Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
File: qQIAoAAN9dhFudsoTQotvuZ2xag.mft (raw, json)
Hash identifier: pkksPiaZLwPAH6eJC4bL3xJPlWd+5ORIO7pHNwTH2gM=
Subject key identifier: 54:DA:27:06:B8:B0:04:07:03:83:9F:7F:D0:43:51:BC:21:DE:A0:1F
Authority key identifier: A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
Certificate issuer: /CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Certificate serial: 01963F54560055069EF14689884614992F12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
Manifest number: 0DF6
Signing time: Wed 16 Apr 2025 16:00:13 +0000
Manifest this update: Wed 16 Apr 2025 16:00:13 +0000
Manifest next update: Thu 17 Apr 2025 16:00:13 +0000
Files and hashes: 1: XVxrMXrjLDQVv9bac22qQ0QMNvQ.roa (hash: Yc8aZeN9qk7mkDqbHTwdGKZnQ52FHThS1w10bQxAp2w=)
2: i3VEozY7zHl6WOCVl59PVxz43a8.roa (hash: jzz5iRsaOnS+mlLDbSWuuSqGL3bfQAaKxsPDmiylUHA=)
3: qQIAoAAN9dhFudsoTQotvuZ2xag.crl (hash: PIXBxrXfspk1ifLQYwY576Xyz+ggIjBP20zJCHqcHVM=)
4: uC9PLmr5O8CehNSZEFEDNzHH7Us.roa (hash: rxEdnwW/DBAsm5BXVYbjYVnepXH4Kn8/IHHbh9uyU6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:54:56:00:55:06:9e:f1:46:89:88:46:14:99:2f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Validity
Not Before: Apr 16 16:00:13 2025 GMT
Not After : Apr 17 16:00:13 2025 GMT
Subject: CN=54da2706b8b0040703839f7fd04351bc21dea01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:91:ed:ce:fd:f6:d5:b0:e3:2d:17:e0:14:91:
89:59:e5:c5:66:69:3b:39:57:d3:d4:ba:21:89:28:
20:02:97:91:34:18:ea:65:bd:1f:17:97:ea:f5:98:
9a:89:d4:dd:15:81:43:1b:78:36:e8:60:8a:6d:c6:
9a:ed:fb:3c:52:86:d4:4c:34:81:1c:44:0b:8b:16:
98:91:7c:3f:53:f3:da:ea:38:84:aa:de:d4:86:75:
ff:66:6c:55:d7:28:ef:2c:1f:63:5b:aa:2c:ca:d8:
c4:80:65:2c:0e:0c:4f:45:a4:a1:38:5e:04:4d:6a:
d7:a9:76:7d:29:28:9d:ca:13:80:26:46:be:38:6a:
56:1d:52:d2:58:22:0e:19:a8:da:c8:c3:37:e5:6d:
d1:2c:87:34:71:e8:4b:57:34:dd:6a:b1:11:30:5e:
09:42:c6:a3:62:e8:32:5a:7f:30:b8:e0:3c:61:e3:
f4:da:68:23:42:b8:10:e8:1d:4f:b3:19:44:fb:a1:
78:02:94:34:a2:9c:f2:6e:c3:e0:0c:c5:2f:08:08:
51:d1:9b:09:aa:ba:cf:7f:ae:8b:13:2e:f2:ed:e9:
78:a2:19:cc:26:a2:f6:22:4a:27:10:59:3f:68:90:
83:b7:75:ad:51:83:c5:16:cb:12:ed:55:73:80:c0:
69:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DA:27:06:B8:B0:04:07:03:83:9F:7F:D0:43:51:BC:21:DE:A0:1F
X509v3 Authority Key Identifier:
keyid:A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:60:15:23:a0:b5:b9:3f:bd:a5:d2:19:11:94:37:02:fa:dc:
4c:eb:92:f4:10:89:7c:5f:97:99:5e:75:78:ed:35:e1:d2:1f:
54:c0:04:7e:2d:2c:7d:c6:6f:b2:6a:0b:88:a5:0a:79:ca:76:
22:53:38:6f:7e:1b:2d:6e:ee:1b:f5:e2:bf:cc:16:4b:30:d1:
a1:70:1c:ec:77:40:46:01:99:ca:7d:9e:ba:d0:34:a1:53:f3:
bb:c3:46:5d:b6:d5:01:fc:a9:bb:8e:5e:c1:87:1f:ee:2c:03:
bc:c2:16:58:cf:af:07:5f:b4:0b:ef:08:54:6c:4b:c0:ef:91:
e1:40:87:1f:80:e4:40:d4:a6:e4:4d:f3:42:c7:5d:9d:fc:24:
2d:f4:69:e7:d2:6e:e7:ad:e7:fe:57:af:5a:1c:d2:00:f9:44:
eb:98:06:b4:ff:fe:bf:86:b8:a8:ee:d4:c5:98:0a:cd:3d:05:
66:df:10:6d:2e:6b:26:f8:ed:8a:a6:cf:19:3e:16:22:00:c5:
6e:e8:90:c8:f0:07:41:85:6e:2b:88:dd:35:a3:48:88:21:e6:
87:27:e7:6f:e5:38:ef:16:cb:eb:cd:e9:c9:5c:bc:80:ff:42:
67:58:6e:a1:ab:9d:b7:c7:6b:e4:25:db:3e:9b:e1:fd:d0:a6:
20:8f:f8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:03:58 2025 by rpki-client