Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
File: qlemjwii4wun1z1EyabiQA_Qo7E.mft (raw, json)
Hash identifier: Y3lt7SJBsORCVmR+lPlyeCK0cXXT8kGAgNh+j0lmdVc=
Subject key identifier: DE:B0:1A:34:DE:5D:C0:28:13:47:93:80:E1:9D:B4:EC:22:15:BC:F2
Authority key identifier: AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
Certificate issuer: /CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Certificate serial: 0196854849E0EF93EDD701388E307305BE2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
Manifest number: 06EE
Signing time: Wed 30 Apr 2025 06:00:29 +0000
Manifest this update: Wed 30 Apr 2025 06:00:29 +0000
Manifest next update: Thu 01 May 2025 06:00:29 +0000
Files and hashes: 1: _uIcjPbTo2tZZuPbQQgAGU6uFaU.roa (hash: mFbVT5EqFo/vqgifNq4fzGvwXcCU4t6Rafq12c4CSak=)
2: qlemjwii4wun1z1EyabiQA_Qo7E.crl (hash: LTPwivTOlbEqJrEKQUL7YLagNYn5aEtzIZAB4AucI68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:48:49:e0:ef:93:ed:d7:01:38:8e:30:73:05:be:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Validity
Not Before: Apr 30 06:00:29 2025 GMT
Not After : May 1 06:00:29 2025 GMT
Subject: CN=deb01a34de5dc02813479380e19db4ec2215bcf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a4:09:1e:59:d1:91:68:79:09:4c:e6:c3:24:
df:2a:18:ae:f4:e3:ea:e8:24:f5:46:d8:38:99:df:
e3:93:d6:1d:23:f9:e7:b0:40:86:69:30:fd:57:72:
57:e2:55:0c:a5:5b:87:85:5b:d3:9c:a7:08:76:3b:
f5:cb:f2:f8:f1:86:ef:e3:a7:a7:d2:33:c2:db:97:
ca:88:6b:6d:6f:06:94:91:ec:00:21:12:4d:5b:f2:
50:2d:16:79:b6:f7:b6:25:2a:85:d4:2f:c2:87:c1:
52:60:e7:8b:86:94:89:52:52:e4:de:50:78:8c:81:
6d:4c:56:85:19:b8:05:d0:bf:23:06:75:31:37:80:
3e:bc:a6:4b:97:03:6c:34:8c:fc:1a:87:e1:80:3a:
e9:c8:70:1d:0e:66:02:47:1a:3a:e0:9c:ac:95:ea:
46:43:46:4e:07:f6:a4:af:3a:5a:fd:10:7f:11:e9:
e5:31:53:b5:21:a6:b1:f6:da:5b:73:f7:f6:32:c4:
69:f7:a9:af:a3:40:d5:8b:14:8e:96:0e:b9:10:30:
70:29:51:ed:39:91:5e:11:45:df:d3:08:19:00:42:
3a:d8:17:c7:61:20:bd:ff:91:3f:65:0e:a8:87:e3:
74:c0:c4:5d:a0:1e:08:b4:c7:e5:2a:ce:e8:db:77:
fb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B0:1A:34:DE:5D:C0:28:13:47:93:80:E1:9D:B4:EC:22:15:BC:F2
X509v3 Authority Key Identifier:
keyid:AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ef:86:cc:de:f9:82:a3:16:a1:48:a5:94:0e:60:a3:5b:92:
49:e6:1b:53:3c:5e:22:86:20:5f:92:27:c2:29:54:8c:18:dc:
25:fe:c5:ce:44:99:50:12:5d:92:9f:02:a7:af:04:8f:48:d7:
86:46:15:7d:db:b0:d5:29:06:7c:08:74:c4:ea:3b:a0:9e:1a:
37:5f:d8:5f:a4:99:9c:16:03:94:ae:95:82:0d:6e:f0:f3:01:
3e:f6:bc:ef:6f:13:1d:f3:cf:e9:98:a1:35:0b:a4:8f:cc:69:
c3:e4:8f:54:b1:3c:f5:79:59:5d:2e:e1:0e:5d:a3:85:07:96:
58:a2:50:19:dd:16:7f:27:c1:b3:a5:86:d4:7c:87:3c:26:7a:
9c:a9:81:70:9c:32:28:b1:88:1b:75:ba:82:8a:29:6c:3d:fd:
e3:e2:4a:a6:0f:89:87:ed:2e:c6:4c:4a:f8:ac:22:fb:15:c8:
f0:d0:e1:a6:6f:c9:d5:17:49:7a:1a:46:e9:42:de:12:09:46:
71:b5:46:0a:7b:26:6b:4b:78:f7:a9:26:5f:4b:ea:62:f8:38:
bb:9f:38:a5:59:02:82:d7:14:56:2e:73:ca:41:1c:68:79:cd:
24:0a:35:0f:f1:18:3b:76:21:62:d6:eb:f5:ce:18:a3:30:7f:
f5:53:ff:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:15:21 2025 by rpki-client