Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
File: qPSR8hDFe_RvtS1K8i5-z29M2oA.mft (raw, json)
Hash identifier: 9Hi79hj5GgpSQ9FTNL6giBboyzO6YlBLlvmJsJRNkqQ=
Subject key identifier: 83:0C:6D:47:6A:20:44:25:C9:97:96:E9:5C:29:94:84:BB:4B:55:C6
Authority key identifier: A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80
Certificate issuer: /CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80
Certificate serial: 01964D1054C53A0CBED5577DFD58D4F8602C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
Manifest number: 0AD6
Signing time: Sat 19 Apr 2025 08:00:37 +0000
Manifest this update: Sat 19 Apr 2025 08:00:37 +0000
Manifest next update: Sun 20 Apr 2025 08:00:37 +0000
Files and hashes: 1: ZZqXGnxEBhLfDD9lB7yOqiX8_H0.roa (hash: AmgNgGv8HaEfNgQu4ILsUPklwcafU90+t65Aj2bSX9Y=)
2: qPSR8hDFe_RvtS1K8i5-z29M2oA.crl (hash: 4xZDm7WkNlCz+y1wosZC9+GKov0aszMsAfJhc8gVtB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:10:54:c5:3a:0c:be:d5:57:7d:fd:58:d4:f8:60:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80
Validity
Not Before: Apr 19 08:00:37 2025 GMT
Not After : Apr 20 08:00:37 2025 GMT
Subject: CN=830c6d476a204425c99796e95c299484bb4b55c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d1:b2:29:76:d9:42:ff:2d:41:e2:82:22:18:
5e:d9:e4:83:6b:b2:dc:27:fa:b8:ce:ac:74:71:7d:
de:20:05:46:23:c4:86:6f:3b:6e:b9:13:00:7e:d0:
63:a9:c2:99:8d:ce:6c:e4:9d:5f:c9:cf:7b:c0:c1:
47:bb:71:cf:17:69:6a:4b:4c:c0:61:17:d1:f1:4f:
f8:a0:4d:93:30:4c:53:a8:64:a0:23:c1:bb:08:42:
df:a8:75:a6:41:f8:a7:d0:1d:e3:a7:9a:41:85:ad:
7d:1b:a3:42:aa:d9:73:f9:1f:eb:61:a0:04:98:2e:
fc:56:bd:1e:27:12:58:04:e2:e3:e1:f1:a7:e8:fe:
9d:49:3d:08:4e:c9:13:14:13:f0:99:5b:09:62:a6:
58:43:27:76:dd:32:f4:12:bd:95:4c:1a:79:f1:50:
78:c7:38:6d:b5:99:06:93:02:3d:7e:1a:48:93:f8:
6f:e8:15:21:c4:c3:29:de:a4:39:2d:e7:ab:af:4b:
45:40:fd:ec:76:64:27:e8:56:42:a9:c8:2b:9e:b4:
fc:31:a5:25:c9:a4:41:4e:4c:b3:74:f8:22:4b:dc:
5d:db:74:e6:50:18:44:7a:b2:ae:f0:25:34:8b:79:
4f:44:9e:48:e8:b9:d4:74:3c:5c:cb:c3:ff:f6:3d:
bc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0C:6D:47:6A:20:44:25:C9:97:96:E9:5C:29:94:84:BB:4B:55:C6
X509v3 Authority Key Identifier:
keyid:A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:2f:d1:0a:91:e8:77:ff:02:a3:d3:82:b5:2a:24:25:ea:7e:
5c:60:e8:76:75:9e:a9:15:ab:d2:15:ce:1a:a1:51:90:53:f1:
00:1d:e1:25:b6:97:00:ce:05:bd:00:d0:77:6f:4b:0c:65:3e:
ab:9c:f8:90:2f:a7:8d:28:d3:d6:63:ee:12:e0:6f:93:fe:aa:
b0:67:f4:7e:3d:59:a2:9d:ae:e5:a8:41:1e:53:08:8e:8e:6c:
96:25:d5:51:69:44:c7:17:e7:e0:75:d9:96:73:c3:45:22:77:
d2:c8:88:2c:c2:50:97:f9:2d:cb:63:e3:35:87:47:94:a4:f0:
db:b2:a5:96:a6:fd:e1:cb:7d:c8:2e:bc:c8:92:35:70:ae:ca:
12:4a:fc:48:22:3e:df:f5:44:eb:4d:9c:89:1e:bb:aa:ca:dd:
58:5f:6c:08:74:19:dc:85:ff:3d:9d:28:4b:4f:cc:37:50:4b:
6e:08:3e:4d:d5:cf:c6:8c:18:8b:a9:64:aa:8b:22:68:01:78:
fe:ff:8c:5b:53:9d:6d:0b:d5:23:a6:8c:b8:ad:b3:68:e6:54:
bb:d0:8e:85:f3:b7:a2:f0:a9:2d:11:4f:44:24:23:42:c8:65:
5a:26:da:95:87:8e:f6:fe:7e:88:83:a6:ef:65:bc:a6:aa:48:
9a:b6:79:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:28:28 2025 by rpki-client