Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft
File: qw8tGCnW-40kf6TpZY6hfwbACwU.mft (raw, json)
Hash identifier: wdsqd5UaiDgBi+zBbZKWfD/LUFz7pRWEWZajo7bGa4k=
Subject key identifier: 6D:C5:0F:66:5F:9F:83:5E:CB:CE:5B:B4:F9:27:0D:7F:61:79:B6:AD
Authority key identifier: AB:0F:2D:18:29:D6:FB:8D:24:7F:A4:E9:65:8E:A1:7F:06:C0:0B:05
Certificate issuer: /CN=ab0f2d1829d6fb8d247fa4e9658ea17f06c00b05
Certificate serial: 019658DD6D46D2CFF1CC46A389DFF40B2230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft
Manifest number: 0395
Signing time: Mon 21 Apr 2025 15:00:28 +0000
Manifest this update: Mon 21 Apr 2025 15:00:28 +0000
Manifest next update: Tue 22 Apr 2025 15:00:28 +0000
Files and hashes: 1: OUpskfGQwP1azsM6n4Ec-VCqNso.roa (hash: +d2WLz7J+vMS5D/Rs6fGhF8erps5E2C6DQvq3JVrWbY=)
2: qw8tGCnW-40kf6TpZY6hfwbACwU.crl (hash: iOxPhC+GwQIl0dmO2ZC47txbs6P64gKbLrUs5UfE5WE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:dd:6d:46:d2:cf:f1:cc:46:a3:89:df:f4:0b:22:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0f2d1829d6fb8d247fa4e9658ea17f06c00b05
Validity
Not Before: Apr 21 15:00:28 2025 GMT
Not After : Apr 22 15:00:28 2025 GMT
Subject: CN=6dc50f665f9f835ecbce5bb4f9270d7f6179b6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:35:bc:55:b2:49:c1:32:29:a3:5a:97:c8:db:
38:4c:f0:1e:60:95:3c:65:74:47:ba:4e:9e:e4:b2:
a2:e6:66:0f:dc:9d:36:e5:c3:76:ec:63:76:cb:4e:
4d:1f:8b:08:3d:c5:31:ab:f6:06:8f:50:f3:67:af:
fb:96:7e:87:59:12:f3:00:5a:5b:16:fe:62:83:f4:
6e:93:98:83:8f:57:96:51:70:60:b2:4d:48:ba:a6:
4d:db:9c:2d:76:76:dd:e8:13:a4:08:d8:96:7e:2a:
e0:bd:08:bc:ec:c4:7c:b1:30:e7:5b:2f:eb:3d:02:
67:1b:35:f6:f5:1f:4b:8e:4a:8f:e2:91:93:78:5f:
4a:f2:f4:f8:53:fc:6f:47:8a:94:01:98:4c:15:01:
5c:b4:ec:e2:55:57:c6:7d:3b:a6:88:79:5b:de:0a:
0a:0f:4a:e7:ba:3e:87:a4:11:ff:e5:2d:fe:42:c4:
39:68:8c:99:34:89:a9:71:3a:03:b4:f8:53:3b:20:
5a:15:6c:72:a0:7d:42:86:52:4f:e7:b1:b7:c9:c0:
a8:b0:47:06:16:e8:b5:1e:2f:1c:6f:5b:2c:ed:41:
0a:51:24:e0:32:d3:b0:91:18:1e:d0:fc:92:85:0d:
fb:cd:6c:92:b8:19:5c:70:67:4d:ec:65:50:6d:9b:
12:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C5:0F:66:5F:9F:83:5E:CB:CE:5B:B4:F9:27:0D:7F:61:79:B6:AD
X509v3 Authority Key Identifier:
keyid:AB:0F:2D:18:29:D6:FB:8D:24:7F:A4:E9:65:8E:A1:7F:06:C0:0B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:4e:0f:f1:d9:90:e1:6e:a3:9c:5e:43:c7:13:f8:31:2c:cd:
57:1d:96:8c:4f:05:51:5b:28:e5:88:f9:9a:fa:f7:04:f1:4e:
b7:74:87:3a:fe:f7:7b:4f:90:0f:30:54:86:a9:d4:a3:86:a1:
32:c8:8c:15:dd:f2:35:f1:cf:34:44:0b:90:ff:1e:8d:df:80:
2a:d7:17:5d:6a:dc:b2:17:43:66:c2:65:9c:97:a5:8a:25:4a:
b3:5c:54:17:08:fd:3b:0b:ee:36:03:a7:f1:20:64:f3:65:5e:
b0:0e:cc:09:35:30:29:e2:c4:70:71:40:07:4f:e1:0e:81:e1:
19:73:54:70:a2:05:32:08:fe:f0:30:95:53:79:a6:f0:e5:c2:
fb:02:4b:6f:0f:2d:68:a3:b1:2b:3b:78:c3:04:e0:b9:30:92:
27:8a:2e:96:ab:47:f1:64:6c:7a:d1:98:5f:9a:fc:c9:06:74:
e9:25:0c:c5:79:af:00:12:f4:f7:ba:63:93:2f:7d:e5:77:e8:
39:73:8e:1c:6e:17:b2:97:07:e4:99:ba:4d:bf:78:bf:d3:db:
b6:30:f3:6a:b7:3c:fc:41:51:d4:1a:fa:9d:ac:37:de:d8:16:
b1:b6:2d:02:19:80:a8:f7:76:c8:01:99:fb:b8:34:fe:cd:07:
94:e8:01:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:28:31 2025 by rpki-client