Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
File: qBKXsdNqQt446EgLuSm0W8kDDJ0.mft (raw, json)
Hash identifier: cclcc9+3lVfZxKoWqszewYvRqwQAQqPjLxzhijFwL/c=
Subject key identifier: A2:5E:B6:09:F5:A5:C2:B5:6D:2B:63:6E:68:A0:C1:4B:D0:C4:03:F1
Authority key identifier: A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
Certificate issuer: /CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Certificate serial: 01960489E56309B46333C03919BA9E435C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
Manifest number: 03D7
Signing time: Sat 05 Apr 2025 06:01:08 +0000
Manifest this update: Sat 05 Apr 2025 06:01:08 +0000
Manifest next update: Sun 06 Apr 2025 06:01:08 +0000
Files and hashes: 1: JQfyecuTBe9b0TVcrmo-tSM3WaE.roa (hash: 2itfFVYv64s2jKKBdM91XUWlXntYtRrbHNJzdg5vens=)
2: qBKXsdNqQt446EgLuSm0W8kDDJ0.crl (hash: M56hwIDYfZJqParpq8hbseeIl0/jHucWZO3DjnI6u3M=)
3: svM12JDKJB3e-TFZ2wiCejW_Bfk.roa (hash: QUass/NjIlJuE2HSs5ern4SfiFA+q7m1ESWTARVsCGk=)
4: w7D3frL9E_kqNSgsBRGXDLacRBo.roa (hash: bAa/9UjCK1wH6h3VxI4XwwbcVqAdTwwv/HQNN/v8Ugg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:04:89:e5:63:09:b4:63:33:c0:39:19:ba:9e:43:5c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Validity
Not Before: Apr 5 06:01:08 2025 GMT
Not After : Apr 6 06:01:08 2025 GMT
Subject: CN=a25eb609f5a5c2b56d2b636e68a0c14bd0c403f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:50:75:db:43:02:4a:1f:d8:43:a0:7c:2b:7c:
f4:f0:8f:fb:6f:f9:94:2a:3a:49:4c:43:d5:67:dc:
c7:82:ce:f6:09:13:27:ca:76:98:60:c9:9f:d4:72:
58:80:c7:8c:18:cc:09:28:34:4a:16:80:9c:21:30:
97:fe:d0:08:73:81:cb:58:3e:af:a3:7a:37:5d:1b:
04:a2:ce:49:63:d1:41:60:dd:6f:70:ce:bc:24:db:
88:16:90:69:1c:b5:63:49:0e:81:eb:21:3d:12:35:
2f:5e:1f:27:f8:9c:89:c7:e6:ca:b7:1a:c1:95:d8:
fd:b7:69:03:66:47:97:14:ee:8b:4d:b4:c3:1b:eb:
c9:5b:d7:69:ae:8a:fc:b5:3c:4a:f3:50:be:09:cb:
ff:a0:20:75:8b:c7:93:d6:56:26:f3:c5:01:2d:f8:
36:8d:ab:68:c6:d9:bc:ba:bb:01:25:cb:b0:92:b6:
00:df:60:6a:c0:e2:00:66:ce:0a:2f:e7:55:41:cb:
80:68:1e:ad:b9:94:5f:44:4b:18:80:c4:e4:ce:0b:
b9:80:96:ba:d1:0d:4a:30:07:f8:d7:7a:af:e5:f2:
af:87:90:41:fb:f9:dc:ae:8e:9c:0f:c0:77:b5:44:
d3:99:52:97:86:bc:f3:31:8f:8c:78:78:b4:a6:43:
79:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5E:B6:09:F5:A5:C2:B5:6D:2B:63:6E:68:A0:C1:4B:D0:C4:03:F1
X509v3 Authority Key Identifier:
keyid:A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:6c:5c:b1:87:43:45:c5:cf:00:61:3b:e1:b4:b3:e3:28:8f:
81:c4:27:e8:de:e7:4a:f7:fc:0b:02:ad:7f:81:97:c6:2c:2b:
42:37:04:af:36:28:0e:1a:be:66:86:bb:d3:34:ba:b3:e7:5a:
f8:85:52:2b:97:e8:50:99:4e:a1:bb:44:ab:53:12:c3:95:d2:
92:fd:b9:0c:55:80:7d:2c:9e:fb:24:3d:27:b6:38:25:b6:c3:
3d:4b:09:78:de:38:3c:20:7e:32:4b:e4:d5:f3:1e:56:dd:a4:
f0:28:ab:2d:94:5c:f6:e8:9f:47:f8:dc:00:1d:58:d1:75:66:
f8:d9:ca:f0:92:35:0c:62:3f:c2:6f:0b:ee:e5:ed:90:7f:0a:
dc:33:ef:d5:06:45:7e:4f:81:50:77:74:dc:84:df:03:cd:9d:
39:48:83:5b:d2:86:b6:c4:29:21:1e:64:ca:08:86:02:db:4b:
a7:f6:5f:43:9d:f1:a7:1a:4c:b6:7d:64:f9:68:5e:8c:5e:a9:
b8:56:3d:c3:a8:9a:bd:16:c3:1f:c8:fe:9d:91:a1:9a:fa:37:
d2:8f:ef:05:53:ad:b6:ff:de:0c:cf:53:e7:3a:f8:ee:5e:40:
d0:97:9b:8c:88:a2:e6:e9:3a:99:e1:f4:b9:be:81:bf:b2:30:
c1:71:75:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:14:43 2025 by rpki-client