Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
File: qlemjwii4wun1z1EyabiQA_Qo7E.mft (raw, json)
Hash identifier: zf/C2pYOvwob5hyl0VBYmu2Dv0SlMUU0IwnoyTaMYmk=
Subject key identifier: FA:17:80:6F:A9:1B:04:BF:24:F3:C9:7C:65:6A:DB:6B:69:E2:F7:0E
Authority key identifier: AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
Certificate issuer: /CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Certificate serial: 01962C732A1FFC992273A0ED651A1B4CE9B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
Manifest number: 06C0
Signing time: Sun 13 Apr 2025 00:01:06 +0000
Manifest this update: Sun 13 Apr 2025 00:01:06 +0000
Manifest next update: Mon 14 Apr 2025 00:01:06 +0000
Files and hashes: 1: _uIcjPbTo2tZZuPbQQgAGU6uFaU.roa (hash: mFbVT5EqFo/vqgifNq4fzGvwXcCU4t6Rafq12c4CSak=)
2: qlemjwii4wun1z1EyabiQA_Qo7E.crl (hash: ECEZhZWu/6+RAou/b9x2dPlNUvFe+03cVtZiOMZHsNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:73:2a:1f:fc:99:22:73:a0:ed:65:1a:1b:4c:e9:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Validity
Not Before: Apr 13 00:01:06 2025 GMT
Not After : Apr 14 00:01:06 2025 GMT
Subject: CN=fa17806fa91b04bf24f3c97c656adb6b69e2f70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1f:86:f0:5a:b1:03:15:ac:e1:8e:84:1d:72:
20:da:9f:cb:3a:4e:2d:6d:b4:45:a1:db:86:f9:ef:
2f:29:fd:34:ee:97:80:da:4e:76:89:71:f0:1a:da:
da:77:f2:c3:c7:86:e8:56:53:1d:19:4d:25:d9:65:
94:92:f5:dc:e0:34:40:7a:ab:92:99:3c:4d:4b:7b:
9c:26:28:b4:b1:fa:ae:62:e3:69:27:1c:8c:0c:c5:
1c:aa:80:62:f2:41:78:c7:99:15:90:9d:79:99:22:
7d:fb:96:51:76:c1:3b:c7:72:9f:21:72:57:d0:63:
f5:70:f7:f6:4a:74:22:5d:8d:d6:2d:53:f6:46:14:
6b:d6:65:97:09:11:f1:85:fd:56:67:dd:1c:19:8c:
5c:28:b5:53:82:92:4d:79:92:2a:62:75:4c:6e:5a:
ca:b1:a0:56:be:8c:d0:38:a6:a0:89:c1:b1:e6:cc:
0d:64:8c:4d:4a:50:d7:e4:63:d1:66:e9:aa:51:3c:
c3:33:c8:f3:60:e2:81:71:e7:a0:ed:11:b5:73:3d:
12:00:46:a3:44:f1:0d:1e:61:cf:eb:0a:94:12:9e:
d5:44:e9:b5:de:7d:4b:05:a1:1d:89:c0:c5:e8:00:
d9:2d:e4:19:5a:78:6e:c1:81:c4:f3:3e:63:3e:bf:
7a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:17:80:6F:A9:1B:04:BF:24:F3:C9:7C:65:6A:DB:6B:69:E2:F7:0E
X509v3 Authority Key Identifier:
keyid:AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:69:b6:1b:0a:7d:8e:a2:56:48:00:88:c7:f4:06:10:29:ac:
07:ef:09:a8:d6:b7:3a:2f:94:a9:c5:fe:e1:4a:1f:81:08:af:
95:94:3a:f4:62:cb:95:5c:52:2c:55:93:2e:21:64:37:d2:6b:
1e:04:7c:6b:15:08:0a:13:90:57:1e:fa:40:78:fe:f7:a8:c9:
21:bb:d2:55:ca:94:4e:49:a1:ea:dd:0f:91:22:02:62:c5:2e:
13:f2:68:01:fc:36:2e:86:00:7f:ea:c8:ca:ae:72:bd:5e:e1:
1a:b8:ac:42:fc:cf:03:97:49:47:9d:5f:70:29:2c:fd:c3:b6:
06:58:dc:39:9e:25:46:d5:15:39:dd:7b:89:8e:83:e0:92:b0:
76:2f:29:e9:ac:1c:bd:27:0c:1d:3b:ba:a0:84:87:0c:5d:22:
c1:7e:f3:ae:70:47:6a:c8:4a:47:80:5f:23:c8:4a:b9:c1:11:
77:20:28:1c:1e:4f:b7:b1:1b:55:3e:75:f1:2e:93:42:e5:f6:
e2:b3:3e:c4:3c:5a:c8:27:1e:74:23:c7:e0:2b:20:b8:f4:03:
90:cb:74:d8:24:f4:c8:04:32:a9:bd:4e:1f:1a:5a:8c:54:88:
7d:5a:6e:fe:1c:b4:d5:b2:65:da:97:40:40:3c:32:f4:ec:d8:
0b:ba:e2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:17:42 2025 by rpki-client