Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
File: qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft (raw, json)
Hash identifier: cVC+ovivoe5dO7X4+zPPkQmTyDW6CHgakmcCMU1LbMA=
Subject key identifier: 32:27:28:2E:AC:47:5D:1D:1F:1A:F2:9E:C8:8F:E4:63:B1:C2:74:90
Authority key identifier: AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
Certificate issuer: /CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Certificate serial: 01965983083BEA1CCC5048F6E9E8D45C7541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
Manifest number: 08EB
Signing time: Mon 21 Apr 2025 18:01:21 +0000
Manifest this update: Mon 21 Apr 2025 18:01:21 +0000
Manifest next update: Tue 22 Apr 2025 18:01:21 +0000
Files and hashes: 1: hofEb4DxTmo8-bHoq5_u1SjHWxg.roa (hash: hCqP+IxiyDQrp0AjJaVxMj1A1H2iMztGikQq20Whf3E=)
2: qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl (hash: WTg9AB+DMMKkWLREB0Y13dkbaIylmuvZ8MwYjXGi9Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:83:08:3b:ea:1c:cc:50:48:f6:e9:e8:d4:5c:75:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Validity
Not Before: Apr 21 18:01:21 2025 GMT
Not After : Apr 22 18:01:21 2025 GMT
Subject: CN=3227282eac475d1d1f1af29ec88fe463b1c27490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:69:47:bd:f7:dc:ac:87:f0:dc:ab:9b:40:67:
9f:93:6e:eb:3e:d3:6e:ad:70:12:fa:95:04:0f:d9:
81:ea:42:23:eb:30:df:6d:48:d3:62:cb:33:03:18:
18:3b:ce:a9:8a:db:1c:67:7a:68:6a:5f:a2:62:be:
f2:d8:2f:31:62:e3:8f:4e:67:a1:d4:cc:ef:7e:e9:
8f:27:db:00:61:89:1b:42:a2:cb:a4:8e:e4:ab:f0:
5c:43:62:e1:5e:e4:ac:d5:65:d9:c3:24:59:e2:c9:
da:50:25:8e:97:59:18:ec:a2:9a:16:93:99:04:1d:
26:f4:1d:14:51:61:0a:85:36:f8:e1:ec:43:ac:25:
d9:89:fa:75:42:b9:f8:71:88:3b:b3:77:9a:9f:35:
a0:26:e5:13:92:be:3b:5d:8f:2e:08:7d:93:95:4b:
74:b4:3f:83:b0:36:fe:90:8d:ba:cf:ea:98:8f:09:
c6:fa:e0:65:f5:a6:fc:f0:88:1c:89:d1:c2:cd:1f:
80:19:27:1e:2d:2c:5a:b2:c5:23:bb:88:c0:a0:e1:
a1:c7:12:da:98:80:a8:8d:de:3a:00:15:85:77:93:
6f:94:8a:ca:08:de:3b:52:74:76:b4:72:eb:4a:3a:
14:d7:f5:62:c0:8e:18:75:36:23:ea:8b:26:a4:43:
0f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:27:28:2E:AC:47:5D:1D:1F:1A:F2:9E:C8:8F:E4:63:B1:C2:74:90
X509v3 Authority Key Identifier:
keyid:AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b4:ad:14:8f:2b:b6:ba:64:e0:9a:35:d2:42:38:e1:ff:3c:
f8:04:0f:d6:d9:69:c8:6a:df:bb:ee:f0:aa:4c:ae:ef:65:d5:
cf:82:8e:d0:ba:18:a4:1f:c2:a1:2c:4d:8e:10:78:ce:61:2c:
6f:81:6b:1c:92:b4:77:47:3d:94:56:09:bb:2e:46:e7:b1:eb:
9d:f1:6c:78:aa:7b:73:67:35:24:66:4e:6e:bb:e1:e3:6d:a2:
88:e6:c6:b0:54:37:bb:00:03:98:dd:00:a8:b5:8b:a9:72:27:
95:a4:a2:b7:07:2f:76:6f:7d:1a:75:6b:5c:8d:a3:15:38:f5:
77:99:5b:8c:1b:37:f1:60:0e:62:e3:6a:d8:1d:e9:2e:8c:3a:
86:33:56:7e:36:be:c0:20:c0:2f:49:99:7e:9a:ce:05:ba:3c:
14:f1:01:75:87:b5:a3:e2:64:d3:36:c5:56:ae:eb:c6:31:d0:
13:33:53:e3:78:0b:92:9e:f5:ae:ba:e3:33:d4:3a:30:a0:34:
78:0c:a8:d0:f3:d7:3e:57:1c:99:8c:16:df:56:f1:c2:08:bc:
f3:cf:6a:01:09:c3:19:28:be:d6:50:e7:95:87:48:28:6a:75:
70:20:20:8e:df:f2:85:ab:f9:c4:04:96:86:78:32:c9:24:f5:
01:de:af:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:04:56 2025 by rpki-client