Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
File: quRIJx2Froeamr8Vs7ypg0cKE0g.mft (raw, json)
Hash identifier: +coK9l/vuGBhd+J4i5q5kHOW5ytOlBAzHcb+NlsTBxY=
Subject key identifier: DE:4F:C1:71:7D:E8:9D:26:FA:D3:71:0B:AD:30:3F:FF:8C:F6:4A:E7
Authority key identifier: AA:E4:48:27:1D:85:AE:87:9A:9A:BF:15:B3:BC:A9:83:47:0A:13:48
Certificate issuer: /CN=aae448271d85ae879a9abf15b3bca983470a1348
Certificate serial: 01964CA27830594C6537CE6CEDB83FC1008E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
Manifest number: 03F5
Signing time: Sat 19 Apr 2025 06:00:37 +0000
Manifest this update: Sat 19 Apr 2025 06:00:37 +0000
Manifest next update: Sun 20 Apr 2025 06:00:37 +0000
Files and hashes: 1: cfA5700Oyp_l8HYxK2rUF9sJFNw.roa (hash: nBkOSSWEqJ7QWBbrB7ANbAxBsvt2sTitoBCV4yvlduo=)
2: quRIJx2Froeamr8Vs7ypg0cKE0g.crl (hash: 7fcR1bbYQqzBUACbh6xRylWbZrfpQHHr9xp4pYYm6Ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:78:30:59:4c:65:37:ce:6c:ed:b8:3f:c1:00:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae448271d85ae879a9abf15b3bca983470a1348
Validity
Not Before: Apr 19 06:00:37 2025 GMT
Not After : Apr 20 06:00:37 2025 GMT
Subject: CN=de4fc1717de89d26fad3710bad303fff8cf64ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:52:48:17:2a:34:4c:fc:2c:b6:92:70:b0:77:
7e:cc:29:bd:ca:b5:31:42:2a:f8:1e:59:c7:66:46:
a4:d9:63:4b:dd:b0:e6:31:7c:8c:86:f0:79:3a:f1:
c8:1a:d9:59:20:24:c4:ca:b2:a7:49:f8:0a:8b:e0:
89:85:ad:e5:87:dd:ee:46:85:1a:3e:45:f9:5a:de:
ac:7d:a5:42:54:5b:90:03:47:43:b5:78:e1:0d:c3:
3e:cc:d9:65:03:46:94:c1:13:f3:f0:d0:b0:c4:ab:
a3:09:2b:02:cb:a2:ce:ac:28:68:be:06:8b:a2:ff:
77:89:fb:e3:26:5a:d0:e0:6a:8f:7a:47:3c:4b:60:
54:ca:e6:aa:2f:33:d0:71:89:e1:c7:28:46:33:e8:
8e:44:1c:34:3a:18:e5:a9:2d:e8:23:18:23:a8:0d:
63:17:65:16:7e:c1:52:ed:9c:76:1a:99:8c:06:01:
f9:f7:64:2d:26:c2:3c:df:2b:e4:01:00:ff:fd:d0:
e6:9f:72:e9:1c:6b:40:dc:e3:61:7d:7c:23:13:bc:
31:40:26:9b:fd:e2:26:c7:9b:75:f2:0e:15:cb:78:
d1:92:1b:0f:d9:0e:f8:53:65:e6:56:d7:97:6e:45:
92:50:3e:11:f9:ea:06:a2:fe:5f:24:52:d5:8a:3b:
b4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4F:C1:71:7D:E8:9D:26:FA:D3:71:0B:AD:30:3F:FF:8C:F6:4A:E7
X509v3 Authority Key Identifier:
keyid:AA:E4:48:27:1D:85:AE:87:9A:9A:BF:15:B3:BC:A9:83:47:0A:13:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:00:7b:fa:54:dd:1e:2e:5a:48:33:cd:39:8c:7e:52:c3:08:
02:b4:50:58:2e:be:d7:9a:2c:54:f4:b0:8c:83:be:eb:7c:d7:
4e:34:57:77:bc:17:99:53:ab:c7:d8:48:23:1a:72:42:75:04:
ee:63:d8:b5:69:af:f4:8f:a9:21:07:94:db:e0:cd:7f:43:77:
65:ae:0c:89:72:48:53:c9:7b:53:5a:18:a1:6f:99:45:1a:71:
a9:63:6b:14:fc:9e:cc:bb:e5:d0:bb:f1:8b:06:c6:5d:1a:99:
4b:00:56:49:94:49:f4:b8:10:b7:7c:cd:82:62:74:b4:6d:47:
27:19:ff:30:75:bf:f9:91:87:25:96:c9:98:51:7e:dc:5f:8a:
86:6b:3f:d7:1e:f8:7a:25:a9:48:84:7f:3c:4b:e9:98:50:96:
07:ae:38:ac:29:76:fc:4a:f4:2f:b8:ab:29:8d:35:0e:53:5d:
6d:6f:b3:49:60:2b:0b:39:6b:74:03:88:c2:7e:96:3b:42:e6:
2a:b0:d1:76:3e:96:d1:2c:96:e8:1c:ec:af:ee:61:c9:3e:a4:
ea:c3:fc:8b:1c:32:2e:eb:6c:eb:9a:67:18:0d:b3:80:23:9f:
c8:b6:e9:a7:25:0b:fd:ae:99:a3:e0:f3:4f:43:28:76:31:68:
8c:71:00:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:00:36 2025 by rpki-client