Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
File: qdeM56IchB2HNUJHdut_9YetBNE.mft (raw, json)
Hash identifier: hCUDZfjWCt3iMXbbHtWpeNaJ+kJJ2F3yGscljQeG50Y=
Subject key identifier: 7B:C2:05:97:B8:97:CF:A8:4A:7B:28:E9:B4:68:73:06:6C:5E:41:72
Authority key identifier: A9:D7:8C:E7:A2:1C:84:1D:87:35:42:47:76:EB:7F:F5:87:AD:04:D1
Certificate issuer: /CN=a9d78ce7a21c841d8735424776eb7ff587ad04d1
Certificate serial: 0196451F9ADCD809D1085E7ED392CA159788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
Manifest number: 13CF
Signing time: Thu 17 Apr 2025 19:00:21 +0000
Manifest this update: Thu 17 Apr 2025 19:00:21 +0000
Manifest next update: Fri 18 Apr 2025 19:00:21 +0000
Files and hashes: 1: mzdjW8d1g2RTbpkDyieCRb4Rhp4.roa (hash: +eSn1whG8BEnu+P7IU1V/ISLWfTeC4hd2INZhTzIgYI=)
2: qdeM56IchB2HNUJHdut_9YetBNE.crl (hash: WoQGWLWAQX+RCEu88yGd/tvtwiL/YqhRVwl61D0a16A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:1f:9a:dc:d8:09:d1:08:5e:7e:d3:92:ca:15:97:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d78ce7a21c841d8735424776eb7ff587ad04d1
Validity
Not Before: Apr 17 19:00:21 2025 GMT
Not After : Apr 18 19:00:21 2025 GMT
Subject: CN=7bc20597b897cfa84a7b28e9b46873066c5e4172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ad:35:2e:3c:bd:e5:b2:5a:35:49:a4:8e:a5:
a5:8c:7d:37:ee:1c:26:01:1e:7f:55:f3:9d:e6:dc:
9c:bd:a6:ca:07:56:83:ee:c0:58:9b:4c:ea:67:ee:
11:f3:e6:98:98:ed:81:5d:88:c7:f5:4f:42:53:86:
4e:3b:bf:35:ae:cb:1b:b9:fb:0d:9e:5f:bc:c2:d7:
b9:81:30:ca:8d:a7:96:79:65:63:82:35:1c:26:a9:
e8:22:c5:67:1e:51:20:48:ab:6e:2b:46:f1:90:17:
24:f6:44:d6:53:b2:94:35:06:6f:0f:cb:93:70:5b:
33:7d:ee:2f:19:7d:f7:7b:19:3b:1e:5f:3b:ca:a9:
55:c4:34:2e:7f:12:01:5e:67:55:1b:e4:e0:31:5c:
cb:db:1a:7c:6a:31:79:6e:27:c8:cf:0b:52:29:17:
ea:20:c7:fb:b4:16:93:2c:ed:73:40:14:50:e6:3d:
5b:ce:9e:5a:57:cd:6a:85:be:ed:bd:40:34:96:6a:
8e:ac:80:18:6a:59:54:b2:44:f2:5e:ba:9f:31:1d:
31:57:99:2d:a9:a3:50:b5:d7:24:b1:f1:1e:6d:96:
dc:37:c4:78:e5:bb:d5:86:c1:92:b3:0a:b8:5b:0c:
4d:df:f8:b7:42:e9:c3:e2:1a:8e:9f:77:7b:a5:85:
71:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C2:05:97:B8:97:CF:A8:4A:7B:28:E9:B4:68:73:06:6C:5E:41:72
X509v3 Authority Key Identifier:
keyid:A9:D7:8C:E7:A2:1C:84:1D:87:35:42:47:76:EB:7F:F5:87:AD:04:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:24:88:29:db:90:96:be:16:a7:b9:bc:f4:9e:1b:33:fa:56:
db:92:59:63:20:0a:84:62:32:88:26:10:13:58:75:d0:dc:02:
e7:a7:54:94:24:62:b5:be:63:a7:7a:4b:3e:61:69:9b:63:1b:
61:69:0a:e3:19:50:e5:d9:0d:02:af:13:ca:20:80:3a:72:8c:
c6:18:2f:68:f7:d8:00:26:e1:01:c8:73:d7:0d:8e:77:d4:ca:
b9:24:0e:46:34:d1:eb:13:5b:4a:e2:be:40:78:54:98:2f:3c:
94:8f:92:4f:f7:1f:63:b8:86:e3:88:f8:01:74:0e:25:c8:16:
33:0b:cc:5e:4e:13:23:07:eb:64:f6:8a:d0:6f:b8:07:df:4f:
73:fb:52:ea:e9:15:d4:e0:29:10:b9:bd:1e:08:aa:00:37:73:
14:b7:90:c3:b8:d6:72:17:3f:ff:8d:23:fa:8c:8f:04:24:3d:
8a:75:25:a5:6f:49:10:5c:d2:c7:ed:3f:73:ab:e1:69:51:a5:
d9:7f:33:95:d0:bb:40:99:09:18:a9:58:b8:74:14:72:4c:1f:
c8:04:20:f4:e3:f7:5d:fc:6b:78:0a:f3:cc:0c:69:60:71:09:
49:04:b3:b3:59:06:ff:2c:96:d7:0c:26:d8:89:c6:47:20:51:
26:dd:fa:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:37:27 2025 by rpki-client