Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
File: pqqcrek75rp8irsyODGAdjF9YH0.mft (raw, json)
Hash identifier: /kprWXqdUwM8ZC+0Afbac5pUEdn/b2yTdFm3ahWtH9o=
Subject key identifier: E1:CC:19:8C:8D:4A:B4:85:3F:65:9B:E7:2C:00:73:17:5A:91:C7:4E
Authority key identifier: A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
Certificate issuer: /CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Certificate serial: 019654929559F476165CEFF04686D7E533FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
Manifest number: 0C17
Signing time: Sun 20 Apr 2025 19:00:14 +0000
Manifest this update: Sun 20 Apr 2025 19:00:14 +0000
Manifest next update: Mon 21 Apr 2025 19:00:14 +0000
Files and hashes: 1: S2CydqVU1Bg8JlGW4qN48rRbYzM.roa (hash: BGDB4Vnl+lNKwWJXdwvf53CCXNQUCVk3dMF/mpOaQyY=)
2: pqqcrek75rp8irsyODGAdjF9YH0.crl (hash: bUNt4HY6hPEGQC7l/SNWEH/Ks024zuk41jBA1+l4baE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:95:59:f4:76:16:5c:ef:f0:46:86:d7:e5:33:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Validity
Not Before: Apr 20 19:00:14 2025 GMT
Not After : Apr 21 19:00:14 2025 GMT
Subject: CN=e1cc198c8d4ab4853f659be72c0073175a91c74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:89:7c:73:1f:a2:19:90:22:9a:3a:68:67:33:
83:cb:34:83:e2:6e:4a:5e:28:ba:e5:de:c9:93:56:
12:bc:4b:b1:6b:0d:8a:21:e5:ed:95:ee:33:08:29:
97:c4:03:7e:35:f5:7e:d6:a3:4e:1b:0d:6a:83:b6:
70:87:4a:09:9f:fd:3b:37:bd:4f:e6:76:da:16:47:
9b:7b:eb:22:d2:5f:32:ef:98:29:3e:79:b7:80:21:
99:1c:d7:f7:f0:f5:fb:62:81:70:d3:7b:24:54:9b:
27:51:c0:ab:c8:8e:15:7f:de:4f:b7:66:d3:f1:ce:
8d:da:c0:47:2b:de:ed:73:6f:e9:ef:aa:d3:40:61:
b8:da:7d:a7:1f:8f:46:d1:60:bf:ba:3d:dc:d1:bc:
c3:e5:04:33:59:bc:21:55:8f:80:d4:ac:9d:36:db:
de:42:77:95:f0:a8:61:50:10:9c:b2:86:73:61:49:
d6:5a:2b:5c:b4:d4:f8:19:ad:d0:4d:63:c6:40:ab:
d5:1d:f1:7c:57:a2:5e:f5:51:b7:b5:c7:33:51:ad:
b0:07:57:33:bc:53:eb:61:69:f7:38:b2:c3:25:77:
f0:14:a3:27:83:4b:98:cc:59:18:2c:30:82:a9:ff:
68:f5:9e:99:d9:be:35:6c:cd:85:e4:7a:eb:b6:70:
3d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CC:19:8C:8D:4A:B4:85:3F:65:9B:E7:2C:00:73:17:5A:91:C7:4E
X509v3 Authority Key Identifier:
keyid:A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:98:1b:bb:3a:c1:11:53:47:aa:e8:31:6b:ee:ff:2b:0c:ee:
ee:59:df:b8:ce:61:76:00:4b:7d:f7:aa:f6:c7:34:59:36:94:
4b:10:a9:23:b0:35:7f:59:aa:d4:c2:73:11:d7:ad:0d:d6:66:
6b:9b:78:73:b8:07:d6:3c:5c:b9:cf:03:bf:24:e4:60:a4:30:
92:7b:8e:02:72:8d:e8:75:2b:f9:f6:ee:1f:83:ac:78:8d:bd:
32:8e:fc:c0:e0:73:45:fb:ef:51:14:78:12:9b:89:0b:1d:f2:
77:db:2a:de:f9:aa:3b:7a:07:8c:a9:e1:a1:88:e8:14:86:59:
3d:b4:5a:7b:98:fd:7f:dd:17:d9:5b:69:b3:11:a5:78:20:3d:
64:52:23:21:1e:e4:4b:eb:de:cd:03:81:11:f8:19:6b:64:84:
f1:11:e1:cb:42:12:54:c2:89:87:e6:88:ce:ff:53:15:51:6e:
cf:dd:97:cf:50:39:1e:71:2e:fe:fa:d4:49:83:45:d5:fb:fc:
f5:43:bc:43:14:67:ab:3f:0e:bc:18:bc:8b:b8:84:02:e2:41:
5d:1d:a9:e4:be:26:bd:54:ea:5e:f2:8d:d1:aa:3e:63:74:1a:
40:0a:7e:7b:60:90:2e:8c:9b:78:88:fc:dc:58:4e:ef:af:46:
60:0e:f1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:38:49 2025 by rpki-client