Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
File: qQYfL0mm16-epna60D3xzi9QJg0.mft (raw, json)
Hash identifier: cv7PSOiAFun5JEpSYF4xR3AvTVMe9KGaBTFArC/vok0=
Subject key identifier: 00:91:BE:6A:E3:B6:C7:53:43:A2:BE:77:5B:7E:7B:67:14:30:93:9F
Authority key identifier: A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
Certificate issuer: /CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Certificate serial: 01958BBBAA2C8107A868F0BF15461AB9284A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
Manifest number: 0886
Signing time: Wed 12 Mar 2025 19:01:26 +0000
Manifest this update: Wed 12 Mar 2025 19:01:26 +0000
Manifest next update: Thu 13 Mar 2025 19:01:26 +0000
Files and hashes: 1: hILMU0qMjMm6bmWNobLKh35z6fg.roa (hash: tRLWcg9XAdmGTHy58HB7PkQi1r29x3Hn5q5I5oWT1hs=)
2: qQYfL0mm16-epna60D3xzi9QJg0.crl (hash: i/khZhxkLbE27V1mR6YZPQ28jyEkx+UA8WdsiN2K7Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:bb:aa:2c:81:07:a8:68:f0:bf:15:46:1a:b9:28:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Validity
Not Before: Mar 12 19:01:26 2025 GMT
Not After : Mar 13 19:01:26 2025 GMT
Subject: CN=0091be6ae3b6c75343a2be775b7e7b671430939f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:52:6b:25:22:e6:19:07:d2:57:f3:d4:6d:e8:
ae:f0:f2:65:8e:a6:50:2a:5b:48:99:79:1a:20:20:
d4:09:2f:e1:e6:87:ad:e9:f8:6e:09:07:30:13:de:
a0:cf:74:5c:57:f3:69:f7:b1:fe:c9:c7:7a:6e:48:
6a:35:22:73:c0:ca:54:3c:b2:e8:ec:9d:12:8f:46:
0a:f9:c6:2e:28:45:b1:64:17:2e:65:b4:1f:f3:64:
36:62:54:e2:2e:3a:8f:65:8e:aa:33:dc:b5:45:ff:
e3:e5:2d:11:b5:a0:92:d8:ac:c0:90:41:db:46:ed:
46:ec:9c:1d:04:ca:c4:2c:55:ee:86:cf:cf:99:af:
ec:2b:6c:97:a3:74:51:d5:45:b3:5b:a9:02:ef:b8:
ad:27:1f:2b:cf:36:41:2f:1e:57:b3:84:91:24:8e:
10:8a:45:ff:c3:b8:7c:0f:8a:09:b0:9d:ad:ee:a1:
90:bf:10:06:fa:83:d2:a4:b4:ce:58:bb:33:7a:bc:
55:c8:6e:54:4a:6a:03:10:fb:ad:14:5c:cb:36:e7:
70:06:44:6f:28:84:f0:bd:9e:39:e1:65:fd:5b:1e:
5b:c0:00:f9:3e:31:a1:03:b9:94:51:9b:12:a6:4d:
07:21:55:6e:07:f6:ab:aa:70:e2:f1:ae:d8:a3:28:
09:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:91:BE:6A:E3:B6:C7:53:43:A2:BE:77:5B:7E:7B:67:14:30:93:9F
X509v3 Authority Key Identifier:
keyid:A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:1d:80:7f:74:e6:6d:d8:23:4b:0e:3c:db:78:59:5f:a5:59:
9b:fd:18:fb:40:8f:07:9b:11:27:c5:20:1e:d4:b9:58:17:14:
8d:38:66:59:c2:38:b5:19:da:01:2d:42:88:56:40:ec:2c:50:
a7:f1:76:16:3e:86:fd:dd:30:93:94:e5:6d:3c:a2:53:d4:52:
db:3c:64:b2:57:1c:d8:83:42:5f:cc:e8:0b:5a:0b:e5:27:75:
e3:aa:d5:fa:e2:85:40:69:ce:65:96:82:3e:34:a2:90:6f:9d:
a3:f1:d6:ee:d5:db:0a:93:fc:e7:06:ed:ae:34:7e:91:02:1f:
00:59:7a:6a:92:47:d7:2a:eb:a1:45:bd:9c:24:bb:50:1b:a0:
fc:66:c4:b7:7f:77:ea:c8:dc:a0:50:bb:cf:ff:09:2a:bb:86:
70:9e:c7:c0:33:9f:a2:dd:9b:e1:87:c9:65:97:db:e0:bf:40:
14:8a:71:4a:2b:ee:ec:26:1b:0c:ed:04:57:9f:17:c2:cf:0c:
10:5a:18:c4:36:97:57:bb:07:a5:3a:2f:7a:6c:30:41:d5:ae:
96:63:94:f8:0a:5d:03:eb:9f:80:55:49:0b:6f:d9:aa:59:0d:
a9:7f:fe:31:29:17:37:32:b0:57:37:32:1f:b8:f9:61:c2:f2:
50:d9:7d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:51:24 2025 by rpki-client