Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
File: 1qqJ97ciJ5wDKULc8khl9tctZQE.mft (raw, json)
Hash identifier: yXQLZ1JHLgDCTreQQ/DE3NmQ3V6ste2PW0+eYxl20oo=
Subject key identifier: B2:A5:8B:9A:36:98:60:91:08:17:3E:2B:BC:C7:8D:F4:39:0C:4E:B7
Authority key identifier: D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
Certificate issuer: /CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Certificate serial: 01961F92D3B75F9113C0DF19E28AA8A1F6E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
Manifest number: 0FD6
Signing time: Thu 10 Apr 2025 12:00:38 +0000
Manifest this update: Thu 10 Apr 2025 12:00:38 +0000
Manifest next update: Fri 11 Apr 2025 12:00:38 +0000
Files and hashes: 1: 1qqJ97ciJ5wDKULc8khl9tctZQE.crl (hash: Kc7fs/vnKVJ2cPmarp2uIGRSe71ybJ5jxokiHq8Lx8c=)
2: AgasgsgRMARsZv6ZL1FMUAMH49o.roa (hash: rP0A/zCy7W2yRJEKVS59R2RHbWAgc1CTX30QoNq6GK4=)
3: kIQph00YRfR7VyoSJ5QKs9_47CM.roa (hash: T6/F9gO6dDf2HDaMUJjHPMQQkg1ian0JLCMBF3Ug9u4=)
4: qtgbnELTyW65aNCYZpJqV2m2-Jw.roa (hash: BZNYV9kq2qBJjfITSVC14VQZO/Cg3QnROE1UWyqLr8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1f:92:d3:b7:5f:91:13:c0:df:19:e2:8a:a8:a1:f6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Validity
Not Before: Apr 10 12:00:38 2025 GMT
Not After : Apr 11 12:00:38 2025 GMT
Subject: CN=b2a58b9a3698609108173e2bbcc78df4390c4eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:81:80:9c:a0:2d:20:fe:c6:3d:aa:00:91:17:
9c:f1:91:fa:73:83:b8:7f:6e:61:51:2d:bd:9f:80:
ec:f6:ee:4a:d7:4e:5c:2f:11:b4:24:a5:ea:68:4f:
63:a6:e2:8b:d9:e9:ce:98:bd:cd:81:d9:10:16:72:
3f:5f:e7:89:4a:5b:cc:b4:31:0a:c1:d9:34:bd:e3:
7c:4e:40:34:d4:e2:eb:b1:5f:e2:a8:ea:23:bd:34:
0a:a4:85:87:81:5e:49:dc:d8:30:e8:b3:07:9f:e8:
b9:79:a4:f6:41:08:70:5d:d4:68:f5:3b:08:c6:10:
86:3b:6b:dd:d1:3e:a2:88:2e:4f:1c:cd:ec:b2:d6:
26:ad:e0:8b:1c:45:5e:4f:d4:65:0e:4c:11:b9:d6:
d5:b5:87:62:b9:c0:0a:1d:e7:b5:e2:e8:13:33:88:
dc:d1:4c:23:6f:54:d3:f3:7e:fd:82:f8:19:83:b5:
91:b5:05:be:91:fe:9b:53:ee:15:fd:b6:c7:19:08:
2d:df:f6:c9:94:8f:17:af:d1:c9:ed:1a:57:45:c9:
cd:73:56:d1:38:30:37:dc:ed:10:16:36:eb:e4:c1:
6d:55:a9:35:bd:d0:91:ef:b6:c3:69:fe:24:e8:87:
63:bf:e6:46:db:b0:28:08:52:69:a4:e9:40:e0:61:
bd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A5:8B:9A:36:98:60:91:08:17:3E:2B:BC:C7:8D:F4:39:0C:4E:B7
X509v3 Authority Key Identifier:
keyid:D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:12:cd:12:bf:68:8f:cb:c2:c7:fc:a9:c5:57:bc:5d:64:b4:
eb:96:60:b7:22:11:8f:d1:09:70:f7:a5:cd:8c:1f:f6:9f:8e:
4a:88:1b:dd:57:d5:5b:5d:f1:6c:a5:51:fa:92:97:38:16:97:
c6:ae:5e:2c:ad:4f:2d:20:19:b2:e1:14:7e:a2:c6:f1:5e:9d:
a2:25:80:6c:84:83:27:7c:d5:72:d3:03:b0:d6:f4:d4:e2:d8:
46:3f:d2:1c:a3:00:ee:54:14:a6:82:9d:a4:9b:63:da:ae:67:
3e:74:97:6d:b6:80:bc:3f:d1:68:fb:51:07:d8:a4:6e:50:13:
6b:7d:6f:0a:85:61:df:87:33:61:80:09:d7:33:1c:03:21:85:
c9:dd:8b:44:fa:f8:12:b4:37:4c:52:ac:8a:0e:fd:1d:48:ce:
a8:72:0d:05:8f:f6:a2:f8:60:e4:dc:75:66:4b:27:ed:89:28:
9f:50:63:00:02:f2:12:55:96:09:aa:10:b3:44:c0:4a:ec:6c:
ac:b3:c9:8f:49:98:27:b3:57:2c:4f:31:25:89:ce:09:dc:ff:
09:b4:37:b0:5d:cd:ae:54:8a:73:3a:4c:47:0b:fb:ab:1e:07:
d4:db:0c:1a:8a:df:0c:e7:72:fc:bf:b5:57:89:72:9d:59:65:
21:aa:e7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:38:06 2025 by rpki-client