Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
File: QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft (raw, json)
Hash identifier: mJxrxufhWx7FyBkwHOTj3L9hKakt+HTorBhTgZDmLiA=
Subject key identifier: 9F:26:F2:A4:4E:47:45:6E:F6:58:B5:B6:AF:06:25:86:1A:F1:8B:CE
Authority key identifier: 41:A5:9B:09:60:EA:65:D6:B9:23:93:EE:03:47:A1:A8:32:F9:B9:84
Certificate issuer: /CN=41a59b0960ea65d6b92393ee0347a1a832f9b984
Certificate serial: 01963CC145BC6C3DE28994F29785FBE5C1D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
Manifest number: 06B0
Signing time: Wed 16 Apr 2025 04:00:21 +0000
Manifest this update: Wed 16 Apr 2025 04:00:21 +0000
Manifest next update: Thu 17 Apr 2025 04:00:21 +0000
Files and hashes: 1: 7pmvBHJbdwVqFyqKem89BSyuKvk.roa (hash: yz/z7MiR6pHVCBirN+J/dsbi3QYekD7/Z8ghjQadQLE=)
2: LA-cz5sVCzNk_tA4a42FeutMowQ.roa (hash: uiKIsaEo4/vDsaJKzBGvYmUH1yNN4/rpS3B9ab7S0rw=)
3: QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl (hash: AGh22OOzD6olj88deTmeCM/8aKcdR3CrkE02zNxpKYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:c1:45:bc:6c:3d:e2:89:94:f2:97:85:fb:e5:c1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41a59b0960ea65d6b92393ee0347a1a832f9b984
Validity
Not Before: Apr 16 04:00:21 2025 GMT
Not After : Apr 17 04:00:21 2025 GMT
Subject: CN=9f26f2a44e47456ef658b5b6af0625861af18bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:64:f5:80:ee:40:3e:18:bf:37:89:e5:42:3a:
81:62:21:6e:e6:bc:c0:f9:35:b0:6f:b5:35:37:29:
b9:a5:ed:ed:d5:cc:b6:75:0e:ad:bc:4d:78:69:9d:
ae:b5:35:b9:a7:6c:13:66:aa:33:fd:a0:9a:b9:5d:
6b:c9:1c:f1:70:8b:75:91:64:f2:a3:05:e2:93:33:
92:fc:3c:9b:8f:f2:2a:5e:d7:51:e8:6f:d9:bf:47:
37:ce:6b:07:be:93:5c:90:69:cc:6f:7e:06:17:81:
11:97:72:a3:e7:73:8b:52:bc:ad:69:a9:08:83:fa:
41:f6:24:9b:ec:d7:8d:1c:22:c5:9d:32:1b:43:a2:
fe:b0:17:32:33:b4:2c:f1:10:ab:40:6e:b1:1a:8c:
77:dc:c1:05:ab:aa:1f:ee:fc:4e:39:43:b2:0e:cc:
df:dc:50:e2:5c:45:0c:20:d3:ff:e6:69:aa:87:45:
de:7c:69:33:ad:d7:1b:bf:6e:2a:60:92:7d:42:12:
4c:e1:57:5c:18:df:63:a9:d4:1d:0b:ec:62:8c:db:
eb:84:e5:3b:73:d2:62:8d:ba:d9:17:12:b1:a5:c2:
3d:7e:2c:2a:f1:5b:2d:bd:eb:a5:69:8d:4d:66:57:
ce:7c:ba:c5:c2:75:0f:41:59:83:67:bc:9c:bf:49:
42:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:26:F2:A4:4E:47:45:6E:F6:58:B5:B6:AF:06:25:86:1A:F1:8B:CE
X509v3 Authority Key Identifier:
keyid:41:A5:9B:09:60:EA:65:D6:B9:23:93:EE:03:47:A1:A8:32:F9:B9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ce:1a:35:dd:69:ff:22:f0:6f:d3:fd:85:d5:6d:db:af:8b:
f1:03:31:51:21:2c:71:b7:f8:f3:85:32:f8:63:1d:42:df:c5:
23:d8:39:30:56:a8:f7:1d:0d:0d:ec:00:51:02:fe:10:e1:75:
f9:8a:12:4b:b3:a1:f8:ac:16:04:e4:8b:10:49:d0:1e:b7:1d:
35:21:6a:bf:97:b7:bd:57:8b:42:00:a0:50:8a:0b:70:ed:31:
7f:11:aa:93:67:89:ef:23:38:3d:3a:16:3d:d6:6f:28:40:ec:
69:72:3a:7a:06:37:55:8c:0e:75:eb:24:9b:53:82:de:15:9a:
7e:78:70:b6:93:b2:9a:50:f1:09:78:45:af:08:ae:17:4d:48:
07:20:50:a3:70:93:e1:ff:16:2b:4f:12:f6:4d:5c:09:c7:ed:
d6:87:fc:91:46:ad:10:f7:91:18:c9:88:2b:f4:a0:f4:7b:5d:
bb:2b:f6:ce:62:9b:ef:70:62:33:84:45:74:a7:83:b1:64:07:
05:b8:a7:9b:92:fd:8c:77:b1:3d:5e:0f:f1:9e:9a:43:05:f6:
62:91:ea:02:bf:62:19:c5:ca:68:94:76:be:5c:1d:43:ea:f7:
e4:09:50:ce:5c:0e:49:0d:05:a6:d9:82:dc:eb:3d:ab:6c:24:
6e:39:bb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:36:22 2025 by rpki-client