Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
File: qgvXjKLKpeuP87noI3dNwbdN6-s.mft (raw, json)
Hash identifier: aMDKIaxqm8gtgiouasbPtxCTkDMzYXaCjWp4ArOy958=
Subject key identifier: CE:91:EA:4D:08:BA:08:A4:D6:55:4A:66:42:77:74:B8:12:AA:AB:B3
Authority key identifier: AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB
Certificate issuer: /CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb
Certificate serial: 01964BFE028744C22C4F17E8AEC84224C729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
Manifest number: 03C2
Signing time: Sat 19 Apr 2025 03:01:00 +0000
Manifest this update: Sat 19 Apr 2025 03:01:00 +0000
Manifest next update: Sun 20 Apr 2025 03:01:00 +0000
Files and hashes: 1: 49r3EiPqYIwA3FVnQ3pruyaEeaY.roa (hash: S4fah+Hi++9D/Vhg9/JWPzVOXskqt4CfJ/0z6MaI0ok=)
2: qgvXjKLKpeuP87noI3dNwbdN6-s.crl (hash: 71zssgAAhAt3Je0j7OP1zjcXKqqk9QtoytmP3ZioHUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fe:02:87:44:c2:2c:4f:17:e8:ae:c8:42:24:c7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb
Validity
Not Before: Apr 19 03:01:00 2025 GMT
Not After : Apr 20 03:01:00 2025 GMT
Subject: CN=ce91ea4d08ba08a4d6554a66427774b812aaabb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:37:f4:26:a9:43:a2:06:a1:0a:a5:10:dc:10:
36:df:46:97:36:4a:7b:b4:00:a9:5d:bd:cf:78:cd:
1f:2c:fa:b2:25:04:70:50:5c:a1:73:33:1b:77:62:
19:7e:55:22:28:10:bd:1b:40:1a:5b:3e:23:cc:67:
63:56:86:5e:6f:1f:53:d4:5a:a5:07:50:64:56:f3:
12:66:2c:ed:da:f9:68:cf:a4:94:12:de:92:87:ca:
e7:5a:41:ab:b4:f5:c3:bb:8b:cc:8b:8a:5f:6f:bf:
08:66:44:8d:c3:c4:10:c1:77:bf:19:3e:4a:8f:eb:
38:98:9b:86:bd:14:9e:51:6e:9a:be:11:e6:b6:b3:
b3:15:1b:73:e0:45:4f:49:1f:3f:b5:ff:f0:51:71:
a1:48:07:60:32:a6:4b:15:98:40:fa:77:4f:e0:08:
60:ab:93:b9:cf:05:a4:8d:3a:ea:2c:9a:a3:94:0e:
e1:49:fe:0e:0d:d8:e4:b5:da:08:87:3a:f9:c5:90:
b5:ab:47:cd:c2:63:cc:03:72:94:8c:67:d0:a6:50:
e7:0d:18:0c:6a:f8:ae:41:6b:14:5e:0b:a1:b9:23:
5a:ba:db:d1:48:22:92:fc:78:26:62:11:0d:03:36:
c1:7a:35:ca:31:a7:ed:b6:ad:50:0f:28:16:d5:e9:
85:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:91:EA:4D:08:BA:08:A4:D6:55:4A:66:42:77:74:B8:12:AA:AB:B3
X509v3 Authority Key Identifier:
keyid:AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:99:92:1e:c6:4d:47:1a:67:79:53:0b:13:5e:c4:9b:c7:1d:
6e:5e:54:31:60:1b:0b:96:a6:b1:d0:96:ff:a4:a6:f6:99:a5:
04:75:6b:7a:66:85:82:4e:4a:88:49:9b:7b:c8:b5:8b:a9:41:
a9:73:8d:dc:56:83:cb:3c:6e:e3:a6:78:33:e2:02:ac:65:a5:
2e:86:fa:eb:d4:ca:86:9c:c4:d0:ae:a3:2b:bf:0c:95:a4:84:
fd:2a:b4:86:b9:ed:89:bc:5b:1a:8e:1f:82:d7:a4:ca:cd:f8:
06:f0:1a:a5:3e:4d:c8:d5:bf:ff:17:c2:05:8d:73:a7:af:ae:
88:94:a6:04:d2:89:df:b0:71:3f:3d:92:6a:89:b9:9e:79:39:
23:36:75:e9:68:d2:d4:34:92:44:ad:9b:3e:c8:64:85:d6:b3:
ce:17:74:44:57:9d:6c:27:6a:03:05:47:3f:98:58:77:2e:68:
dc:b4:dc:ca:f9:a1:03:fa:c9:d1:f5:7b:7e:4d:ba:ab:e9:c8:
27:8a:22:0b:ca:c4:3f:e2:6c:28:a7:91:55:27:07:aa:82:ee:
dd:a3:75:73:74:cf:c1:e0:f1:63:5d:b6:a5:ce:a9:c6:d9:ab:
6c:0b:9c:a0:1f:97:e5:09:0d:c8:0c:1f:7b:2e:59:ab:6a:7d:
e9:ad:53:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:07:27 2025 by rpki-client