Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
File: qg-X5jUIIZuWy7IQY0P14bbcWk8.mft (raw, json)
Hash identifier: 3Ue5wA860wlwuZXf6M5+yLnvDwnm9KRcKbO4Ozeif3E=
Subject key identifier: 3B:F1:B2:33:09:07:4F:A4:8F:8B:45:B5:33:1E:90:C4:C2:FC:E9:D8
Authority key identifier: AA:0F:97:E6:35:08:21:9B:96:CB:B2:10:63:43:F5:E1:B6:DC:5A:4F
Certificate issuer: /CN=aa0f97e63508219b96cbb2106343f5e1b6dc5a4f
Certificate serial: 01965236F4C80B7FD4DD450A2B1B521EA272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
Manifest number: 0202
Signing time: Sun 20 Apr 2025 08:00:55 +0000
Manifest this update: Sun 20 Apr 2025 08:00:55 +0000
Manifest next update: Mon 21 Apr 2025 08:00:55 +0000
Files and hashes: 1: 9AnxnImjEc49reXZMK2FTMayLmk.roa (hash: 8tldiaw0Efa5JT0iNf3f5fRMFBv7jO6PfNRsCAPI7BY=)
2: qg-X5jUIIZuWy7IQY0P14bbcWk8.crl (hash: PhpuVue3IIWdQ3FYLNYevc99qlFsbJg6jrIXTZj9WvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:f4:c8:0b:7f:d4:dd:45:0a:2b:1b:52:1e:a2:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa0f97e63508219b96cbb2106343f5e1b6dc5a4f
Validity
Not Before: Apr 20 08:00:55 2025 GMT
Not After : Apr 21 08:00:55 2025 GMT
Subject: CN=3bf1b23309074fa48f8b45b5331e90c4c2fce9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:55:b9:d6:5f:c3:d8:f5:42:d9:f4:d5:16:ff:
c5:cb:5f:56:cf:38:9a:b9:83:b3:66:ff:ab:90:88:
38:f5:70:92:94:22:a0:73:e7:b4:ba:da:48:eb:23:
d9:ca:3e:f2:f7:d0:8a:86:e9:20:c7:cd:49:c6:c0:
21:76:87:43:ee:ab:06:12:22:b9:1c:d8:e8:6b:56:
d4:42:64:c8:bc:5d:d4:fd:88:4e:c7:15:4a:b0:89:
28:8b:ff:d0:d5:e4:48:f2:3c:2d:4e:33:2d:08:8b:
cd:41:87:d5:e8:9c:69:23:c2:89:8b:b3:54:99:44:
05:bf:81:dc:be:97:a4:de:55:bd:11:58:08:52:78:
54:1b:81:3d:ae:f3:f0:0e:62:e8:54:e3:3e:73:0b:
c3:5a:b8:dc:32:8b:16:d5:e7:94:b8:82:66:8d:ee:
82:ea:0a:74:52:08:9a:50:0c:1f:7f:35:5b:5f:d1:
a0:29:bd:2b:47:e4:05:7f:7d:fc:6d:e6:d8:fc:7d:
93:4b:fd:53:e9:f4:0c:86:2c:3a:72:fe:ea:e6:0c:
94:6e:1b:b2:5c:2a:d3:a8:88:4e:4b:7f:b7:af:10:
60:30:b1:a1:20:90:28:af:f7:92:06:3a:2b:bd:22:
06:7f:4b:41:be:42:86:2e:b2:61:2b:e7:23:d2:03:
db:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F1:B2:33:09:07:4F:A4:8F:8B:45:B5:33:1E:90:C4:C2:FC:E9:D8
X509v3 Authority Key Identifier:
keyid:AA:0F:97:E6:35:08:21:9B:96:CB:B2:10:63:43:F5:E1:B6:DC:5A:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b7:39:40:46:c9:94:7b:c7:02:64:d3:16:bf:c3:df:a3:ec:
c1:a4:51:bc:73:3a:e9:09:63:c3:66:9e:08:ee:22:ce:8e:c1:
5e:82:91:0d:7b:f4:65:35:f9:54:f2:b1:be:85:68:d2:90:98:
71:e0:ce:30:cc:85:77:c6:1c:be:93:93:c2:3d:42:17:d2:4d:
39:9c:60:bd:82:a1:36:46:c3:31:b9:05:61:e8:60:f3:c8:5e:
e3:9e:30:08:94:7b:e4:90:78:f5:91:ce:cc:0b:79:c3:2b:27:
a4:b5:de:81:66:41:e4:f8:69:86:1c:5e:ed:27:02:9a:88:33:
88:6b:99:88:23:72:90:e2:72:99:19:23:98:1a:b0:55:df:7a:
81:3f:f1:bb:22:55:8a:2f:84:63:5b:79:f6:13:47:c6:b8:35:
11:4d:75:6d:d2:eb:7a:75:6f:b6:a4:f0:ae:7b:a6:bd:05:98:
c5:ec:c1:a4:b3:d5:a8:22:72:6e:f7:9b:73:a8:7d:86:a4:a2:
20:16:64:47:87:5a:75:19:a9:0d:42:01:09:ed:95:be:8e:ca:
9f:2b:77:42:c8:c6:0c:66:ab:c1:07:f8:66:4e:76:d2:65:69:
63:ed:d5:6f:11:00:8a:4c:23:ab:af:d0:6b:d9:24:0d:33:70:
de:7e:8b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:00:40 2025 by rpki-client