Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
File: qkHJOeqVoh87dCkB3-BfJqV3dYE.mft (raw, json)
Hash identifier: BmxIZHRpCCuIYYXJ8LSTArf/w2HJLp4EGTfoffGaQB8=
Subject key identifier: 95:9F:80:37:83:89:C2:A6:09:01:BA:79:15:32:16:7B:24:90:D0:29
Authority key identifier: AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
Certificate issuer: /CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Certificate serial: 019650119D42B4B585166DCF486A9D4214B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
Manifest number: 09DE
Signing time: Sat 19 Apr 2025 22:00:53 +0000
Manifest this update: Sat 19 Apr 2025 22:00:53 +0000
Manifest next update: Sun 20 Apr 2025 22:00:53 +0000
Files and hashes: 1: qkHJOeqVoh87dCkB3-BfJqV3dYE.crl (hash: uKXdsVGMc4rTaN6bW/cIk6RYOKbCEYLITcHkBsLJn1Q=)
2: wcccpGaeYTilF5ncbceAk7mBvqQ.roa (hash: gOA2BhosHOf6qCEMFAHb8yTCso/K7yQdwGzJmIy7AF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:9d:42:b4:b5:85:16:6d:cf:48:6a:9d:42:14:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Validity
Not Before: Apr 19 22:00:53 2025 GMT
Not After : Apr 20 22:00:53 2025 GMT
Subject: CN=959f80378389c2a60901ba791532167b2490d029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5f:db:ba:97:79:05:1e:a0:2b:65:a2:94:8a:
8f:84:54:4b:48:4b:3a:7e:aa:7e:da:6e:c5:54:e5:
03:88:a9:0f:a3:32:33:22:36:ae:d1:f1:0f:55:cb:
60:7c:96:05:24:16:60:ea:4d:73:a3:4d:30:1f:05:
9b:21:13:8b:d0:50:19:2b:87:37:cc:71:68:85:bf:
a0:b3:a4:eb:f2:72:56:5c:77:17:3e:29:b5:2f:06:
20:39:eb:13:48:e9:20:73:71:fa:3e:31:f2:c3:8a:
52:89:71:2d:a4:82:fc:57:b7:13:d2:56:f5:d8:19:
62:59:43:87:6e:b0:1a:e9:0e:f3:05:48:0f:16:64:
82:eb:90:55:54:ca:a2:5a:5e:f1:ee:aa:3c:6c:47:
e2:18:f3:19:b7:58:e3:b0:f7:6c:d3:18:5f:1e:b6:
bc:69:94:88:8a:4c:52:17:08:06:30:d4:5d:4b:9b:
3d:35:21:86:0c:51:8c:fc:04:de:88:87:bc:b0:30:
8b:7b:a5:ac:50:91:1c:59:66:cf:2e:a8:2f:dc:c3:
0b:ad:cd:3d:81:ac:10:5c:ae:46:93:95:33:eb:a9:
05:03:9e:45:98:a2:cc:b2:13:8e:94:2d:e9:f6:41:
84:3e:30:49:f4:d0:a3:18:8a:9d:3b:1f:88:8c:d6:
5f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9F:80:37:83:89:C2:A6:09:01:BA:79:15:32:16:7B:24:90:D0:29
X509v3 Authority Key Identifier:
keyid:AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:39:f8:89:1e:34:1b:94:cc:c5:b3:db:d6:c6:36:e1:c4:ba:
98:d6:13:54:82:23:cb:15:2c:aa:95:7b:8b:64:55:60:c6:98:
9d:f4:e0:e9:5d:23:61:c4:e8:ad:32:41:89:c1:ea:cc:3b:a7:
44:83:07:d3:45:30:67:96:de:22:8a:be:7c:44:72:1c:d8:67:
23:02:d3:e7:34:ac:cc:5f:eb:60:5b:cc:0a:64:d2:66:3c:7e:
74:c1:f8:4b:48:6f:9d:5b:62:e8:7f:20:87:a0:50:14:65:5a:
df:b9:03:d3:55:e4:1d:f4:08:e6:34:47:bf:6f:9a:5c:3b:97:
93:de:3c:08:f4:ce:7a:ea:d5:5b:3f:9c:b0:6c:d3:fe:a0:99:
12:5c:12:9c:79:e4:bc:17:8b:45:41:40:c0:43:53:31:f8:32:
e1:07:16:e1:e5:96:bc:d0:3b:cd:75:a2:89:ea:67:e9:9e:ae:
3a:69:f3:70:db:6b:1d:07:6f:37:50:a5:43:e0:3e:df:1a:f5:
1f:fa:79:e3:fc:54:2b:bb:32:de:09:8a:f3:ec:03:3d:6f:df:
fd:ab:49:45:0c:d7:29:13:96:bc:53:89:62:f3:b7:42:f6:93:
a4:46:d6:7d:58:fa:fe:d4:1c:0f:b6:f9:06:a9:3a:33:06:f1:
f7:cb:9b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:02:32 2025 by rpki-client