Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4a3068-ea9d-4966-be55-7943d9a79bd2/1/Qn35XuEKKtTq8ILfrBWYOLN9NFA.mft
File: Qn35XuEKKtTq8ILfrBWYOLN9NFA.mft (raw, json)
Hash identifier: EYhflIKMzEbHc4G/J7MwBXMzlb1sLq/hSyarFNCO8oQ=
Subject key identifier: 17:01:A2:D1:46:5E:5C:28:0B:10:CF:F4:76:11:EC:C3:0A:64:5A:B4
Authority key identifier: 42:7D:F9:5E:E1:0A:2A:D4:EA:F0:82:DF:AC:15:98:38:B3:7D:34:50
Certificate issuer: /CN=427df95ee10a2ad4eaf082dfac159838b37d3450
Certificate serial: 01965EDFA8818AD0EA9F74123A850610DE9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qn35XuEKKtTq8ILfrBWYOLN9NFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a3068-ea9d-4966-be55-7943d9a79bd2/1/Qn35XuEKKtTq8ILfrBWYOLN9NFA.mft
Manifest number: 055A
Signing time: Tue 22 Apr 2025 19:00:38 +0000
Manifest this update: Tue 22 Apr 2025 19:00:38 +0000
Manifest next update: Wed 23 Apr 2025 19:00:38 +0000
Files and hashes: 1: BR-wwst0Mwoj4cW4aMMLkST0T08.roa (hash: KhuoTa1EwW+NDwJopflLn+SOxpsU8qTU0jm6Bsplu/Y=)
2: Qn35XuEKKtTq8ILfrBWYOLN9NFA.crl (hash: NQ4oYMa8usQT9cg+F/bK2+5LkGRbYnIM9QWUm/7Vwng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a3068-ea9d-4966-be55-7943d9a79bd2/1/Qn35XuEKKtTq8ILfrBWYOLN9NFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4a3068-ea9d-4966-be55-7943d9a79bd2/1/Qn35XuEKKtTq8ILfrBWYOLN9NFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qn35XuEKKtTq8ILfrBWYOLN9NFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:df:a8:81:8a:d0:ea:9f:74:12:3a:85:06:10:de:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427df95ee10a2ad4eaf082dfac159838b37d3450
Validity
Not Before: Apr 22 19:00:38 2025 GMT
Not After : Apr 23 19:00:38 2025 GMT
Subject: CN=1701a2d1465e5c280b10cff47611ecc30a645ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8d:26:0e:d0:77:02:51:a9:d5:32:03:37:6d:
48:2a:1b:87:e1:1d:2e:71:b8:5b:9a:28:7a:93:0a:
1c:57:99:b9:e5:6e:4f:b8:40:ab:70:1e:39:7f:fa:
89:01:e9:2d:24:87:05:78:e6:f1:7d:c5:06:af:7b:
4f:70:3a:b7:55:bc:47:7d:3c:8f:26:61:8e:c6:f7:
5c:76:ae:65:ae:cd:32:d9:91:2c:44:25:95:b4:dc:
e0:f9:03:cd:cf:14:59:a9:c1:b1:39:a5:80:49:50:
87:df:59:cf:e1:f1:d4:e9:ca:66:51:7e:57:a7:ff:
1a:1b:9b:c5:77:72:b2:eb:1e:f1:fe:39:bd:b6:76:
7c:b1:28:51:28:23:b1:6d:61:e9:27:f1:61:d2:75:
9c:b4:ae:9e:88:2a:b0:8d:41:e1:97:1d:af:ef:d4:
48:bb:99:17:91:9d:4b:a3:a0:60:8c:cc:21:b4:42:
3a:bd:93:b3:b6:7e:37:c1:33:88:d8:3c:c7:28:73:
5a:78:c9:e0:77:aa:f7:42:b4:d3:d4:b6:a9:24:23:
34:c3:9c:ea:66:47:81:c4:07:c7:d9:05:d4:ab:15:
82:00:37:3a:61:be:e3:e8:8c:89:7a:b2:43:ab:3d:
83:c8:c3:d2:84:64:ce:e2:e6:8b:d4:68:42:65:41:
fb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:01:A2:D1:46:5E:5C:28:0B:10:CF:F4:76:11:EC:C3:0A:64:5A:B4
X509v3 Authority Key Identifier:
keyid:42:7D:F9:5E:E1:0A:2A:D4:EA:F0:82:DF:AC:15:98:38:B3:7D:34:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qn35XuEKKtTq8ILfrBWYOLN9NFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a3068-ea9d-4966-be55-7943d9a79bd2/1/Qn35XuEKKtTq8ILfrBWYOLN9NFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a3068-ea9d-4966-be55-7943d9a79bd2/1/Qn35XuEKKtTq8ILfrBWYOLN9NFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:09:14:3b:a2:b8:55:d1:97:fc:3a:2a:04:ac:1a:2c:0c:fe:
d7:78:62:f5:08:c9:42:05:22:ca:54:06:6b:6b:5b:ea:8f:be:
67:74:1f:cf:e8:c7:a5:7d:4e:5a:cb:58:41:70:05:22:38:be:
84:6f:4d:5b:e1:5f:4d:1a:41:2f:f3:bb:3d:df:95:24:aa:b9:
b0:aa:58:e4:e6:02:a0:21:c3:78:d7:7b:f7:37:ec:ba:a7:e1:
c6:67:f7:db:83:8b:08:a4:4e:1a:30:be:21:a0:87:94:ef:72:
d7:8a:fa:a3:0b:a1:38:f8:08:be:6f:87:f2:40:9d:ac:e7:dc:
f8:43:e9:8f:24:27:66:c1:e1:5e:5c:f7:4a:f7:56:ce:49:ac:
64:14:7e:1d:f5:0c:55:d3:7d:3a:85:a6:af:6e:77:90:2f:53:
60:08:5e:28:78:26:75:03:39:90:91:b2:0f:04:e8:5b:ba:9b:
d6:f3:05:94:cb:be:03:74:26:57:1a:f5:2b:8c:47:49:ec:eb:
2d:e8:44:6c:67:8a:c9:04:36:61:a0:40:38:9c:bc:fb:88:ef:
d1:06:09:46:88:9e:3a:1f:db:d9:5b:a6:72:5f:ad:25:5b:6e:
b6:66:6f:3c:7f:0a:5e:2c:d1:b1:ff:13:d5:c9:fe:4e:43:e9:
b4:a3:75:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:01:29 2025 by rpki-client