Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
File: qBaZpbxkh70vF0nRM_yi43_U2og.mft (raw, json)
Hash identifier: Gp65T1nuKgTKmaQKixhJYQMKZAfV01T01btUuOxC06E=
Subject key identifier: F7:7B:C8:AB:45:8F:D9:45:DD:E6:CE:67:1F:FD:00:EA:EF:00:81:49
Authority key identifier: A8:16:99:A5:BC:64:87:BD:2F:17:49:D1:33:FC:A2:E3:7F:D4:DA:88
Certificate issuer: /CN=a81699a5bc6487bd2f1749d133fca2e37fd4da88
Certificate serial: 019649D8774EE0304E13B1248878167ECC6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
Manifest number: 0BDE
Signing time: Fri 18 Apr 2025 17:00:45 +0000
Manifest this update: Fri 18 Apr 2025 17:00:45 +0000
Manifest next update: Sat 19 Apr 2025 17:00:45 +0000
Files and hashes: 1: OjQvRP3Qk-EfOjLrBZFcCGXmqW8.roa (hash: tuPCcx5ju8FKUrcPlz2PFkmuFSo/tuFb+mEuY/BILEc=)
2: qBaZpbxkh70vF0nRM_yi43_U2og.crl (hash: LOfKhB+BbkYgbMcRZSG6q46RjQVjAtE5ifARBvzQwhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:d8:77:4e:e0:30:4e:13:b1:24:88:78:16:7e:cc:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81699a5bc6487bd2f1749d133fca2e37fd4da88
Validity
Not Before: Apr 18 17:00:45 2025 GMT
Not After : Apr 19 17:00:45 2025 GMT
Subject: CN=f77bc8ab458fd945dde6ce671ffd00eaef008149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:69:ed:fa:60:07:3a:26:bf:27:8a:c3:be:53:
60:d3:16:9a:e5:30:45:ca:e5:f8:b8:58:5e:a2:db:
e6:89:65:18:47:ac:ee:b6:ea:69:3f:7b:0d:ce:65:
ea:e5:68:8a:30:d9:b7:8e:81:ff:a4:1d:cb:c0:70:
24:df:e8:e4:18:bb:88:fc:94:7f:84:e8:41:1d:6d:
d0:75:d6:84:18:38:d8:bf:24:d4:5f:2f:b2:c0:fa:
08:1c:36:d6:b1:6e:fc:e7:31:4c:08:0f:45:d6:6c:
1b:bf:90:c4:ae:77:71:d1:c5:19:bf:c2:24:cf:35:
27:69:3a:fa:a3:57:e1:ab:6f:d3:36:2b:13:aa:80:
41:ef:66:3b:42:af:d8:ba:82:79:72:5d:36:6f:41:
b5:33:71:61:c8:49:07:05:fc:d2:81:dc:50:57:ab:
b3:f9:cf:83:ad:50:ae:eb:b6:5e:fb:5d:c2:6b:69:
c5:a1:e9:38:0c:9d:93:f4:01:63:88:5e:64:ba:86:
61:69:d7:58:bb:be:08:0e:d6:93:b0:e0:f8:63:cf:
5e:e6:63:30:9b:7c:9f:b4:02:5b:c3:51:0c:40:fd:
b9:cd:b7:4f:df:79:bf:b9:97:65:d9:9f:fa:97:3d:
2c:25:79:55:ec:94:d4:e5:20:20:ce:44:f0:a2:6c:
3a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7B:C8:AB:45:8F:D9:45:DD:E6:CE:67:1F:FD:00:EA:EF:00:81:49
X509v3 Authority Key Identifier:
keyid:A8:16:99:A5:BC:64:87:BD:2F:17:49:D1:33:FC:A2:E3:7F:D4:DA:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:46:91:06:9c:0a:1b:f2:d8:88:28:33:04:63:6b:68:6d:ed:
98:cb:ee:c3:02:1d:07:48:26:d5:34:e9:86:d8:d2:44:1e:1c:
5c:78:b2:19:b4:0f:a9:11:a4:9a:0f:cb:60:a5:e1:54:9b:2e:
38:ea:33:30:91:9b:b5:3f:ba:c3:af:58:e5:3e:d9:f2:50:fc:
24:c9:a0:82:28:04:ae:78:2a:30:b2:7f:ea:f3:41:7a:11:5a:
64:3c:55:89:e3:fb:1c:5f:2b:47:d5:65:e7:f4:76:a7:c4:a6:
0d:dd:0a:19:28:ee:8d:24:76:8c:5f:ba:0e:34:f1:47:fe:a9:
5a:ac:1e:54:87:d2:fc:40:a4:cd:11:23:be:b0:97:33:39:4e:
6f:d1:cf:7e:2f:74:fc:36:d0:0a:c7:76:ef:b8:5a:12:e2:6b:
9f:36:8f:8a:2b:72:a9:b1:9c:75:57:d5:db:fc:16:6e:dd:26:
e9:de:ae:4f:ad:62:50:c8:71:82:55:29:c3:a4:ab:96:60:a7:
6c:e3:02:a7:dc:d4:76:3d:2a:39:eb:47:51:d7:d9:fb:17:a7:
09:84:b6:64:dc:5b:2a:00:db:3e:99:b9:a5:ad:61:65:ec:15:
29:7f:9a:b3:e6:16:c7:6b:0c:11:0e:8f:3c:c7:60:e7:b6:40:
bc:aa:06:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:08:14 2025 by rpki-client