Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft
File: qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft (raw, json)
Hash identifier: ZEuafC2vEEKg4gSLw09/abfEEaurDTvCRd6lElrHqyM=
Subject key identifier: E0:78:C9:F3:12:4F:6B:A0:76:74:C0:4C:C0:F1:3B:BB:80:26:AC:2C
Authority key identifier: A9:A0:73:B3:1D:88:8E:44:39:E2:72:E0:07:C9:53:2F:C3:05:C8:0D
Certificate issuer: /CN=a9a073b31d888e4439e272e007c9532fc305c80d
Certificate serial: 0196138FB32D775C4F1CB0D98920F968EAD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaBzsx2IjkQ54nLgB8lTL8MFyA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft
Manifest number: 0B9E
Signing time: Tue 08 Apr 2025 04:01:46 +0000
Manifest this update: Tue 08 Apr 2025 04:01:46 +0000
Manifest next update: Wed 09 Apr 2025 04:01:46 +0000
Files and hashes: 1: E0nL2r6tA4Kip6utbHVTl2QsGcA.roa (hash: aen5+JQjIiPGZfLBCbBcX/i0rEODfLs98wUB0AIvd0A=)
2: qaBzsx2IjkQ54nLgB8lTL8MFyA0.crl (hash: dectBW68UFzilPCHTmohIN6/e9s/7oJ/pzeY/BNTrjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaBzsx2IjkQ54nLgB8lTL8MFyA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 04:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:8f:b3:2d:77:5c:4f:1c:b0:d9:89:20:f9:68:ea:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a073b31d888e4439e272e007c9532fc305c80d
Validity
Not Before: Apr 8 04:01:46 2025 GMT
Not After : Apr 9 04:01:46 2025 GMT
Subject: CN=e078c9f3124f6ba07674c04cc0f13bbb8026ac2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:85:55:09:8f:06:ce:d3:87:71:3d:ec:c5:86:
bb:dc:ce:6f:1d:e1:72:02:aa:49:ad:05:bd:8b:41:
26:8e:1c:0b:10:a0:a9:c4:55:fc:b6:be:39:57:46:
9f:01:39:fd:a4:20:b5:c3:78:c3:bd:2c:02:0e:64:
ad:4d:32:d3:75:4f:2e:0e:7e:9e:30:4b:6a:9c:7c:
7b:00:a6:1a:42:5a:23:e5:2c:c2:4b:64:ac:c2:9e:
6f:17:23:f1:8e:55:17:0a:b5:e9:92:25:db:01:c3:
87:a3:99:d8:06:22:0f:ce:f0:ef:89:0a:b6:67:2c:
5b:a5:f1:cf:9a:2f:d0:ab:01:4a:1b:5b:df:45:4b:
2e:56:62:09:19:11:de:e0:ff:8e:fa:6f:6c:7e:1c:
22:40:d9:a3:79:61:33:e3:73:3b:26:d1:cd:5b:8d:
d8:f6:eb:57:ea:ff:05:ca:4f:4a:a0:ea:6b:b9:9c:
09:9c:eb:90:e3:76:97:27:52:7f:75:b7:35:4e:20:
79:22:a8:ee:d1:90:82:40:31:c2:5f:74:63:54:22:
f9:96:95:3e:84:fb:d3:50:cc:48:a8:56:69:30:85:
ff:f0:ac:c4:f8:40:19:bb:f2:69:e8:38:0b:d8:61:
bd:92:3b:b5:5a:e9:0a:4e:8a:7a:12:0d:67:af:fb:
75:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:78:C9:F3:12:4F:6B:A0:76:74:C0:4C:C0:F1:3B:BB:80:26:AC:2C
X509v3 Authority Key Identifier:
keyid:A9:A0:73:B3:1D:88:8E:44:39:E2:72:E0:07:C9:53:2F:C3:05:C8:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaBzsx2IjkQ54nLgB8lTL8MFyA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:16:a2:b4:69:be:07:52:32:de:43:e2:05:7d:91:0c:8b:a2:
fd:9a:d9:34:7e:cb:90:58:47:d7:fe:60:e1:3a:2a:e2:63:45:
b8:33:1a:50:5e:3e:8d:a2:75:4e:14:4e:8a:b9:79:40:8e:b1:
90:39:c2:4b:7a:84:47:ca:4f:5c:c3:c8:23:1e:d7:5b:83:fd:
79:fa:b1:58:06:e2:99:a6:74:99:2d:07:f0:8f:32:7c:6e:f7:
f6:c7:ff:ce:ea:ce:4a:0b:17:7d:f5:bf:f5:38:34:2b:60:e6:
4f:82:8e:54:b0:69:7b:89:dc:6b:39:7a:45:62:c8:c6:90:5d:
e6:77:86:c4:83:28:c1:ff:54:22:44:c2:e1:f4:10:1a:9c:94:
55:66:0e:f9:ca:3e:42:ee:54:bd:0d:9e:52:90:9f:7e:25:39:
fa:14:28:44:1a:c4:9d:c8:f8:80:66:bb:5e:58:05:5b:78:2b:
13:3d:62:fa:e3:30:8b:60:8b:72:30:e1:0f:ec:5f:08:1b:ec:
67:78:7c:3c:bb:8f:b5:3f:80:ea:54:26:10:9b:ce:ad:56:c3:
9a:b7:53:8b:ad:72:da:c0:2c:b2:90:77:00:44:90:27:a6:c8:
54:36:a0:b1:5a:c2:c8:61:91:12:34:20:a4:93:ec:72:93:5d:
5c:09:9b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:08:36 2025 by rpki-client