Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
File: qujptNjblGuyDM9RJ5cHXIr9g80.mft (raw, json)
Hash identifier: 1+J+cp9ju0J674xsH1Z4rrK2H9EhDcu69a4dZKBNDs4=
Subject key identifier: BB:7D:CE:E6:7B:CC:BF:E7:61:33:72:45:88:26:E6:04:9E:44:CB:7F
Authority key identifier: AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD
Certificate issuer: /CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd
Certificate serial: 01962ABC457A4908BCB937622C17D1BA29A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
Manifest number: 0342
Signing time: Sat 12 Apr 2025 16:01:43 +0000
Manifest this update: Sat 12 Apr 2025 16:01:43 +0000
Manifest next update: Sun 13 Apr 2025 16:01:43 +0000
Files and hashes: 1: ABD8LSpm9Ko-5zn9g0r9GsemMIA.roa (hash: 1zcaf+BfE0QK77Rl0YVNTPqdqeAJJr/C/HmAQhJgCmY=)
2: qujptNjblGuyDM9RJ5cHXIr9g80.crl (hash: AKv25JeUGdUQRzCms1w04hiktbEiv6JxmAxVf7DIYuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:bc:45:7a:49:08:bc:b9:37:62:2c:17:d1:ba:29:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd
Validity
Not Before: Apr 12 16:01:43 2025 GMT
Not After : Apr 13 16:01:43 2025 GMT
Subject: CN=bb7dcee67bccbfe7613372458826e6049e44cb7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:05:46:b4:05:6a:4e:2c:3e:ba:e8:cb:18:7a:
f6:9f:1e:14:56:fa:af:ec:b1:1a:bb:c8:4c:d9:3b:
94:3e:d2:7b:29:2a:76:58:5f:96:b2:62:44:e8:81:
8b:ca:1f:85:19:05:49:f8:c6:38:9c:91:7e:df:35:
1c:8a:76:10:b2:7a:e3:d7:db:5b:ab:40:47:40:aa:
c9:ad:55:75:65:1d:bf:1a:7d:6d:93:21:77:94:bf:
91:ee:85:23:a8:a9:a3:a5:ec:7b:e9:8d:17:ea:10:
c0:86:30:90:11:54:37:71:60:95:47:af:e7:f3:d5:
1b:be:17:66:64:61:6e:7d:0d:94:b3:b7:21:d0:a7:
e1:ee:06:c3:ef:07:86:58:22:d3:93:66:f3:5b:98:
ee:fa:2c:e6:cb:23:8d:c7:b9:ec:f3:57:4e:e9:53:
a1:26:7b:aa:fe:6e:a0:eb:59:b8:1c:80:51:46:a1:
19:87:7f:ea:16:a4:06:9a:53:a6:31:71:1e:aa:24:
f4:d9:e5:5c:2b:cc:f1:41:41:a7:88:b8:28:0c:27:
b2:3f:95:e3:11:45:e2:b6:9b:eb:72:4c:c0:59:3a:
99:01:06:2f:b3:6c:3a:4b:4c:36:3d:c0:33:a6:b4:
ce:99:c0:3f:bf:7c:7b:a0:5f:2f:4c:4c:7f:0e:cf:
bd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7D:CE:E6:7B:CC:BF:E7:61:33:72:45:88:26:E6:04:9E:44:CB:7F
X509v3 Authority Key Identifier:
keyid:AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:4d:57:3f:3e:d7:6f:20:e8:e5:85:3d:98:49:d2:3f:9a:75:
df:7e:23:60:de:c6:d1:f5:e8:5c:d7:14:14:02:ed:0c:25:48:
20:2a:77:1b:5b:e9:36:0f:2b:dd:74:32:38:c3:b5:5d:53:7b:
b2:82:c6:ac:b5:50:f0:79:6e:a8:d7:90:70:af:cb:75:71:e3:
9b:f9:72:31:0c:cd:e2:c6:fb:b8:73:2f:6e:24:76:d8:4e:48:
3d:d9:99:8a:9e:aa:09:a8:2b:00:ec:80:f1:b3:58:4a:c7:1d:
ef:eb:46:28:7a:e1:2e:b9:ba:e8:24:34:1c:78:aa:ad:63:f0:
74:72:fd:8e:4d:e8:35:41:c9:0d:ba:2c:d0:b2:46:17:34:57:
5f:11:b3:59:6b:18:b6:7c:11:db:31:b8:7d:38:a6:bc:73:a2:
f3:bf:27:c4:9c:8a:6e:74:41:d5:39:e1:6b:cb:79:c3:fc:8a:
85:dd:48:d4:f1:a7:7f:f8:77:27:81:d3:0b:7a:cd:80:1b:7d:
b0:a9:66:80:0d:42:fe:52:da:78:d5:f9:fe:74:e0:eb:f3:11:
28:0c:e3:58:73:41:f0:3f:2a:e0:b6:fd:8d:da:e8:78:a6:cf:
46:07:7f:b9:15:1a:df:67:70:2f:9c:f4:e3:33:79:75:ea:79:
a4:45:f7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:07:33 2025 by rpki-client