Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft
File: rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft (raw, json)
Hash identifier: Gx1sXbXGnxaHZuWQhW5zyKFop9vkJryFzg+2qICxs/4=
Subject key identifier: 5C:F0:0C:F7:48:06:61:44:5D:C4:EB:31:C3:E9:C4:43:D8:83:2E:D7
Authority key identifier: AE:A8:4D:7E:64:BA:3E:85:B5:70:36:C7:31:8F:93:CC:3D:94:D1:87
Certificate issuer: /CN=aea84d7e64ba3e85b57036c7318f93cc3d94d187
Certificate serial: 019655A549CECA27D75F92FFF3110C757F58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft
Manifest number: 0EF9
Signing time: Mon 21 Apr 2025 00:00:17 +0000
Manifest this update: Mon 21 Apr 2025 00:00:17 +0000
Manifest next update: Tue 22 Apr 2025 00:00:17 +0000
Files and hashes: 1: 1Z36oEX0lkx8ndMTGV0SwL3pu6s.roa (hash: oLjRdDjCa874D2Ohi+4lYwxZSVZ663VZAUA47G0Sbic=)
2: rqhNfmS6PoW1cDbHMY-TzD2U0Yc.crl (hash: OVll9jWpJ9EY6h+JJF2kawTNe2vaCm7fbjXIjyw1kQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:49:ce:ca:27:d7:5f:92:ff:f3:11:0c:75:7f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea84d7e64ba3e85b57036c7318f93cc3d94d187
Validity
Not Before: Apr 21 00:00:17 2025 GMT
Not After : Apr 22 00:00:17 2025 GMT
Subject: CN=5cf00cf7480661445dc4eb31c3e9c443d8832ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2b:29:81:ac:6f:26:66:22:73:ce:2d:df:de:
1f:cc:6f:95:a7:57:69:ff:c2:67:25:b9:7f:eb:9e:
d1:d1:10:32:d4:c5:76:1c:4b:23:11:11:25:05:9f:
67:47:89:af:98:80:f3:99:2e:30:68:4f:b1:98:72:
b1:29:df:d6:71:fe:91:b6:18:64:69:d1:58:09:f6:
ab:fc:4d:66:7b:07:f8:25:9e:17:3e:4f:99:65:b2:
36:77:f0:49:6a:e2:19:ab:73:c4:2e:b3:1a:f8:4f:
8c:3c:84:bc:31:23:9d:c7:c9:ca:78:55:d8:49:51:
54:0b:66:b7:d6:51:54:ef:45:69:44:5a:5c:97:3f:
85:b3:3d:e0:a9:4d:c7:c3:ab:78:de:97:8a:d8:56:
a0:4d:f3:b0:59:32:f0:8b:50:86:d9:14:cc:66:ca:
7b:2f:50:78:b9:f1:f9:27:3f:a7:39:3f:5d:b1:b7:
60:2a:7b:0a:bc:79:4c:3a:37:71:3d:5b:06:85:69:
54:88:30:c9:67:78:c7:3f:a5:e3:8b:93:3c:43:10:
58:e4:47:34:d8:4c:b1:f0:7b:ca:8b:e3:46:6e:82:
1e:66:a4:31:8c:b0:a8:23:f9:5a:d8:69:4d:66:f2:
62:98:56:ac:21:4a:12:ef:ea:6d:c9:28:4f:83:0e:
4c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F0:0C:F7:48:06:61:44:5D:C4:EB:31:C3:E9:C4:43:D8:83:2E:D7
X509v3 Authority Key Identifier:
keyid:AE:A8:4D:7E:64:BA:3E:85:B5:70:36:C7:31:8F:93:CC:3D:94:D1:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:e8:52:3b:9a:e3:42:c4:e0:84:1f:a4:51:e2:ee:f4:00:56:
92:61:01:9b:c0:a7:e5:c9:02:92:19:de:f2:89:fe:f5:c3:3d:
ab:eb:36:66:c8:f5:72:f3:b7:f3:c6:4f:e0:73:2c:b0:dc:6a:
49:f2:d4:fa:c2:95:50:93:a6:bf:a4:6e:f2:23:bc:41:43:f1:
96:34:c3:e1:c9:22:3a:5b:04:67:56:7b:c8:a8:32:4d:8d:70:
48:ab:17:d8:76:6e:b2:4f:c5:80:50:38:56:de:a7:7f:ac:f2:
3a:3a:95:17:92:b5:63:cd:d2:f0:2f:d6:0b:32:fa:6d:d4:ce:
f9:75:12:27:2f:58:69:1b:1b:18:08:a7:c6:c4:46:24:9a:42:
be:1a:61:f8:a6:de:61:45:92:c4:3a:b2:c4:15:f8:e9:d1:e9:
ce:57:a9:28:ca:57:2e:ef:43:bd:21:9d:85:36:66:1b:19:06:
e8:6b:ca:30:b3:a0:1f:f3:d2:4b:40:c1:82:b4:e0:0b:31:9a:
f6:7b:ed:20:ab:72:62:4a:f8:7a:82:b9:fa:61:ce:7d:dc:4b:
81:99:ad:f7:71:4e:20:41:3d:c5:aa:18:dd:d4:69:e9:2e:e9:
d4:0f:37:61:82:79:01:df:ae:1b:57:45:a1:47:f3:c8:45:67:
49:c1:9f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:54 2025 by rpki-client