Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
File: qlTEdj6gGMPccCA9BO_nH9SxsGY.mft (raw, json)
Hash identifier: 2T4FBY98N/sP5PVxHjPJr9pR8kLU/pLavy6SEivFULs=
Subject key identifier: ED:8F:80:3A:BB:18:22:60:05:91:F7:2F:75:8E:8D:78:C8:0D:A2:C5
Authority key identifier: AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
Certificate issuer: /CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Certificate serial: 01965793A4559C7ABCE9A7D21AB75AD2AA46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
Manifest number: 11DE
Signing time: Mon 21 Apr 2025 09:00:15 +0000
Manifest this update: Mon 21 Apr 2025 09:00:15 +0000
Manifest next update: Tue 22 Apr 2025 09:00:15 +0000
Files and hashes: 1: 3uOrqvmP8Ja1Ais3wLBFc-Yv8js.roa (hash: exOhjbpn5m/SyHb+kmTmnk1GW2qg2u8lsLmmerL5o9w=)
2: IzP3cDAX9aykSDzKdoH0u3AyA2M.roa (hash: NC8YDjUxW5EM3pV7QmdgO/vAJ9HwNpXuNP3EpqENObk=)
3: f2dJVu8muGYFnZFPcMivMl98KP8.roa (hash: rWmOSQ2QhYKl4L1IyTfTDLKWAGfQI+Kz8vdUqnsATxs=)
4: qlTEdj6gGMPccCA9BO_nH9SxsGY.crl (hash: E2r4xsQbOBLR3pkTcb/7S4kAJa95UhM3sGrExwJhkIg=)
5: svOlfPLlFDJ0sGLcz6b_IG_H3W0.roa (hash: zsvLBGGbQT+oIT4diXH9qGrVZIYbNUKP7yL6prMLg/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:a4:55:9c:7a:bc:e9:a7:d2:1a:b7:5a:d2:aa:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Validity
Not Before: Apr 21 09:00:15 2025 GMT
Not After : Apr 22 09:00:15 2025 GMT
Subject: CN=ed8f803abb1822600591f72f758e8d78c80da2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f2:4a:97:3f:4c:27:b9:1d:b3:d5:10:af:48:
7e:01:31:7b:2a:6b:4f:ff:b7:41:78:a4:8f:2e:76:
68:9f:02:3d:d7:11:b9:25:6e:1f:e1:3e:5f:40:ef:
d6:8e:72:d9:97:b6:29:61:d4:5b:49:8b:3d:6c:c8:
7e:bb:4a:8a:6f:27:ca:80:ab:a9:63:c9:a6:a5:63:
1d:a6:33:33:a7:98:49:6b:cb:a7:47:6d:a0:4c:80:
68:29:da:a7:cc:b9:4e:45:3c:85:4a:75:6b:26:bb:
93:76:05:3c:a0:62:9d:d7:96:4a:bc:b9:43:86:0a:
6e:ee:85:e9:5e:2a:36:ea:cc:24:85:d7:b2:84:1b:
5a:6c:af:9e:a6:e4:88:e8:0e:63:c8:b8:ed:89:39:
6c:00:db:49:6f:14:bc:10:e1:15:12:1d:29:76:30:
dd:fe:58:2e:de:2b:10:74:92:bd:35:b5:8f:d3:63:
dc:e5:40:ea:86:9f:dd:26:3c:af:99:da:fd:bc:53:
bd:e3:75:6d:01:13:36:18:ea:f5:98:80:f0:52:16:
36:3c:63:00:b4:3b:6c:5f:89:e6:dd:bb:25:f5:5e:
f5:41:dc:c4:6b:9c:b8:1c:b5:fd:2e:92:99:8c:fd:
fe:9a:10:68:70:7d:14:3e:2e:6a:06:ef:6c:2f:7b:
41:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8F:80:3A:BB:18:22:60:05:91:F7:2F:75:8E:8D:78:C8:0D:A2:C5
X509v3 Authority Key Identifier:
keyid:AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:99:7b:89:a6:9d:4d:42:f9:29:b3:c3:f5:89:69:a2:ae:3f:
37:6d:f1:87:01:e7:1a:ac:dd:cd:17:e6:7f:ab:95:bc:5f:81:
8f:8e:d1:7c:f9:ba:fe:8c:24:9c:af:c6:7e:fb:3a:db:91:6f:
24:ea:94:4f:02:57:07:20:28:b3:f1:f4:a0:1c:bc:3d:e8:40:
15:77:e9:7f:53:80:6d:24:c9:57:ad:dd:14:fa:c6:f0:2b:b3:
3b:af:ed:fa:06:81:6e:45:ef:40:93:68:52:bb:e6:70:0a:43:
ac:a9:b7:d8:d2:55:41:06:c9:02:e6:da:2d:6f:e2:01:aa:e5:
fb:9b:a5:7d:ef:6b:34:2d:6b:61:73:57:68:cc:46:9b:3c:48:
12:1e:a2:01:20:be:5f:e5:56:f3:08:65:b9:9f:81:ff:e5:55:
d8:df:08:81:6d:8f:19:d2:0d:0e:51:74:f5:2f:2d:24:2f:94:
65:9c:dc:0e:0f:6d:08:fd:84:45:44:29:2b:24:c6:d4:56:0c:
f5:d5:b1:9d:2a:7f:42:fc:72:dd:ad:43:62:e3:cd:e9:38:98:
ad:55:71:35:b4:0e:37:8e:eb:f1:6c:7f:fb:1c:50:23:83:44:
c3:fa:bd:91:91:28:30:78:d7:ce:a0:55:66:d8:00:05:19:20:
77:57:d9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:57:47 2025 by rpki-client