb:5b:1a:b7:fc:0c:49:
e5:14:4c:9b:eb:2b:f2:5e:0e:74:3e:0a:89:67:71:58:ee:6a:
ce:a1:2f:7f:e6:b0:e3:7e:04:4a:a6:25:33:8b:8d:90:51:d5:
5c:a2:39:5a:f9:21:d6:95:9c:e8:cf:8b:3d:4c:f6:1c:05:cd:
4e:32:6f:bc:a3:54:f9:f5:08:e0:13:ee:ed:a0:fd:d4:a1:c2:
71:65:18:11:f7:19:ac:e7:87:c3:07:56:46:57:0c:c1:fe:3c:
e9:81:85:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:24:05 2025 by rpki-client