Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
File: qcxE1_HQ3Apavyd2SVth3kgZkl8.mft (raw, json)
Hash identifier: Pxkp1Sc6tTpRE4QREwPCa7lW/KJtQ9ft70yUd5EURNs=
Subject key identifier: 0B:8C:5F:E6:36:89:2A:97:73:51:96:05:6C:33:3A:60:E9:68:86:70
Authority key identifier: A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
Certificate issuer: /CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Certificate serial: 0196146B306B1668B037A514A60C8A507BE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
Manifest number: 1079
Signing time: Tue 08 Apr 2025 08:01:31 +0000
Manifest this update: Tue 08 Apr 2025 08:01:31 +0000
Manifest next update: Wed 09 Apr 2025 08:01:31 +0000
Files and hashes: 1: Jo7QZBDB32wXW0Iw1K7QdXNowZk.roa (hash: K7AhFGZtd/rNskeYTg//KKyYm9N8IOSqZd1eL/nYFI0=)
2: qcxE1_HQ3Apavyd2SVth3kgZkl8.crl (hash: d6UXLEDjuP4AFfKiXd+Bex+Io6nlbdJeBtLKl82OfsU=)
3: s7SwYsQxw0lQy1OCUyDcPA5nRsQ.roa (hash: oInMskbU1ysq45NZWBKPFPJeOmbD2WauFvK9W3eBwaY=)
4: vFfYVEKCcc2PyT6NhaZHTqsCyRc.roa (hash: IviSD1XdrOD9s0OcxHYtTVilTBOr8uyUO7SjAFCSO3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:6b:30:6b:16:68:b0:37:a5:14:a6:0c:8a:50:7b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Validity
Not Before: Apr 8 08:01:31 2025 GMT
Not After : Apr 9 08:01:31 2025 GMT
Subject: CN=0b8c5fe636892a97735196056c333a60e9688670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b5:a2:23:4b:f7:96:fa:bc:88:ff:38:ef:5b:
68:46:a4:f1:3e:7b:8b:f8:ac:b2:97:1b:6f:a2:17:
35:29:cf:68:a6:10:91:64:91:57:0a:d4:73:3a:45:
81:6d:7d:47:ee:2c:5e:42:8b:e5:a7:ea:4f:b3:8b:
bd:23:d2:36:b1:77:2b:94:93:65:30:6b:ee:a7:1c:
42:bb:0a:7a:44:27:ab:25:49:22:dc:83:9f:95:18:
8e:92:ea:c4:be:a6:e2:db:b6:4a:b9:6b:ab:8d:8d:
e0:ae:3e:d1:ae:c6:21:6e:a2:ef:1c:94:54:0a:ea:
51:7e:3c:07:d3:a3:06:1d:c5:b5:1b:3a:44:c4:c9:
b4:e0:80:49:20:2f:8f:59:24:bb:cc:29:b2:8b:35:
44:1c:35:00:dc:d2:18:9e:7f:50:79:21:24:c3:8c:
c6:fd:88:83:12:db:c0:f8:1e:96:1d:32:b9:8c:6c:
19:5e:34:01:a4:97:1a:3c:a1:99:ce:df:d6:c2:43:
c7:74:a0:57:35:f8:47:e5:43:79:cc:28:92:83:e7:
a6:f6:cc:f3:40:bf:7f:2b:b2:ed:49:2d:92:dc:85:
d1:3b:ca:61:37:5e:3c:c4:9b:fe:c2:34:0e:fc:d0:
5b:88:05:e0:a4:03:16:00:8f:8b:12:d9:8d:ec:c0:
fb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8C:5F:E6:36:89:2A:97:73:51:96:05:6C:33:3A:60:E9:68:86:70
X509v3 Authority Key Identifier:
keyid:A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:fe:1e:fa:2b:11:99:68:7a:c2:d5:86:4e:9b:4b:01:fa:d6:
38:37:e6:60:8e:6d:7e:b5:d1:6e:27:e7:c8:9f:c4:80:6c:2e:
4f:2f:8a:a2:16:0e:2b:2a:62:b6:24:4a:f8:38:6a:1c:01:e6:
bc:fd:5f:da:80:82:67:a1:32:46:7a:13:64:1c:94:ef:e0:17:
c2:87:da:ea:23:78:bf:b4:4d:3d:a1:a5:79:ef:7a:36:cc:e4:
c2:0a:09:1c:48:24:16:0c:e0:63:bb:37:26:45:be:51:75:c4:
24:38:5d:e2:10:c0:a6:87:b1:fe:d4:a4:c8:44:c0:22:63:07:
a5:f1:a6:64:bb:bd:de:8c:c5:44:35:2f:ec:ae:0a:aa:a3:3a:
6d:1c:6d:c8:8e:95:3b:f8:eb:eb:61:6e:23:54:1a:1b:da:79:
2d:13:ba:e0:a2:99:f5:29:08:3a:8a:f6:bf:8b:db:bd:7f:3f:
e8:f7:ba:ed:7c:91:5e:3a:50:24:ba:f9:3b:b6:80:06:65:0a:
77:29:bc:09:64:bd:48:26:f3:e2:c7:30:84:6e:14:4a:d3:b5:
cb:fb:c8:cb:97:ef:d5:c6:70:6d:43:97:13:8d:31:4b:d1:02:
82:eb:ae:11:fd:32:f7:5d:c2:5d:22:bf:53:8e:c3:1a:0f:5a:
27:b9:5b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:32:32 2025 by rpki-client