Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
File: qfL96iY7efzhE4kFKwzZQJlcbf4.mft (raw, json)
Hash identifier: sHbCA3/dFO/lDDBNIQ+nc1wmBeOyPAi29NWuW2Cm1aU=
Subject key identifier: 37:1C:46:CA:4A:D2:05:73:01:A0:5D:A2:44:BF:A0:07:37:2F:F8:2D
Authority key identifier: A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
Certificate issuer: /CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Certificate serial: 01960A8C4F22FF48326E32CD99C7314C690F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
Manifest number: 0B64
Signing time: Sun 06 Apr 2025 10:01:29 +0000
Manifest this update: Sun 06 Apr 2025 10:01:29 +0000
Manifest next update: Mon 07 Apr 2025 10:01:29 +0000
Files and hashes: 1: PIFbvqZsTCVITsXCVJp94hRSd40.roa (hash: cQLvhNHJgfoGCqvXulMMhioH9SATxRMjiGUXlSo7XxA=)
2: oHZuZKLdIqX9TZjhMfxVImyzxr8.roa (hash: 3RagyetzMFETxC4N1pLRK9iNlu+vVXTBppJLVU5AMlY=)
3: qfL96iY7efzhE4kFKwzZQJlcbf4.crl (hash: kbe3GpAMrHQ3oBW3Ixnm+Gjz7litLURFjAQS5gYQgpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0a:8c:4f:22:ff:48:32:6e:32:cd:99:c7:31:4c:69:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Validity
Not Before: Apr 6 10:01:29 2025 GMT
Not After : Apr 7 10:01:29 2025 GMT
Subject: CN=371c46ca4ad2057301a05da244bfa007372ff82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:94:c5:c5:5b:53:eb:63:dc:d1:3c:9e:37:
a9:2c:a6:1d:dd:83:44:19:d1:bd:63:6d:29:b3:d5:
59:9c:3f:59:9e:c9:39:8e:c1:d2:8f:19:7d:c5:37:
29:5d:0f:98:58:64:b2:b3:d9:7b:d6:b0:a4:ec:56:
99:8f:57:fd:31:cd:6c:56:85:c1:dc:55:c2:dd:51:
ca:17:8c:d0:f6:51:eb:8f:1e:ec:4e:07:3d:5c:8b:
94:27:4a:41:df:f1:7b:e3:f8:92:54:16:a5:df:1a:
e1:ee:ab:ea:c7:c9:eb:07:2a:c4:99:de:b0:48:36:
1f:38:f6:89:64:e1:bf:0a:cf:42:2e:c0:a7:f9:ac:
ba:77:a1:43:db:39:6b:d6:46:00:60:75:5e:1a:28:
8b:16:5e:d0:93:ab:1d:a1:0e:dc:be:40:e6:67:7a:
82:21:d0:9b:79:9a:13:bb:e7:32:f2:6a:fb:4e:ff:
4b:59:37:f6:1f:b2:01:cc:6c:71:d4:4d:ef:67:81:
de:04:00:3f:e3:0e:62:f5:4b:ce:a3:dd:52:f1:57:
e4:03:24:50:9e:14:67:5f:26:86:c8:36:d9:8f:c9:
bb:a8:01:e9:a1:0c:2f:88:f4:b5:e7:8e:35:c9:b8:
9e:d8:1e:c6:4e:e5:8a:bb:85:20:bd:09:ce:48:56:
ba:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1C:46:CA:4A:D2:05:73:01:A0:5D:A2:44:BF:A0:07:37:2F:F8:2D
X509v3 Authority Key Identifier:
keyid:A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a8:00:6b:01:88:8f:b2:39:91:7b:b3:6e:3c:5b:fc:3b:53:
73:17:7d:40:5e:fb:b8:10:09:f2:2d:22:b4:a1:51:33:89:b6:
41:2f:d0:70:3d:c8:5e:a9:8f:6a:3a:91:26:a2:b5:7f:db:6b:
56:89:49:37:bc:50:d3:19:1f:15:70:be:ad:1b:c5:b8:ee:fa:
7d:30:24:ef:c0:03:4c:ee:9b:32:20:6f:98:5e:b6:5e:73:bd:
2e:b2:b4:d4:43:4f:d5:d6:54:ec:83:fd:b1:60:30:b2:7b:d9:
aa:5f:91:53:05:c4:d0:40:76:df:9b:db:f0:e2:9c:77:07:61:
d7:09:5f:ed:9d:b4:03:aa:92:fa:3a:46:3f:53:21:5a:8f:1a:
cf:c9:88:65:77:08:fa:70:ac:1d:58:f7:9f:f6:ca:64:23:d1:
5d:42:b2:62:c8:3c:50:6a:a2:d5:e4:02:28:b2:fb:ca:9d:56:
cf:a0:7d:e5:89:4d:e1:8c:cd:8c:7f:54:ae:b8:a5:b3:1f:15:
c0:a1:68:bc:79:25:10:47:d2:01:45:8e:26:57:62:e3:8c:ce:
f7:48:27:29:88:d4:4a:7f:e1:14:64:9d:24:32:ed:8a:1d:bd:
4c:1c:6e:68:cc:b0:3f:f3:6d:4c:e7:cd:c3:f7:6c:84:16:28:
5a:55:51:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:12:53 2025 by rpki-client