Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
File: qpoWTGVkErfar66FccxnnMb1h9A.mft (raw, json)
Hash identifier: KuEnujLxSqeW22xtBK4X+cbG6KRQLICkq1x2TdVqOq0=
Subject key identifier: ED:84:94:37:D0:E6:0D:F6:8B:D7:DB:D0:5B:E0:55:17:9B:DF:1B:BA
Authority key identifier: AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
Certificate issuer: /CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Certificate serial: 01965123CC918DF7808CE8A697AEBD57260F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
Manifest number: 1501
Signing time: Sun 20 Apr 2025 03:00:22 +0000
Manifest this update: Sun 20 Apr 2025 03:00:22 +0000
Manifest next update: Mon 21 Apr 2025 03:00:22 +0000
Files and hashes: 1: VnsTdGec-3pHRJVLeuucM8lE74g.roa (hash: VZlx25MKWdF5CVCWwcXrJ37GBCTfmMAe38xqZnEYBGw=)
2: _1ATULCZ98sbSKA4UnZIqchgnFI.roa (hash: dqzQIeMxGMrNSZ+FakLTrNvjbHnx3VcQtBASfsN8WNM=)
3: qpoWTGVkErfar66FccxnnMb1h9A.crl (hash: jMKuLHW57UF2GgI1DrA4Rn9TYwM2+cWY3TVoUTGH3dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:23:cc:91:8d:f7:80:8c:e8:a6:97:ae:bd:57:26:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Validity
Not Before: Apr 20 03:00:22 2025 GMT
Not After : Apr 21 03:00:22 2025 GMT
Subject: CN=ed849437d0e60df68bd7dbd05be055179bdf1bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d8:1b:be:8d:0b:80:6c:94:5c:05:23:79:a0:
f7:10:9a:12:da:38:ec:ec:e5:c5:bb:5a:5f:07:66:
83:a6:e3:cb:fb:58:05:a8:d1:90:74:54:40:6a:78:
d1:b5:57:7c:1f:11:f8:67:96:51:9e:95:16:77:83:
31:9a:d6:ee:a9:f8:69:a2:d5:c2:73:62:cd:21:60:
57:20:dd:e0:97:e6:f8:0c:a2:63:e0:0b:54:c7:88:
20:0a:be:3d:cc:c0:54:33:1d:59:12:f2:ca:c6:a4:
2a:04:ee:e2:e0:6b:5e:e0:da:4c:dd:a0:60:d4:32:
be:5f:de:0d:95:40:fe:fa:7d:73:bc:86:ed:5c:09:
11:f7:be:20:e1:1b:ce:32:96:40:00:3f:e5:84:a7:
a9:60:65:5f:89:9b:f7:1c:08:08:07:24:1b:99:d2:
22:32:2b:ee:f7:1a:f8:94:17:e7:4a:76:15:d1:72:
3b:c0:5b:16:35:ef:73:a6:a7:7e:31:db:30:74:3c:
b3:44:f4:a4:88:93:54:f0:a2:1a:b8:f1:64:05:7e:
2c:ab:21:31:4c:90:6f:48:7b:2d:69:61:37:25:88:
54:42:57:34:82:a6:e8:15:8b:cf:7f:27:c5:73:45:
ab:ef:2d:eb:49:59:b2:db:b3:1f:a3:0d:e9:db:44:
15:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:84:94:37:D0:E6:0D:F6:8B:D7:DB:D0:5B:E0:55:17:9B:DF:1B:BA
X509v3 Authority Key Identifier:
keyid:AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:83:82:c5:36:a3:31:f2:59:95:51:ce:16:3d:b1:f7:85:3d:
7b:33:cd:ce:ce:6c:42:2e:56:48:f7:f3:5d:d6:f2:b9:41:c0:
a1:8a:dc:0a:84:27:b9:47:4d:fe:85:4c:99:d1:34:13:04:fd:
e1:55:40:8d:dd:e4:3e:9c:75:c1:af:b6:ca:c8:19:45:96:88:
05:6e:7d:30:19:67:b1:f4:fc:86:50:fb:db:4c:34:13:0c:92:
1f:be:f5:61:c4:69:c9:3a:77:9e:fd:8e:6e:b1:a9:15:80:6d:
70:19:e6:7a:f0:70:fb:e4:05:a7:15:a6:10:dd:8c:52:ae:35:
d3:14:24:f7:25:5d:29:fa:ca:3f:9f:17:f1:78:fd:5b:d7:d3:
64:ef:94:c3:1a:de:01:6a:de:df:39:cf:6f:6d:38:87:c2:54:
55:f4:2b:47:63:5b:61:d6:de:9c:4e:9a:bc:6e:d4:97:e0:db:
bc:bc:ee:d7:81:c3:92:86:f5:25:fa:9f:57:43:97:3d:40:57:
48:0a:ed:ee:88:71:1b:12:8f:5c:a1:b5:82:e3:49:de:fd:13:
7e:ba:24:ee:c2:31:cf:7e:12:7d:29:d7:8b:d4:3a:a6:7d:cc:
33:f2:99:89:14:c2:28:7e:a8:5f:c0:ee:ee:b5:7c:64:16:99:
5a:d8:d2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:55:18 2025 by rpki-client