Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
File: qagVvnVH64cOtfZB0w_mljdByOA.mft (raw, json)
Hash identifier: wnDfmOsZ1NV7w9CORI5yc8GEkBuqRC6SnjSdAw2uz+4=
Subject key identifier: 07:30:F3:38:62:F6:10:33:30:D9:35:05:F5:6C:1C:64:7E:02:38:27
Authority key identifier: A9:A8:15:BE:75:47:EB:87:0E:B5:F6:41:D3:0F:E6:96:37:41:C8:E0
Certificate issuer: /CN=a9a815be7547eb870eb5f641d30fe6963741c8e0
Certificate serial: 0196556E829B0B65DB757E5C03B1B17512F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 23:00:27 +0000
Manifest this update: Sun 20 Apr 2025 23:00:27 +0000
Manifest next update: Mon 21 Apr 2025 23:00:27 +0000
Files and hashes: 1: 2q99xK6_Y55DJ8twtidPEpKbMLI.roa (hash: 6B+AlnTFnPjLyFTrr9nsccgH4b2Zg0KTuMdqT3nd8bQ=)
2: CpAGaYd2l8fGo8vqA9rEzSn2JUw.roa (hash: PZfZ1+zaF0Gne48BiqHvjg73fyl9yH1GS45Ddth2ZI4=)
3: qagVvnVH64cOtfZB0w_mljdByOA.crl (hash: 3WqZ5A3FJpzrBWR7ohULseTt2RJcobBHPrqgCRKk9IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:82:9b:0b:65:db:75:7e:5c:03:b1:b1:75:12:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a815be7547eb870eb5f641d30fe6963741c8e0
Validity
Not Before: Apr 20 23:00:27 2025 GMT
Not After : Apr 21 23:00:27 2025 GMT
Subject: CN=0730f33862f6103330d93505f56c1c647e023827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:83:82:90:b9:9d:d0:4a:15:f0:8e:d9:9a:98:
38:5a:dd:0f:c8:da:59:da:e7:83:cf:a7:54:00:58:
14:47:91:e9:8f:32:45:f9:eb:ec:57:a4:9e:c7:8f:
7b:c5:aa:b2:fd:11:15:31:c5:76:a8:75:25:1e:00:
b8:10:d5:4d:3d:01:36:e3:db:82:18:9c:bd:53:d3:
75:80:9e:f4:f4:be:b3:c3:d5:5e:f3:1d:48:fb:7e:
39:3d:93:ea:99:d8:6d:8d:d1:af:8c:eb:3e:23:30:
25:cc:45:52:eb:da:79:9a:4e:da:1b:4d:02:ff:a9:
e2:70:13:83:43:ef:fb:b5:98:26:79:6f:e4:46:c4:
09:de:c2:45:78:54:83:ef:7f:dd:f2:14:72:42:4c:
10:5b:07:d7:09:48:92:19:0c:65:08:16:fb:cd:db:
7f:ce:79:22:f3:66:88:d6:b4:2b:0b:2a:82:84:be:
c0:a3:b8:6a:b2:60:33:20:db:80:e7:f7:54:83:53:
01:9e:a7:f7:46:a0:ae:17:a1:88:53:ac:ce:0a:82:
91:0b:0e:00:a6:26:01:85:b4:92:7c:a6:7e:59:5e:
1b:60:26:07:16:a0:e0:86:48:57:5f:e8:59:15:26:
be:10:bc:c6:30:a1:a8:bb:43:37:3b:b1:f3:c5:99:
b7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:30:F3:38:62:F6:10:33:30:D9:35:05:F5:6C:1C:64:7E:02:38:27
X509v3 Authority Key Identifier:
keyid:A9:A8:15:BE:75:47:EB:87:0E:B5:F6:41:D3:0F:E6:96:37:41:C8:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:83:f5:09:88:8f:54:93:a3:77:e6:3c:2f:63:14:79:02:22:
ce:77:94:b7:37:7e:e2:5e:36:5d:61:4c:ac:a3:f8:6f:7a:a1:
62:fa:27:2d:63:d1:60:a8:cd:cb:85:a3:85:8c:dc:bc:9e:e1:
62:93:d0:09:54:0e:e7:8c:26:cb:f1:fa:e2:a5:9b:47:fc:52:
b1:6c:89:24:ae:b0:4d:55:14:66:53:ed:05:2b:05:3b:dd:3c:
3c:e0:b3:b7:65:9b:89:d3:72:e0:3d:ee:65:ff:78:04:d9:6c:
b2:e1:d2:c5:f8:a8:7d:c6:b2:cb:7c:74:dd:b7:22:b5:85:1d:
c1:01:6a:c2:b7:3d:84:09:4e:74:5e:34:d7:59:90:42:8a:2d:
ef:d2:82:59:b8:88:7c:f6:7f:da:1c:2f:35:2c:e9:d3:70:a1:
9d:72:c7:d8:ab:ae:3e:89:64:6f:e6:ee:d3:28:94:8f:25:8c:
10:74:53:10:ba:0e:37:13:2a:7a:67:a1:08:29:6f:1b:43:32:
eb:9a:87:1b:97:ac:6c:a0:ef:85:dd:b7:7f:ff:b9:9e:a2:55:
30:43:95:91:e1:34:52:3a:c6:26:a4:e5:94:4f:38:9e:fc:ed:
71:66:a5:c4:49:34:aa:a5:35:5e:ff:66:9f:83:3a:89:01:96:
c1:dd:f4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:43:36 2025 by rpki-client