Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
File: qQYfL0mm16-epna60D3xzi9QJg0.mft (raw, json)
Hash identifier: bf/VT96QvBRmT7/MO3KwMQjp9dQcs0UuiD+2mv5w9SE=
Subject key identifier: E5:0F:26:BF:7E:F3:1A:D3:BD:62:E2:F5:D2:60:7F:53:70:D1:E1:09
Authority key identifier: A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
Certificate issuer: /CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Certificate serial: 01967755B637E8AAAA120733E39900B97078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
Manifest number: 0900
Signing time: Sun 27 Apr 2025 13:00:27 +0000
Manifest this update: Sun 27 Apr 2025 13:00:27 +0000
Manifest next update: Mon 28 Apr 2025 13:00:27 +0000
Files and hashes: 1: hILMU0qMjMm6bmWNobLKh35z6fg.roa (hash: tRLWcg9XAdmGTHy58HB7PkQi1r29x3Hn5q5I5oWT1hs=)
2: qQYfL0mm16-epna60D3xzi9QJg0.crl (hash: alx0Fwg8HHKjkMpkUt+BpdajrHqsFMhioZSZQl8mP5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:b6:37:e8:aa:aa:12:07:33:e3:99:00:b9:70:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Validity
Not Before: Apr 27 13:00:27 2025 GMT
Not After : Apr 28 13:00:27 2025 GMT
Subject: CN=e50f26bf7ef31ad3bd62e2f5d2607f5370d1e109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:80:7a:cf:5e:9f:f8:33:17:ae:eb:0e:2b:a8:
5a:eb:06:b9:33:54:7a:70:3f:f0:2d:90:8f:24:a0:
cf:10:11:e7:26:da:e9:ff:48:8f:0e:1d:77:b9:77:
83:9c:b8:b4:15:a8:74:c5:e7:e9:12:35:cb:66:4d:
4b:0d:cd:ea:02:b4:f9:81:63:df:94:26:ef:76:9a:
01:e3:f2:25:1d:31:af:8c:ad:07:da:d7:3e:49:64:
ff:25:10:a4:fb:15:c5:b2:66:84:b8:9d:b0:ff:19:
c5:b2:32:b8:84:fe:0f:37:cd:7c:ad:4e:52:f0:65:
af:35:bd:e4:8a:2f:03:08:b2:4c:9a:72:33:8a:7d:
4d:97:fd:99:70:5f:a9:cb:0d:e0:57:cc:e0:47:eb:
81:7a:b2:c0:1f:c2:13:e6:e4:43:cc:f7:c5:62:ab:
82:8a:6c:04:e4:58:34:ac:00:b4:fd:8a:83:b5:b9:
5e:20:9c:45:bf:cc:79:3e:c2:4f:1a:4e:7a:4f:62:
7d:af:43:c0:d5:a4:b1:6e:23:77:64:36:b2:75:f3:
08:5f:66:9d:e9:1c:81:62:0b:84:e8:61:71:32:0e:
81:e8:09:03:fa:bb:3b:0b:bb:06:7f:f5:ea:80:a7:
f4:30:33:4d:b3:c1:87:17:e5:6f:89:00:46:46:3c:
ae:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0F:26:BF:7E:F3:1A:D3:BD:62:E2:F5:D2:60:7F:53:70:D1:E1:09
X509v3 Authority Key Identifier:
keyid:A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b1:df:23:7e:be:40:ee:f4:7e:af:8b:67:c3:03:b3:10:f9:
01:3a:b7:45:42:cd:aa:a4:7e:87:71:21:84:ed:13:01:19:3d:
6c:f4:9c:0c:07:e4:ea:f8:d5:9e:79:2f:96:2a:da:e1:0c:0a:
75:fd:e1:29:6e:29:d6:dd:86:99:f5:2d:22:a0:0d:f2:8d:97:
e1:a0:95:58:ee:9d:22:a4:ba:28:35:77:2b:37:3e:d2:d0:4b:
7f:85:57:2a:e8:1f:e2:3a:bf:e5:53:70:99:6e:e6:6c:f8:c3:
3f:a9:26:ad:f4:94:7b:3c:41:b0:de:4c:8e:2f:3c:d0:de:01:
e8:d1:e6:43:41:a2:3a:98:e2:b6:e9:ba:41:3e:d3:7c:89:5a:
a2:2f:c3:f5:67:1e:3f:b9:5a:ec:cf:c1:b4:68:73:39:36:99:
a0:8b:7a:4f:47:45:9e:3a:52:d6:ce:f5:1f:c5:12:95:0f:6c:
c9:3f:73:77:07:4b:ee:70:88:1a:75:37:57:ce:ad:7c:e9:43:
3e:bd:e3:2a:5e:8a:93:b5:09:47:f0:fe:23:63:ba:57:4e:c1:
40:0d:a4:bb:d7:d6:a0:e2:18:f3:71:e0:85:e3:2c:ec:9d:c1:
03:a1:bf:c8:76:22:97:c2:fa:dc:e8:c8:7b:3b:19:6f:c0:9c:
09:7a:34:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:01:46 2025 by rpki-client