Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
File: qb2hj--wDn6cVHMwGcdiuy6zozw.mft (raw, json)
Hash identifier: ondLbLqKKbkQFp9T8z17ve4nyiTZvL0ZYCJdolyG2G4=
Subject key identifier: F5:8B:46:40:18:A8:03:28:64:70:AD:1A:DE:D9:3E:B0:E6:76:D5:38
Authority key identifier: A9:BD:A1:8F:EF:B0:0E:7E:9C:54:73:30:19:C7:62:BB:2E:B3:A3:3C
Certificate issuer: /CN=a9bda18fefb00e7e9c54733019c762bb2eb3a33c
Certificate serial: 01963FC28A329DDBD8D210A65553E3D2E605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
Manifest number: 08ED
Signing time: Wed 16 Apr 2025 18:00:36 +0000
Manifest this update: Wed 16 Apr 2025 18:00:36 +0000
Manifest next update: Thu 17 Apr 2025 18:00:36 +0000
Files and hashes: 1: nJtwSC-OZ-Smz_sZfs-hc-m0EuQ.roa (hash: TPYZpfCIEtspSFBIUZCXhe4Sd3FAryoOqoR+gBeCscc=)
2: qb2hj--wDn6cVHMwGcdiuy6zozw.crl (hash: deQnq3B+9OfZ0smFikDKKCe4tY2kEn7TQzz4kiUURks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 18:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:c2:8a:32:9d:db:d8:d2:10:a6:55:53:e3:d2:e6:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9bda18fefb00e7e9c54733019c762bb2eb3a33c
Validity
Not Before: Apr 16 18:00:36 2025 GMT
Not After : Apr 17 18:00:36 2025 GMT
Subject: CN=f58b464018a803286470ad1aded93eb0e676d538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:95:cd:50:2a:9c:b8:4a:d5:c8:8a:91:cf:7e:
94:b0:94:9d:2f:53:46:26:ff:9a:49:41:60:60:5c:
2c:d2:47:f7:d4:72:8a:7f:fe:81:fc:93:75:63:5b:
78:fe:bf:fd:4c:43:59:cf:00:b2:e9:fc:ff:9c:c1:
66:25:5c:c9:53:2f:36:a2:e6:a7:c8:f7:23:40:0a:
81:dd:ac:e3:29:dc:43:23:61:67:d9:2c:85:6c:f7:
54:1e:3e:0d:7d:6a:05:e2:cd:b7:d4:66:40:d7:da:
8a:85:6c:54:84:ca:d6:a5:fd:af:cd:81:91:a1:b5:
d7:00:c7:3a:20:45:3d:12:36:27:d3:a0:05:d5:d2:
e0:ce:f6:ec:5a:db:6b:3f:51:a1:05:74:a1:53:5f:
09:00:6e:7e:cd:4c:37:e9:41:c4:82:66:15:67:d1:
7e:34:2a:43:2d:c1:85:ab:21:c0:c6:7c:d3:5c:88:
bd:a4:03:48:4a:bb:01:33:7d:a4:fc:d4:82:dc:ec:
4d:bc:85:ca:b0:62:67:44:b1:99:05:f7:71:43:d8:
3d:80:34:36:bd:fa:6d:4d:a1:7b:72:2e:28:80:6d:
1b:03:ad:59:d9:07:a8:1d:c7:f8:19:38:ea:b3:53:
97:36:54:7e:a9:89:20:9d:55:ee:46:b0:1f:ca:3a:
f0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8B:46:40:18:A8:03:28:64:70:AD:1A:DE:D9:3E:B0:E6:76:D5:38
X509v3 Authority Key Identifier:
keyid:A9:BD:A1:8F:EF:B0:0E:7E:9C:54:73:30:19:C7:62:BB:2E:B3:A3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:dc:34:fd:9b:2a:b4:55:c0:21:71:7c:70:be:59:85:22:fa:
e0:24:7f:59:a2:5a:33:60:6a:6d:82:73:99:43:e9:27:6e:46:
c1:9a:c4:9f:73:a4:9f:7b:35:82:0c:11:b0:d3:36:e8:1b:e7:
85:b1:d1:cd:cc:e8:4e:6b:af:7e:0a:ad:41:f6:6a:5c:ee:d5:
84:ab:ae:86:3e:2b:6b:21:7f:c1:fd:50:a0:10:d8:85:23:67:
54:f6:4b:9a:26:75:5c:9c:74:be:7b:a5:7d:e0:a6:dc:e9:7e:
56:de:40:52:16:a7:99:a0:c0:97:f2:8a:9a:5b:8c:29:ec:18:
02:5b:96:af:b8:4b:f4:6b:4b:57:9f:dc:97:1c:f2:70:82:26:
76:e2:6e:10:40:f8:38:fc:36:6f:68:da:99:25:85:fc:d6:83:
5c:6e:4e:40:0d:29:e8:91:50:09:97:77:08:2c:ce:1d:75:4d:
37:ab:8e:5e:ac:f4:ed:e9:53:0c:1c:30:42:bb:2b:c2:79:b7:
a9:bc:6a:17:2b:d5:4a:40:a3:ba:a4:ac:1c:50:90:52:45:8b:
19:0f:b2:5b:5b:d9:e6:c5:20:bf:a1:7d:56:2d:d1:58:10:21:
cf:e2:9b:4b:fa:40:58:c3:46:75:d7:4a:29:8d:a9:f2:52:14:
51:b1:6b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:16:28 2025 by rpki-client