Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft
File: qag61DyItM5E6CDhFd6cU34qVKY.mft (raw, json)
Hash identifier: aWhkoCLtdZR4xchLg2nNuyjkX8m2211WmnuS+biNHJg=
Subject key identifier: A8:7F:AA:28:EA:69:FF:41:96:9B:49:8D:DB:DD:1F:F5:46:EF:42:B6
Authority key identifier: A9:A8:3A:D4:3C:88:B4:CE:44:E8:20:E1:15:DE:9C:53:7E:2A:54:A6
Certificate issuer: /CN=a9a83ad43c88b4ce44e820e115de9c537e2a54a6
Certificate serial: 01964F6C720DD0E9670F558B35DFC017FB12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qag61DyItM5E6CDhFd6cU34qVKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft
Manifest number: 079B
Signing time: Sat 19 Apr 2025 19:00:29 +0000
Manifest this update: Sat 19 Apr 2025 19:00:29 +0000
Manifest next update: Sun 20 Apr 2025 19:00:29 +0000
Files and hashes: 1: 3JUWGQsOPBFoC4I-OGs1qaLU-CQ.roa (hash: HAn/ErTzS/Zebt/yY2233fhmAXGMbizcG23F8CM++/Q=)
2: qag61DyItM5E6CDhFd6cU34qVKY.crl (hash: ChppEiBMoaitkPN9RW2xfLgHnZncpbBrybviL5G8Ru0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qag61DyItM5E6CDhFd6cU34qVKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:72:0d:d0:e9:67:0f:55:8b:35:df:c0:17:fb:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a83ad43c88b4ce44e820e115de9c537e2a54a6
Validity
Not Before: Apr 19 19:00:29 2025 GMT
Not After : Apr 20 19:00:29 2025 GMT
Subject: CN=a87faa28ea69ff41969b498ddbdd1ff546ef42b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e9:9c:c6:06:b3:70:8f:92:b3:df:b4:a0:45:
a2:2b:23:16:b6:fc:2e:f5:7a:49:aa:8a:8e:07:67:
17:1b:18:81:81:97:50:00:98:23:00:13:5b:1e:56:
01:bf:fb:02:74:48:91:da:a7:cd:73:db:4c:3a:a9:
9a:18:46:ea:59:8e:42:32:34:1c:fd:c5:1e:c4:d3:
ed:f8:ea:94:b6:f4:85:6d:7f:96:68:12:4e:e7:4a:
f6:a9:c9:3b:4e:9f:b7:06:6e:0a:b9:e4:3b:38:64:
49:9a:67:f2:ca:93:81:8f:93:db:85:58:f5:23:d8:
fb:75:7f:5a:2d:f6:cf:53:9d:1d:52:2f:51:75:75:
7b:f3:67:46:3c:b1:d7:8c:c3:4f:78:f0:af:34:69:
ab:64:fb:d2:e8:32:4f:98:dd:46:8c:e0:f3:9b:76:
a2:ab:3b:7d:be:88:40:58:f1:bd:45:4f:49:46:f2:
cc:9a:1b:01:02:fc:f5:8e:a2:fe:a1:2e:3c:34:73:
b3:f0:f7:5c:88:f6:38:9c:18:49:6a:25:69:1f:c5:
b6:b5:2e:4a:e1:d8:ee:74:26:9f:2f:c5:4c:a2:93:
49:45:54:51:81:8b:de:7a:07:df:16:c6:0f:4f:dd:
cc:e1:bf:e4:6e:5c:9a:02:be:d1:8c:ef:8b:a4:ee:
8c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7F:AA:28:EA:69:FF:41:96:9B:49:8D:DB:DD:1F:F5:46:EF:42:B6
X509v3 Authority Key Identifier:
keyid:A9:A8:3A:D4:3C:88:B4:CE:44:E8:20:E1:15:DE:9C:53:7E:2A:54:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qag61DyItM5E6CDhFd6cU34qVKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:35:4f:5f:fa:2d:64:c0:f8:f9:f7:56:3f:f5:43:66:bd:ea:
ad:a1:5a:6a:48:3f:76:a3:de:97:f5:33:af:e6:9f:67:ba:12:
1a:c7:a0:aa:a1:c5:f6:d2:80:ee:ad:e5:f6:31:ca:20:b4:f7:
88:75:5e:35:86:a5:74:29:78:ca:2c:eb:d8:f6:2c:62:6a:52:
e8:4f:7b:24:3d:c1:2c:19:36:88:04:1f:0b:12:20:63:06:8f:
40:b2:2c:20:aa:b6:cb:c0:1e:89:2f:24:71:e8:1e:81:ff:c7:
e8:eb:35:c9:40:66:f0:85:44:aa:5c:5a:10:b8:ba:36:9a:4a:
fd:f4:6f:f3:b8:0c:3d:91:a5:8e:7e:94:4d:34:e7:f4:ec:2a:
19:25:5c:eb:a5:05:b0:36:aa:a1:09:02:d5:5c:0b:c5:77:bd:
78:a8:8a:49:d4:13:84:88:3f:ed:3e:bf:cf:92:91:b2:e7:d3:
21:b7:aa:d0:4e:2b:5e:16:6e:0f:40:b1:be:ab:c6:35:3d:7f:
47:3d:9a:13:7e:98:6a:6b:50:04:20:c6:c5:cd:9f:3b:89:c9:
5a:f3:99:c4:b1:ea:01:b6:fe:e6:1c:4e:04:c9:fb:20:f5:5c:
5c:7c:5b:a2:0e:58:70:b8:b4:84:67:6d:b5:74:3b:bd:4c:b2:
e4:67:49:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:10:43 2025 by rpki-client