Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
File: qoXGfyIwng2EwwtUJSlyUyhgUVE.mft (raw, json)
Hash identifier: 1GyZ2TAN0LX7hgu1gkKzENEeGbVS73T/l/Ket4SLtCo=
Subject key identifier: E4:E4:F4:2A:0C:F9:B1:A0:A9:6E:84:B0:EA:DB:A8:38:0F:93:5A:BB
Authority key identifier: AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51
Certificate issuer: /CN=aa85c67f22309e0d84c30b542529725328605151
Certificate serial: 019653492EE8A9378DB38339B34E2807E087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
Manifest number: 0B7E
Signing time: Sun 20 Apr 2025 13:00:27 +0000
Manifest this update: Sun 20 Apr 2025 13:00:27 +0000
Manifest next update: Mon 21 Apr 2025 13:00:27 +0000
Files and hashes: 1: U6h0E3CpWcLE4IcpdPD5N0_flWE.roa (hash: /MeOIU5IzJfeECJ9wAs+zMCbOflzuiKPgRuM31+tyrU=)
2: qoXGfyIwng2EwwtUJSlyUyhgUVE.crl (hash: ITr5IL0H/9nbCp3b8lfBe4quSPYySsH7PZF2ZZYqU0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:2e:e8:a9:37:8d:b3:83:39:b3:4e:28:07:e0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa85c67f22309e0d84c30b542529725328605151
Validity
Not Before: Apr 20 13:00:27 2025 GMT
Not After : Apr 21 13:00:27 2025 GMT
Subject: CN=e4e4f42a0cf9b1a0a96e84b0eadba8380f935abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2d:1c:19:92:4e:61:f1:4c:1f:4f:a2:b7:86:
48:74:e6:b9:42:dc:25:7a:a3:e6:b7:45:57:4b:6d:
1d:21:87:73:ba:96:e6:6d:07:0a:d2:af:59:45:2d:
24:ba:af:0f:09:a0:2a:e7:c7:e0:a1:5d:0d:2a:b9:
6b:bd:bc:9a:95:1b:50:e3:6b:2b:bb:ad:64:38:64:
78:48:3d:9a:ce:94:c8:ec:df:a5:6f:8d:dd:ed:97:
02:93:c1:9d:d7:17:1a:3a:3c:34:dd:37:fb:c5:9b:
18:36:3b:34:39:4e:6f:b1:cb:12:a6:58:9e:9c:70:
9c:4e:85:3e:6b:10:f9:16:a0:42:3c:6e:91:16:93:
00:ce:1a:27:51:c2:8f:95:48:cd:cc:da:0f:0b:c2:
38:05:b4:d7:88:68:39:86:b8:e3:41:d4:09:35:71:
ff:45:92:24:10:6e:fb:76:50:3f:53:c8:78:68:f7:
a8:a2:f9:74:09:82:e4:35:0e:3e:9d:63:33:39:6f:
e5:e9:e9:8e:6c:33:82:b5:f5:01:45:8e:bf:38:fa:
b6:b9:d7:36:e2:a3:0e:60:53:6b:4a:97:bb:e3:fa:
b6:5c:ca:29:6d:75:1d:52:46:96:55:a4:14:ff:b3:
84:8f:34:d8:21:89:e3:e4:35:82:32:32:f4:56:0c:
d4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E4:F4:2A:0C:F9:B1:A0:A9:6E:84:B0:EA:DB:A8:38:0F:93:5A:BB
X509v3 Authority Key Identifier:
keyid:AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:7f:2b:2a:1e:26:c3:d5:10:c3:fe:ae:a1:82:41:2d:3e:9c:
4d:db:f5:89:9c:ad:b1:99:38:5f:15:69:37:9b:2d:b9:48:3c:
97:1e:98:34:7f:ca:90:bf:00:ee:87:3f:11:15:3d:1f:a6:d7:
82:a3:29:79:6c:ee:22:22:5b:03:67:73:13:e7:24:8c:76:6c:
9f:30:44:ba:84:2e:3d:9e:75:af:42:78:6b:2f:e3:49:23:c3:
f5:4e:46:71:ac:24:ad:0e:c9:86:a6:94:6d:7b:60:97:c1:2e:
fe:e2:a9:c2:6a:6f:5a:9c:e2:67:9f:6d:b6:a3:38:9b:81:a7:
b9:77:d4:a7:a3:10:da:a9:d3:85:55:fc:5b:09:ae:44:ce:88:
7f:8b:6f:9a:c9:82:c1:fc:f7:37:bc:72:c7:1c:d8:09:8a:3b:
c1:7a:db:cb:2d:3e:63:01:f1:d8:c0:d1:32:81:8f:a5:9c:26:
da:e0:56:f3:62:8d:e5:c2:1c:11:8d:31:c9:54:85:e8:32:0a:
80:b3:ad:dc:5b:aa:9f:05:31:67:ed:19:80:3c:a1:d9:c7:03:
a2:f5:55:78:b1:4a:ef:72:14:8e:4c:2a:6f:32:b4:36:c3:78:
1a:ae:54:17:c9:62:18:02:80:3e:e1:ae:65:66:9a:35:7b:69:
31:d9:d0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:32:33 2025 by rpki-client