Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
File: qjV0fbQXDtRXVsyaOk52iaDrYsc.mft (raw, json)
Hash identifier: NzzQ9Kft1avyrBQWQgpSh2IHA1lNZVOqlqlKwW2cdmQ=
Subject key identifier: E3:82:6C:6D:93:BD:10:D4:95:09:5C:0B:B4:58:5A:C5:DD:DE:01:88
Authority key identifier: AA:35:74:7D:B4:17:0E:D4:57:56:CC:9A:3A:4E:76:89:A0:EB:62:C7
Certificate issuer: /CN=aa35747db4170ed45756cc9a3a4e7689a0eb62c7
Certificate serial: 01964256553B98F092719C7C3C9FAE1C1061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
Manifest number: 01DB
Signing time: Thu 17 Apr 2025 06:01:16 +0000
Manifest this update: Thu 17 Apr 2025 06:01:16 +0000
Manifest next update: Fri 18 Apr 2025 06:01:16 +0000
Files and hashes: 1: c4TxJnX6SULpOIlEbtsYVcPO_1E.roa (hash: mprESb6/2u0lim3u1bjN8fuUSWrOypjztHMO2wyLys0=)
2: qjV0fbQXDtRXVsyaOk52iaDrYsc.crl (hash: GV2OkKjuYdDJdHj2Is2E1VRmhL2zQRqsKJ9VfkUgyNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:56:55:3b:98:f0:92:71:9c:7c:3c:9f:ae:1c:10:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35747db4170ed45756cc9a3a4e7689a0eb62c7
Validity
Not Before: Apr 17 06:01:16 2025 GMT
Not After : Apr 18 06:01:16 2025 GMT
Subject: CN=e3826c6d93bd10d495095c0bb4585ac5ddde0188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7b:7d:05:20:b0:22:a4:ff:ed:bf:d5:47:63:
2b:31:d9:04:3c:98:5a:07:6e:a4:7a:20:60:67:45:
c3:aa:b0:f6:f1:3d:56:98:0c:05:34:68:fb:b5:04:
5f:1a:60:cb:89:a2:b1:59:8e:34:c0:67:a8:d0:9a:
1a:a1:55:46:ee:6d:8e:37:1f:9b:a7:d1:58:e8:58:
63:44:99:2e:2d:6c:02:e4:c6:27:c6:0c:7a:64:5b:
f7:2a:50:0a:02:82:2d:f1:4f:33:99:6d:cf:b9:bd:
55:a2:33:c6:30:f3:72:9b:96:db:a2:34:9a:eb:af:
60:f5:b9:9b:d9:31:85:53:85:e5:8a:be:44:c5:df:
41:65:ae:25:b3:41:ef:19:8c:48:b1:41:08:53:b8:
a9:c2:90:75:9c:8c:1d:39:52:38:e9:1f:59:69:69:
4b:ec:68:3b:9a:45:df:1e:cb:48:89:d4:18:61:fc:
95:24:b0:7c:cc:c1:3f:57:ff:45:6e:ee:51:e4:49:
9b:5f:ee:89:10:1f:ed:38:04:07:6c:e7:74:13:ae:
41:15:ec:cb:6f:fc:2c:9e:a8:f3:84:fa:aa:5f:fc:
8c:f7:7c:9b:00:7e:65:de:d6:c3:37:d6:cd:69:f9:
fe:5e:da:be:3c:6b:5c:e3:00:d3:cd:a3:9d:1b:e0:
9c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:82:6C:6D:93:BD:10:D4:95:09:5C:0B:B4:58:5A:C5:DD:DE:01:88
X509v3 Authority Key Identifier:
keyid:AA:35:74:7D:B4:17:0E:D4:57:56:CC:9A:3A:4E:76:89:A0:EB:62:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:0d:03:50:e5:ac:f3:f9:e0:ac:f2:7d:1c:d4:3b:88:e5:35:
fa:81:54:69:f5:65:2e:2a:b2:70:bf:d2:6d:1f:21:82:16:3b:
5d:8e:0b:19:28:51:c2:86:94:b6:7c:1b:67:f1:65:78:9e:63:
52:69:42:d4:18:bd:f7:96:b8:95:3a:94:7d:6b:ec:9a:0c:29:
52:fe:f5:f2:23:c1:b2:19:af:c2:05:98:d1:9f:75:db:e7:df:
9c:71:8c:9f:43:25:ec:b6:96:49:31:e9:b1:d8:1f:1f:33:50:
85:bc:04:69:44:64:2d:9a:df:5e:2d:08:38:be:cb:f9:45:3a:
3c:b6:b3:c0:d3:a0:7d:1d:c5:6e:b5:50:db:39:c8:a0:fe:2c:
42:19:56:21:43:0b:3c:d7:f3:e2:c4:ba:18:c8:a1:22:49:d7:
fc:61:35:a5:bb:72:c1:f2:7f:35:00:c2:80:c9:ad:d6:34:bb:
e7:34:03:5e:23:a6:9e:1f:16:44:4e:81:d5:b6:63:db:50:41:
01:9d:31:05:9d:d9:90:46:c8:cb:3c:0f:35:a4:76:cf:df:6c:
34:d3:ae:f3:0c:34:0b:90:a7:aa:2f:13:50:ed:4a:80:f8:5b:
60:6a:24:39:89:d2:b0:9e:a7:5b:86:f3:c0:df:eb:c3:ae:a0:
35:af:1d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:14:33 2025 by rpki-client