Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
File: qCoCPr2xLpceeocp2Cankkz36DI.mft (raw, json)
Hash identifier: L7xda/QZwXOa+KB/eH3/2VOMSehlqAt0h9ZtVD/vTRs=
Subject key identifier: EB:39:05:84:02:A2:E6:FB:A8:E8:D8:61:86:23:DB:22:55:2C:A7:38
Authority key identifier: A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32
Certificate issuer: /CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
Certificate serial: 0196124568418EBE5D5B881AAC6894FDA8CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
Manifest number: 09F8
Signing time: Mon 07 Apr 2025 22:01:00 +0000
Manifest this update: Mon 07 Apr 2025 22:01:00 +0000
Manifest next update: Tue 08 Apr 2025 22:01:00 +0000
Files and hashes: 1: 0mOwovSQfaOTpOjMePlA1vJyx3o.roa (hash: UKn/uBWWad1ow9KJDqJ57gBdSqtGNkm8IvDuZQii3FA=)
2: Rb-9REf4Ku4-CgLC6REjl5LjwmQ.roa (hash: cTHupzsbPAMMKa56v6BN9R2pDgzgt3AMXO4LKaMqhQw=)
3: qCoCPr2xLpceeocp2Cankkz36DI.crl (hash: Fa/LIyt8y1WcBRPCFU1qdKBxqUOKu7ukU9Q3XE1qldE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:45:68:41:8e:be:5d:5b:88:1a:ac:68:94:fd:a8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
Validity
Not Before: Apr 7 22:01:00 2025 GMT
Not After : Apr 8 22:01:00 2025 GMT
Subject: CN=eb39058402a2e6fba8e8d8618623db22552ca738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d5:f1:5e:28:60:24:3a:81:6b:e7:47:bf:fc:
20:53:dc:50:b2:24:21:35:2a:50:99:02:e0:0a:ac:
29:f5:c3:a3:39:f7:ab:83:d1:d2:06:68:46:f9:98:
5d:8d:41:93:0b:77:23:ba:69:f9:ef:bd:81:20:9e:
68:09:91:cd:71:85:89:fd:74:3c:d3:9a:4e:51:91:
3a:68:f2:03:32:4e:cb:fb:d1:f5:0b:df:78:92:9d:
48:86:0f:c5:62:07:92:18:47:3e:1e:1c:a9:83:45:
93:2f:71:a4:59:e1:a8:f3:59:fc:d0:a2:9a:94:5d:
c6:79:64:db:5d:7e:a6:32:f3:78:4a:e2:f2:c1:5e:
81:e9:59:94:f3:3a:91:17:67:98:e0:d2:c3:dc:b2:
3b:d1:c9:cf:0f:9e:98:2e:46:51:13:1d:30:1c:7b:
73:89:52:93:a5:cb:f6:72:fe:3a:92:c6:b8:d7:18:
48:ae:7a:c0:84:39:0d:65:09:79:74:6a:47:bf:57:
dc:d8:54:8b:de:38:8c:65:02:2d:db:93:67:a3:8f:
cb:f9:7c:6a:b6:9c:aa:11:a4:f3:e2:67:cd:02:d3:
3b:56:c8:66:97:02:a0:f1:67:8b:33:f3:75:bc:8c:
ef:6e:9c:12:8f:a1:64:2e:3d:bb:c6:23:11:0e:da:
a9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:39:05:84:02:A2:E6:FB:A8:E8:D8:61:86:23:DB:22:55:2C:A7:38
X509v3 Authority Key Identifier:
keyid:A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:78:2d:08:f8:25:de:c8:2f:60:2f:ce:36:14:26:3a:8d:51:
87:81:fb:7e:e5:f5:52:6b:01:0d:2a:f2:bd:6d:7d:e9:3d:b5:
69:b9:83:40:6c:95:4d:37:65:97:32:69:49:5e:30:97:6e:ca:
2f:10:04:13:0b:ac:5f:6b:28:f0:61:5d:09:d4:5d:16:d1:a2:
7d:2c:9c:45:9c:5e:06:5e:fa:44:68:e4:f8:65:50:25:7b:eb:
48:b1:70:97:d3:67:6a:07:94:13:4e:d4:8a:fc:35:06:f9:d5:
71:b2:04:cb:e6:b7:f7:31:1f:e7:14:d4:e0:8b:c9:21:31:21:
dc:ed:2b:f7:ee:cc:38:6e:13:66:09:5a:fd:ad:ad:ae:a5:fd:
28:9b:0a:44:bf:e1:7b:6b:e0:7e:b1:32:9d:8c:7b:a8:49:a2:
15:85:00:cf:fb:77:8d:4c:2b:9d:67:11:4b:c5:75:db:9f:67:
a7:31:18:ee:fa:67:88:37:d8:5e:fd:24:39:64:b2:5a:07:17:
0b:36:ab:1d:02:b0:ed:2f:29:b2:f9:c4:3e:a2:ae:6f:82:85:
7f:3c:e6:f9:12:dd:96:16:bb:79:50:d4:71:42:63:68:5f:82:
ef:fd:a5:dd:0c:88:77:17:ae:a4:d0:d0:da:64:df:48:83:fe:
86:14:c6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:07:28 2025 by rpki-client