Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
File: qqxhl3mf1otuW74LV-ZS_YDdNiE.mft (raw, json)
Hash identifier: wFHMmzF+PjtuxqMLWOSUAR7gsUetH6+MoLU/+v0HSxg=
Subject key identifier: C6:5E:E8:9E:5A:ED:BD:E1:C1:AF:6A:15:24:AF:E5:8E:3F:25:53:00
Authority key identifier: AA:AC:61:97:79:9F:D6:8B:6E:5B:BE:0B:57:E6:52:FD:80:DD:36:21
Certificate issuer: /CN=aaac6197799fd68b6e5bbe0b57e652fd80dd3621
Certificate serial: 019655008B5B50C92AFE63AE0D17099F83A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
Manifest number: EB
Signing time: Sun 20 Apr 2025 21:00:21 +0000
Manifest this update: Sun 20 Apr 2025 21:00:21 +0000
Manifest next update: Mon 21 Apr 2025 21:00:21 +0000
Files and hashes: 1: HW--gyFyIjJfbbNnSxJATPWJGEI.roa (hash: shKJNjvcZlh2Drp2JswFM6L89Fwml75F7pDB0H15/3Q=)
2: qqxhl3mf1otuW74LV-ZS_YDdNiE.crl (hash: qTyvsBv6wmoTfL6TkDXZXiYyqkVWcYKJb+GSUApURIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:8b:5b:50:c9:2a:fe:63:ae:0d:17:09:9f:83:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaac6197799fd68b6e5bbe0b57e652fd80dd3621
Validity
Not Before: Apr 20 21:00:21 2025 GMT
Not After : Apr 21 21:00:21 2025 GMT
Subject: CN=c65ee89e5aedbde1c1af6a1524afe58e3f255300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:23:20:27:b2:65:03:d2:65:aa:4a:ae:5c:f6:
0b:b6:16:74:33:a3:c9:73:ab:d6:43:b4:96:55:c6:
a0:d5:15:3a:3e:67:1c:59:2c:dc:ae:ae:8e:48:3e:
aa:45:28:4c:a7:b9:2b:0f:ec:b3:50:10:3e:68:f1:
a3:7c:f1:7e:3b:3d:b4:9b:37:b4:71:c8:2d:2a:87:
1d:41:3f:58:58:91:bc:4e:f3:58:e5:33:34:02:fa:
d8:a4:1b:0f:f3:90:59:97:39:bc:f7:bc:39:5d:f7:
38:16:13:82:1d:a8:31:47:e3:39:3f:c0:9e:24:21:
6f:61:14:5f:21:c4:21:f5:d6:4d:6b:b2:e4:fd:59:
0b:32:3c:5b:7b:6c:a9:30:b0:f4:19:f3:a0:78:58:
a1:bc:7b:29:90:ba:cb:ac:f0:00:01:fd:d7:5c:a0:
c9:0f:d4:f0:d3:57:b5:6b:0e:6f:7d:0f:b9:16:a3:
75:19:f9:34:0b:b7:9c:73:ae:62:2f:c7:11:e0:c2:
3a:72:80:6f:9b:99:64:89:5c:18:00:78:22:92:14:
36:94:d5:5b:12:51:27:e8:19:bc:24:58:8b:15:4f:
7a:8d:b2:a2:54:64:22:53:87:1b:9f:c2:d4:4a:60:
da:bc:d6:3d:67:f7:2e:d9:04:21:a9:98:c4:76:6c:
74:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5E:E8:9E:5A:ED:BD:E1:C1:AF:6A:15:24:AF:E5:8E:3F:25:53:00
X509v3 Authority Key Identifier:
keyid:AA:AC:61:97:79:9F:D6:8B:6E:5B:BE:0B:57:E6:52:FD:80:DD:36:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:aa:fe:59:cb:ff:a9:da:95:91:96:b9:3a:9d:97:fc:50:0e:
7e:c7:26:f3:2d:9f:88:b2:67:72:d1:99:f6:9d:ec:bc:e9:fb:
75:57:b8:70:3a:ee:7a:9e:e6:0c:0a:21:6a:97:0c:57:67:ad:
0c:b2:58:1a:a5:5f:6b:8f:70:eb:b3:36:53:13:57:12:6f:73:
7b:56:66:bb:96:dc:18:25:56:6f:f1:bc:5f:45:9e:a7:7b:91:
45:70:0e:30:7d:2d:b4:da:90:f2:b1:4e:c5:c2:5a:ce:0e:a6:
df:9a:33:ab:ef:76:a8:d5:29:fa:0a:f4:bb:da:78:4b:cc:2d:
c1:16:a4:2f:98:50:07:3f:78:b0:97:e8:dd:95:57:6d:36:e6:
a3:43:1e:ef:9b:62:08:40:45:a8:80:ce:d0:d9:8c:fa:6d:c9:
86:d5:01:10:34:94:fa:2c:dd:5b:49:cb:25:cc:60:48:5f:13:
02:73:c4:ed:e1:e3:95:dd:60:4e:34:5d:46:42:f7:d5:0e:f1:
56:d1:1c:3d:e8:46:9f:b9:b4:d7:c9:98:34:b9:0c:d4:8e:03:
8e:57:4a:94:07:cc:10:f3:aa:50:40:f4:8d:89:cb:78:01:03:
7b:f0:e3:cb:c8:25:f0:16:fc:de:cf:0c:f3:92:e5:3d:d2:a2:
5e:8c:7c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:56:00 2025 by rpki-client