Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
File: QqYv_JnylBAtzOI13Bo8E9q81po.mft (raw, json)
Hash identifier: 7b7bVCIdb0vYK31NixEto7blu5kvrAFPfrdzdRuf5PM=
Subject key identifier: 58:AE:34:DC:32:48:CF:CD:A3:4E:77:6D:D0:B5:81:50:1A:20:3A:95
Authority key identifier: 42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A
Certificate issuer: /CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
Certificate serial: 01958F6151CAAB815A870FD6C07825B4B09A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
Manifest number: 1498
Signing time: Thu 13 Mar 2025 12:01:14 +0000
Manifest this update: Thu 13 Mar 2025 12:01:14 +0000
Manifest next update: Fri 14 Mar 2025 12:01:14 +0000
Files and hashes: 1: QqYv_JnylBAtzOI13Bo8E9q81po.crl (hash: jeu9mzVq1nnk8+Eg5PJvUaEVze1SuLio8ufauBbcD5Y=)
2: WTARnFcaaxywjD8542Gln8y_dnw.roa (hash: Ftlz5tAZ1Wy4DgBSL6cjF0uXQi2BfjzAEtpVPnOo5XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:61:51:ca:ab:81:5a:87:0f:d6:c0:78:25:b4:b0:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
Validity
Not Before: Mar 13 12:01:14 2025 GMT
Not After : Mar 14 12:01:14 2025 GMT
Subject: CN=58ae34dc3248cfcda34e776dd0b581501a203a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0c:2c:a1:0b:13:2a:ad:4e:55:c4:ed:c2:c2:
65:a9:03:27:9b:6c:8f:40:f6:13:86:4d:4a:27:4c:
2e:35:1a:eb:b6:eb:89:ce:9a:d9:8b:eb:a1:ce:61:
6f:bd:c5:6d:4c:bd:c2:77:ac:86:30:db:0d:ea:e5:
ef:a1:b1:e1:f0:ad:36:e9:35:5e:ad:4f:39:82:52:
7f:a0:75:55:2d:dc:98:75:7e:9d:5d:9e:aa:f7:02:
65:0a:2b:08:0c:96:d6:c1:5e:2a:e5:c7:be:38:48:
53:dd:4e:25:3d:3d:03:a3:8c:64:8e:f6:88:b0:2e:
98:be:fc:61:df:49:78:7b:29:fa:89:b9:df:06:a5:
42:68:65:0d:8b:b4:66:e8:94:f8:e3:2f:ff:6b:ae:
fd:61:20:c1:f1:d7:bd:ac:53:e1:52:7e:f7:b3:bc:
7f:28:b2:6b:9a:10:2c:97:07:e7:6c:c3:b1:83:cc:
1d:d9:d9:1e:78:b8:17:09:c3:4c:3e:87:18:49:08:
c1:b5:33:9b:56:5d:cf:74:9f:1e:20:85:40:79:04:
cb:4a:0f:57:39:33:d5:7e:4b:24:82:df:9a:ce:38:
36:20:b9:ee:f0:2e:d5:85:61:ac:77:04:04:48:08:
a5:40:bb:59:6f:f5:10:10:4a:b9:5a:7f:2f:b1:8c:
8a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AE:34:DC:32:48:CF:CD:A3:4E:77:6D:D0:B5:81:50:1A:20:3A:95
X509v3 Authority Key Identifier:
keyid:42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c0:5d:9b:86:ad:b7:7f:1d:b9:b5:80:f9:be:8c:b8:d8:57:
5d:77:c8:be:6f:f8:fa:01:1c:12:cd:56:8b:e9:4f:70:0a:38:
ca:87:43:d6:d0:e8:fe:e9:4a:a5:5b:35:b7:20:54:a8:83:ef:
dc:ed:92:05:17:67:64:48:2e:bf:0d:cc:3e:0f:ea:d4:6b:58:
7e:54:a7:6b:00:1a:3d:eb:e2:42:e8:93:df:04:ad:2a:37:b0:
90:46:6a:74:d5:9e:6a:83:d3:45:3a:19:3d:5f:62:67:7a:6e:
ec:61:bc:9b:59:d8:f3:2f:ef:a7:5b:fc:6c:71:da:cb:92:f1:
25:4e:8e:1d:af:fe:39:b9:42:e8:77:57:4f:d3:4f:94:23:59:
d3:63:3a:b0:c8:c7:42:13:1d:3b:a0:e3:8a:76:25:e0:88:11:
b2:59:ee:1f:21:e0:5a:e3:65:7f:a8:af:f5:1c:b7:9f:90:39:
c6:00:1c:2b:eb:4d:ea:7a:3b:b4:67:59:0e:17:69:97:a4:48:
de:95:e9:7f:14:78:fc:7f:dd:54:fe:41:a2:76:3f:ea:4d:00:
c6:13:3f:4e:81:86:b5:f8:4c:24:b7:56:39:42:9a:60:32:c3:
91:cd:a7:10:9f:ff:5b:fb:3e:f4:2c:d1:c1:86:b0:69:64:ee:
1e:09:3f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:40:30 2025 by rpki-client