
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft
File: qqlyrDzBD3FspJhQRaXwgktgyh8.mft (raw, json)
Hash identifier: x2ImdyC0mMJgAoeFaC722qflM0Vsi/qDWf8Dcf4YcOk=
Subject key identifier: 59:88:32:15:0E:0A:20:79:87:CC:9A:70:5E:AB:C6:CE:42:89:1D:66
Authority key identifier: AA:A9:72:AC:3C:C1:0F:71:6C:A4:98:50:45:A5:F0:82:4B:60:CA:1F
Certificate issuer: /CN=aaa972ac3cc10f716ca4985045a5f0824b60ca1f
Certificate serial: 01969A18DC484A4DA06B1ECCFC6AFAECFEA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqlyrDzBD3FspJhQRaXwgktgyh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft
Manifest number: 2D
Signing time: Sun 04 May 2025 07:00:42 +0000
Manifest this update: Sun 04 May 2025 07:00:42 +0000
Manifest next update: Mon 05 May 2025 07:00:42 +0000
Files and hashes: 1: qqlyrDzBD3FspJhQRaXwgktgyh8.crl (hash: G2r2zQk0ALHd4SR3de8FTLSZaTKwJMoIc3KmcNfGC/A=)
2: yIGIxees9MuARoWN6t0oVINh_4A.roa (hash: geAsTIsbC4XBTKHwgmaJ0ZNmwh/Z8F8NnaAnGD8ONe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqlyrDzBD3FspJhQRaXwgktgyh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:18:dc:48:4a:4d:a0:6b:1e:cc:fc:6a:fa:ec:fe:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa972ac3cc10f716ca4985045a5f0824b60ca1f
Validity
Not Before: May 4 07:00:42 2025 GMT
Not After : May 5 07:00:42 2025 GMT
Subject: CN=598832150e0a207987cc9a705eabc6ce42891d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a7:d4:5d:9f:b5:67:0a:49:da:80:80:ac:ad:
c1:dc:32:7b:b6:2f:c4:5a:38:6e:06:5f:ff:95:d1:
b4:df:47:93:80:7b:34:69:cc:69:ac:a5:b3:2b:58:
af:51:37:3a:7f:be:79:d2:df:81:bc:23:19:fb:97:
a4:4e:94:ae:89:e2:0d:52:19:0e:25:63:99:a3:e0:
f9:08:32:42:76:82:00:17:1d:ab:67:f0:fa:4d:d5:
3b:10:11:dd:06:18:3c:a3:ed:f3:4f:54:c8:44:81:
0f:df:63:e9:e8:43:b6:a1:25:65:28:19:83:d5:3c:
16:ea:87:87:c5:ef:2e:a4:23:00:6c:e7:1f:25:c1:
ea:db:41:9f:dd:a5:14:da:1d:9f:1d:02:c7:5c:1f:
b8:bb:82:cf:49:e0:1d:3e:b7:9f:68:77:fd:fa:83:
b0:f0:17:0c:cd:08:c1:d3:6c:06:47:86:98:70:97:
3d:01:2c:dc:30:6e:ca:e0:b1:1b:eb:55:e2:03:c1:
f8:e2:6d:16:dd:e4:fb:fb:13:bb:7e:c6:f6:0c:c4:
c0:d4:3b:99:11:37:2d:ae:00:ae:dd:f2:b2:cc:70:
09:81:3f:fd:0b:c6:45:e2:41:26:72:c4:ca:22:6b:
21:1d:c7:46:40:6b:f3:cb:33:2f:73:f2:c2:22:d9:
09:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:88:32:15:0E:0A:20:79:87:CC:9A:70:5E:AB:C6:CE:42:89:1D:66
X509v3 Authority Key Identifier:
keyid:AA:A9:72:AC:3C:C1:0F:71:6C:A4:98:50:45:A5:F0:82:4B:60:CA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqlyrDzBD3FspJhQRaXwgktgyh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:4f:93:ff:52:c4:80:db:74:be:8e:99:b8:f0:e7:24:98:38:
f7:0c:88:31:fb:77:a4:bc:31:d6:e1:2c:3e:1c:2c:e6:ab:cf:
6b:37:ae:67:c9:79:95:6d:7d:de:f5:c1:d5:b2:1b:4d:2f:87:
4d:fc:e0:5c:4a:4d:57:3a:81:1f:cc:25:d2:10:02:41:02:1d:
8f:21:7e:48:6e:56:11:8b:a2:54:d6:49:6e:01:f0:8a:84:32:
77:43:1d:13:39:02:f5:cf:bf:e4:e1:ac:d8:b7:64:6a:97:7e:
bc:cb:95:3d:c6:18:38:ef:d0:c0:d0:7d:99:85:da:ef:d0:90:
77:58:14:82:4d:f9:c4:4c:51:6a:ec:4e:50:45:24:af:1c:31:
19:48:28:36:5c:2b:0c:65:c1:5b:8d:ab:e4:d4:24:79:c1:5b:
bf:c0:36:cb:96:5f:74:cc:7b:0e:85:7a:99:07:48:da:ad:19:
3e:cd:5f:c7:6a:e5:dc:b9:51:4e:5d:aa:2c:9b:40:a0:9f:2e:
49:39:3b:17:41:9b:7d:e9:d8:4c:b7:86:f7:69:ff:9f:82:90:
41:6a:01:d5:69:9e:bb:e2:f9:0d:8e:b4:c5:b2:9c:3e:c9:d0:
03:ab:e6:75:dc:e0:4b:cb:87:ba:ac:0b:b9:30:dd:fb:34:ee:
50:bb:23:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 17:07:01 2025 by rpki-client