Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
File: qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft (raw, json)
Hash identifier: 4GpaNoya9Kw7z4OJrMaH7WaPA401qMTvHvYlOh2bzDU=
Subject key identifier: 9E:95:54:BB:23:C2:D1:B9:3C:83:C3:59:47:32:0E:2F:1D:F9:4A:19
Authority key identifier: A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
Certificate issuer: /CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Certificate serial: 01960C43F5EACC984DD6EE0B229804726775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
Manifest number: 0B6D
Signing time: Sun 06 Apr 2025 18:01:42 +0000
Manifest this update: Sun 06 Apr 2025 18:01:42 +0000
Manifest next update: Mon 07 Apr 2025 18:01:42 +0000
Files and hashes: 1: O_hdcVHlxOZo_l-7xdIRhesWw_A.roa (hash: mfR5DtCjLIjJTqw++nVFAPPeJtIg5fCaC2S+CCvWR50=)
2: XwnrCE6pmPQ_ODmEcUdfJGretx8.roa (hash: 5lKgnXAmcufifa9qAWfP1aELwyqHVzg1TzDHW6nCY9c=)
3: qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl (hash: fAjxwXhdIieIns6/8u6oK3/QQCBbPXJMLU/zY5VzWfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0c:43:f5:ea:cc:98:4d:d6:ee:0b:22:98:04:72:67:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Validity
Not Before: Apr 6 18:01:42 2025 GMT
Not After : Apr 7 18:01:42 2025 GMT
Subject: CN=9e9554bb23c2d1b93c83c35947320e2f1df94a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e6:13:a1:8f:5e:79:2a:c4:88:e0:fe:17:72:
bb:16:f9:bd:d7:b0:fc:40:2c:3e:71:3b:27:04:d9:
f9:d7:93:1e:5d:c1:d5:6b:1f:c7:23:00:1c:af:71:
6c:51:02:46:86:56:1b:a4:7c:1d:0f:cf:01:ac:3b:
e6:2a:de:4a:c8:20:7b:c6:c6:6a:47:8e:e0:42:9b:
01:5c:0d:e8:c9:cf:ba:b3:eb:46:15:19:6a:27:9a:
2e:3c:75:d1:60:70:89:11:e4:17:46:32:b3:f0:48:
5d:a5:a6:7b:7c:43:a9:b1:a0:4a:35:91:f0:e8:31:
d0:76:0f:a9:b2:95:e3:9e:cf:a0:79:97:55:4c:4a:
15:18:db:e0:d6:37:b6:c7:d7:46:0c:76:f8:a5:be:
f3:ce:0c:8a:a5:fb:82:a1:97:8d:ec:fc:23:b7:7e:
15:0f:2a:92:27:7c:47:1f:d5:44:65:d4:8a:d3:1a:
95:cc:1e:ba:5d:33:79:c2:b2:25:50:98:29:89:7d:
cb:32:d6:e7:bb:df:c8:06:a4:4b:de:5e:d4:38:4e:
6a:89:e6:ef:cc:de:29:77:02:08:01:35:79:f6:08:
4a:09:34:59:93:0f:fb:77:6f:84:3f:73:68:e0:b3:
f1:ca:ff:7a:d7:90:7e:d0:c4:63:91:8b:7d:9a:80:
20:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:95:54:BB:23:C2:D1:B9:3C:83:C3:59:47:32:0E:2F:1D:F9:4A:19
X509v3 Authority Key Identifier:
keyid:A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:45:fb:37:77:a9:6c:c9:f5:11:17:15:ea:7f:11:d6:0a:38:
89:7b:52:83:61:be:00:4e:87:e8:07:a3:b8:77:a5:4b:73:f5:
19:c4:eb:b7:6e:ec:4e:55:38:f2:19:73:1e:7b:7c:e0:3f:cf:
ed:f3:e3:fb:1d:30:37:a2:41:c5:01:7a:0e:4e:7f:ce:ca:b2:
f8:08:01:b6:7e:80:52:d5:ee:e0:74:23:5f:7e:3b:e0:10:0c:
b3:13:ff:bb:a9:33:c6:f0:5a:40:da:12:83:7e:f3:cb:13:05:
bd:51:ed:a0:41:94:ee:20:bb:b6:10:c2:06:33:e3:7a:ef:ce:
f9:95:c7:a6:60:d8:2b:fa:e8:7f:5e:6f:14:d2:73:57:31:00:
2f:9f:6f:b7:09:b6:ac:e0:62:d6:70:2d:85:16:e2:f4:b6:bb:
47:94:cc:df:95:8b:2f:5f:38:0e:94:49:3c:6e:2f:74:f0:dc:
76:3e:11:48:4e:25:d2:e1:08:31:48:9f:62:67:ae:77:5b:c9:
c0:6d:77:d8:36:dd:ee:f0:b0:a4:c7:80:e3:5f:82:48:85:be:
95:80:7e:01:f2:38:dd:72:16:9f:6c:05:53:8a:9c:c4:ce:ba:
da:27:b9:30:06:d2:20:d1:a5:21:d1:e5:bc:28:53:1d:10:7a:
40:c2:9d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:13:15 2025 by rpki-client