Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
File: qSskQKfHot_PLkIW2oo73mi5uJg.mft (raw, json)
Hash identifier: wMtUG0GGuSTgEgTGFRbAWcQJlKAcsb4ctKWq2n75BTo=
Subject key identifier: 08:2C:49:C0:A1:C0:D1:6A:0B:5E:FE:48:05:C5:C1:A8:25:49:62:E3
Authority key identifier: A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98
Certificate issuer: /CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
Certificate serial: 01963B77D02EE7A351C5EB657C234936B7BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
Manifest number: 1484
Signing time: Tue 15 Apr 2025 22:00:29 +0000
Manifest this update: Tue 15 Apr 2025 22:00:29 +0000
Manifest next update: Wed 16 Apr 2025 22:00:29 +0000
Files and hashes: 1: _n0xC-sidbdSFPfTnRV-lr4kGic.roa (hash: ++bpQemmXYA46AzwIRn3gko69y6uULCJsSLSxSSwsGM=)
2: qSskQKfHot_PLkIW2oo73mi5uJg.crl (hash: Zc2+KBJsCArtMj3+WNismJoBcjbMMH5ixvUZl96TdIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:77:d0:2e:e7:a3:51:c5:eb:65:7c:23:49:36:b7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
Validity
Not Before: Apr 15 22:00:29 2025 GMT
Not After : Apr 16 22:00:29 2025 GMT
Subject: CN=082c49c0a1c0d16a0b5efe4805c5c1a8254962e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:20:ab:08:38:9f:3f:6e:fe:87:31:aa:0f:a5:
4d:3a:a8:e9:e2:d2:5c:02:c1:b3:4f:29:9d:85:7b:
33:7e:d6:3a:36:8a:dd:20:a6:d4:a8:ba:22:42:9f:
f1:53:4b:92:f0:08:ec:5f:24:fc:a0:53:ff:48:7d:
1a:4d:83:63:e1:ca:a4:23:28:16:d5:d4:02:c3:9b:
10:03:95:56:92:10:a2:b4:ad:76:cf:07:39:bc:de:
9c:de:89:51:d2:a1:a0:e4:9b:2a:50:3c:d3:2b:74:
98:91:c3:80:94:f9:4e:50:27:25:35:9c:03:b2:c6:
22:6a:32:14:e1:e1:54:44:65:c5:5a:da:d3:21:b9:
a9:ea:eb:0c:2a:f8:39:d8:2a:a6:b3:9a:3b:c8:22:
50:8f:1d:93:f8:da:e0:40:64:11:c6:70:2a:d5:e0:
1a:22:a3:ba:ba:24:07:00:3f:cb:b4:22:bd:9d:b3:
50:c3:1e:00:b4:9f:7d:f8:c1:aa:d2:d6:96:a3:ba:
54:ba:ab:0d:00:69:30:5c:de:b9:11:3a:84:3a:97:
a2:f6:12:3c:ee:1b:64:69:bd:bf:aa:0e:b9:b4:e3:
52:39:ac:22:35:1a:5c:cc:2d:f2:80:bd:c1:5e:e0:
d4:cd:68:29:59:44:da:79:51:10:9f:f6:77:23:fe:
49:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2C:49:C0:A1:C0:D1:6A:0B:5E:FE:48:05:C5:C1:A8:25:49:62:E3
X509v3 Authority Key Identifier:
keyid:A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:bc:12:b5:99:12:1b:dc:57:5a:a5:29:83:5a:5e:a6:a1:7e:
30:35:23:69:bb:4d:89:c3:6d:f1:15:b5:3c:c3:ce:d5:bf:03:
b0:4a:46:ee:98:a6:55:7f:23:fc:d8:49:b7:d2:96:c7:42:bc:
0b:5d:26:d4:ae:87:1a:6a:8d:fd:93:89:43:37:a0:db:83:b9:
02:9b:4f:9f:24:db:bd:95:77:f7:00:9c:36:94:44:7d:ff:70:
0c:7b:6b:7b:b7:87:15:da:22:57:92:3b:2d:a1:9a:1f:6d:fb:
e9:9b:5a:12:ba:31:8f:a5:5d:91:42:d1:d5:c2:02:4b:2b:55:
02:90:b5:bc:6e:da:79:88:e2:73:5e:74:83:36:26:80:a4:2a:
cb:6f:3f:76:80:31:20:61:45:15:43:e0:f7:f8:74:d3:77:36:
8b:bc:d9:52:88:57:f6:fe:3b:b0:72:05:cd:c7:b0:7b:e3:b7:
5f:eb:1b:99:e8:23:1a:45:b1:cb:96:b3:63:2b:1a:9d:c2:12:
47:9e:30:75:21:fa:29:ab:98:ca:bb:3b:3c:75:e6:38:24:fb:
93:e9:e9:15:f5:d9:ef:f5:0d:04:09:54:3f:39:93:79:d9:c8:
47:74:26:2a:9f:79:b6:d0:22:50:72:67:14:fc:05:85:ef:27:
81:c2:f9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:57:27 2025 by rpki-client