Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
File: qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft (raw, json)
Hash identifier: nDQUfzMVkFkaOgPOJwKVE7D+N9g1y4zBqx9EciL29L8=
Subject key identifier: 5A:59:4E:1A:17:D5:32:81:09:CA:5D:78:65:FF:57:2E:25:0F:A4:90
Authority key identifier: AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39
Certificate issuer: /CN=aa00ca862956f19d4dc95468aa616f9b167d9b39
Certificate serial: 01964C6B3AAE94894F84E403990727F73F70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
Manifest number: 0892
Signing time: Sat 19 Apr 2025 05:00:17 +0000
Manifest this update: Sat 19 Apr 2025 05:00:17 +0000
Manifest next update: Sun 20 Apr 2025 05:00:17 +0000
Files and hashes: 1: R32ocj-6uY_43O0MYMBgyGscCvA.roa (hash: r9h0VFYvoYX+2ey0h2BkC9X3BYpiR12BEJYPKT358/g=)
2: qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl (hash: dZTUMTTnjYuKKPANdhthk4Vc21EfILNwItPWVI5Fl74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:3a:ae:94:89:4f:84:e4:03:99:07:27:f7:3f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa00ca862956f19d4dc95468aa616f9b167d9b39
Validity
Not Before: Apr 19 05:00:17 2025 GMT
Not After : Apr 20 05:00:17 2025 GMT
Subject: CN=5a594e1a17d5328109ca5d7865ff572e250fa490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2d:c0:7b:ca:0e:d5:05:1f:09:0b:0d:64:e2:
3d:c8:fc:13:f9:5a:11:81:16:66:b9:64:13:29:39:
ff:04:1a:56:3d:0c:75:25:ad:08:59:78:3d:8b:8b:
63:e1:9f:fa:dd:14:91:c6:97:88:fd:58:9f:f0:63:
c6:84:fa:63:d3:ae:be:c2:30:7e:48:c3:8a:d4:15:
2c:60:c6:5f:24:78:58:2c:4a:60:26:9d:32:55:6a:
07:ae:70:0d:4c:a6:0b:09:15:a7:e7:53:1c:7d:ea:
4d:36:11:5b:d5:a4:ef:1e:fc:03:54:74:d8:04:d8:
d9:4d:19:9e:a9:29:48:2b:90:9a:0f:fb:ad:8e:3d:
87:1f:7a:8f:71:cd:26:85:77:60:0d:da:f1:17:54:
ee:d5:f5:ab:2b:1a:3a:c1:cc:ef:70:1b:6e:cb:b9:
ae:bb:64:d9:a6:53:1e:ea:a5:8e:c5:48:06:c9:d4:
94:54:b2:66:dd:d4:7b:7b:33:cf:64:4a:d3:5e:91:
7a:ac:e7:1e:8f:9a:91:79:f0:a8:a8:2a:fa:4c:f8:
37:a9:48:f8:7f:cd:93:97:0c:51:5c:b9:60:59:aa:
8d:c0:23:19:f2:cb:8f:90:3c:51:b5:cd:aa:1e:12:
68:1c:b1:a6:55:08:a7:df:15:dd:e3:51:72:37:df:
2f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:59:4E:1A:17:D5:32:81:09:CA:5D:78:65:FF:57:2E:25:0F:A4:90
X509v3 Authority Key Identifier:
keyid:AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:52:fc:1b:04:9d:78:89:bf:d8:aa:f1:b2:57:ca:94:46:04:
c8:bd:d9:89:f8:01:66:cc:b3:14:b7:71:be:a5:05:50:78:6d:
d7:92:0b:0b:5e:e0:6b:6c:ed:56:3c:70:5c:5f:1b:89:2b:fa:
91:12:04:f0:25:c2:4d:b0:7c:86:d9:f3:b4:55:b6:5d:88:66:
76:61:1d:a1:24:b0:fb:e0:f6:df:c0:d0:e2:ba:34:99:30:2c:
3f:3e:30:4f:7f:e9:ee:0c:7c:bc:31:05:b3:45:97:1a:01:24:
69:64:a1:65:d4:c3:d9:16:c4:f6:da:3b:4b:58:27:55:cd:ca:
5c:dc:20:4d:96:0a:3c:ab:0b:8d:85:a4:c8:79:f9:4a:21:eb:
03:5f:97:65:57:ad:a8:22:6a:72:5b:e7:fa:f7:f7:65:f4:cf:
0c:0d:5f:a3:95:91:f4:39:b2:a9:24:bb:b6:05:16:c8:e2:30:
27:06:f4:e7:86:dc:1a:b3:c7:46:77:f2:00:89:44:d9:f4:2e:
46:d1:20:68:7e:f6:f4:e8:47:f4:fd:fb:d0:90:a7:73:38:aa:
16:aa:27:24:41:23:92:2a:88:d3:63:50:b5:0f:b0:28:28:a1:
e8:0e:59:55:4e:8f:2f:a5:d5:f7:6a:f1:ee:df:d2:9f:70:56:
09:33:ae:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:47:05 2025 by rpki-client