Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
File: QWbAb_SeBTSAniNABbqlzKfhRqg.mft (raw, json)
Hash identifier: vxbc1AryDS2mavogW3QSIsq0JWVfqMyYX53gQW8JUII=
Subject key identifier: B0:D4:A9:6E:A6:84:6E:C8:D2:C2:38:93:1D:DC:8A:7E:46:07:B0:45
Authority key identifier: 41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
Certificate issuer: /CN=4166c06ff49e0534809e234005baa5cca7e146a8
Certificate serial: 01965982817DC8B9330B66CDD98DF0280438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
Manifest number: 10
Signing time: Mon 21 Apr 2025 18:00:47 +0000
Manifest this update: Mon 21 Apr 2025 18:00:47 +0000
Manifest next update: Tue 22 Apr 2025 18:00:47 +0000
Files and hashes: 1: 9W9gYghW6_iCN3HlIGpaoOJHZhk.roa (hash: /VOahTPt9Fh6RgLRa78P8pgoK/6N4p3sHujeTUCmYBc=)
2: QWbAb_SeBTSAniNABbqlzKfhRqg.crl (hash: JhMedbCl7v/1exw1Y+pfchLk5788bMLpfRGiOhB9rAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:81:7d:c8:b9:33:0b:66:cd:d9:8d:f0:28:04:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4166c06ff49e0534809e234005baa5cca7e146a8
Validity
Not Before: Apr 21 18:00:47 2025 GMT
Not After : Apr 22 18:00:47 2025 GMT
Subject: CN=b0d4a96ea6846ec8d2c238931ddc8a7e4607b045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3f:76:f8:32:f5:63:bc:3d:1e:15:7b:0c:17:
6d:2d:4c:7e:47:37:da:36:79:36:54:45:8f:c8:40:
0f:1c:6a:51:54:05:d0:2c:e9:d0:69:f0:de:8d:cb:
89:9a:14:d0:85:df:e7:dc:fd:ed:09:b9:a4:e6:e2:
f0:5a:ad:79:0f:37:c4:6e:f1:36:47:b0:f9:42:5d:
04:27:54:c1:74:11:21:b4:d7:22:55:cc:b1:ee:30:
2a:c3:3c:dd:28:18:ef:15:67:97:7e:a5:22:7c:e4:
e9:8e:19:80:44:cb:7a:cd:66:29:4d:30:30:fa:4e:
de:1a:00:a1:bb:d7:a0:96:75:e3:d7:d8:52:69:54:
7f:d6:94:af:5f:da:0c:20:bb:a1:e7:9e:0c:2a:87:
67:10:99:eb:4c:40:ef:df:e9:52:12:3a:cc:e9:ae:
71:61:e4:51:75:e6:ac:a5:db:a2:77:43:06:42:2b:
28:ca:46:70:40:a7:59:69:30:44:6d:45:23:77:14:
74:c9:c7:e5:a0:51:21:1f:e4:f9:01:77:46:9b:cd:
5e:06:89:1a:af:ff:ab:32:c0:ac:a1:f7:c2:60:5d:
92:7c:f2:00:c8:1a:d7:73:a2:aa:92:c8:77:18:4e:
ea:f2:3a:1c:85:03:b9:d3:c1:80:4d:11:a8:8f:37:
c0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D4:A9:6E:A6:84:6E:C8:D2:C2:38:93:1D:DC:8A:7E:46:07:B0:45
X509v3 Authority Key Identifier:
keyid:41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d9:1a:09:fc:c3:ef:0f:4c:c7:80:35:28:36:a8:44:35:c5:
de:e8:22:a2:ca:6d:25:5b:2f:04:e7:95:0d:e0:97:e7:8f:49:
43:56:29:21:55:e0:f5:da:4e:bd:89:6b:86:ef:f4:3a:40:3a:
aa:bd:cc:63:ef:4e:2d:3a:db:e0:98:67:bb:80:76:1d:bb:c3:
34:6c:13:b7:61:ad:c1:c6:4b:65:ab:22:de:0c:db:f3:a0:63:
e5:40:c8:36:83:18:7a:a5:8b:ce:2c:14:e4:a0:3b:75:e9:bb:
c7:4d:36:a0:7b:28:a9:07:a7:7e:43:62:ba:68:9f:90:a2:f1:
10:e5:70:0b:c0:99:c5:28:1b:6c:1a:28:a4:70:b2:a9:87:9e:
6a:0d:67:e9:3e:4d:80:49:05:32:6c:67:30:b4:39:4e:88:5c:
7a:9e:a0:84:25:c8:d4:80:14:1a:f0:74:40:4c:86:84:d7:03:
61:1c:6d:d7:e8:01:d7:58:fe:99:0c:81:5d:44:a0:7f:79:b7:
f9:38:7e:63:7d:a2:59:ac:7f:cb:6b:39:84:c3:7a:28:82:e7:
57:ce:23:5e:ea:49:46:69:bd:d0:e5:3d:77:4e:1b:f1:3b:fe:
94:18:27:38:18:cc:0c:a8:53:b3:38:f9:d8:12:b7:fa:a8:60:
fb:b9:46:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:26:04 2025 by rpki-client