Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
File: qBfHRT83fpy2-uXIk8Bno-HTUUU.mft (raw, json)
Hash identifier: jqQxE8QrmNUdQZbUzroyNLmBgzJBpmF6eW8ALAd+SEg=
Subject key identifier: 58:F1:13:35:A2:AD:75:50:BD:C4:FE:9C:8E:84:E0:40:FF:E4:6B:AF
Authority key identifier: A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
Certificate issuer: /CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Certificate serial: 019677FA7C7555B56E07A288E0D646520907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
Manifest number: 0D31
Signing time: Sun 27 Apr 2025 16:00:26 +0000
Manifest this update: Sun 27 Apr 2025 16:00:26 +0000
Manifest next update: Mon 28 Apr 2025 16:00:26 +0000
Files and hashes: 1: VyO46YpT23BvljW9CwqKp8OCvAA.roa (hash: iOrTV9PCcKDnK4SEk9hES8b1JaLYOrEkHnO7HcHHTeE=)
2: qBfHRT83fpy2-uXIk8Bno-HTUUU.crl (hash: UFoqu+yWYmqVdoBODiQ2ce7Up885J1J/mhxX94qZfzI=)
3: zyla5TQUsQzSUxLneRGH2oWP4QY.roa (hash: Nh/0bB0eQrdPHOZC7+V6EmhOBm+BxF8VlJbCNYPi958=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:7c:75:55:b5:6e:07:a2:88:e0:d6:46:52:09:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Validity
Not Before: Apr 27 16:00:26 2025 GMT
Not After : Apr 28 16:00:26 2025 GMT
Subject: CN=58f11335a2ad7550bdc4fe9c8e84e040ffe46baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:42:2f:cf:fc:89:6c:65:51:b8:2d:ae:70:d8:
7d:1c:c0:c8:41:b8:71:d5:5e:93:79:ff:c8:16:90:
a6:d2:9c:b9:ba:1b:df:51:17:c2:c1:4e:18:88:40:
51:dc:da:60:4e:32:0c:f2:8e:9b:39:ad:ac:93:12:
b9:96:ae:b3:bd:29:af:61:64:48:f5:0d:d8:1b:f9:
72:88:60:33:fc:2c:fd:0d:64:7e:31:42:92:3e:e4:
b5:9a:3a:03:f3:76:db:92:5b:3d:5c:ad:a5:50:5b:
69:b5:ee:55:4e:69:d5:20:e9:db:9f:22:f2:7f:2f:
92:ae:f2:7b:b3:db:16:d6:59:de:6d:30:c8:84:fb:
75:f7:06:45:6c:75:11:64:27:69:d0:0d:82:a4:79:
cd:6e:ea:de:1f:68:31:fb:6f:bf:36:dd:a3:50:58:
12:52:ea:88:4f:a4:da:d7:a2:77:9b:98:58:b9:a1:
5a:c4:6d:aa:0d:ce:b2:40:b1:b5:b3:31:cc:b9:c1:
28:cb:48:55:f7:e0:a5:24:c2:f8:67:5c:62:ef:37:
39:f6:4f:7b:ad:aa:a0:bc:bf:1d:b9:e8:84:df:b2:
ab:3f:42:49:56:78:fa:98:28:c2:a0:2a:25:05:73:
f6:fa:39:20:d8:23:28:7d:7f:d5:38:66:1d:60:42:
92:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F1:13:35:A2:AD:75:50:BD:C4:FE:9C:8E:84:E0:40:FF:E4:6B:AF
X509v3 Authority Key Identifier:
keyid:A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:2b:e7:58:39:d7:79:79:11:cc:8e:8f:2d:bd:8d:63:e4:39:
e4:9a:bd:dc:22:2e:45:5a:8d:00:ba:46:37:66:41:cd:91:24:
ec:07:f6:0d:33:16:fc:37:36:b4:b6:37:d2:f5:fe:50:0f:ab:
b1:d6:45:8a:9d:5e:93:69:7a:45:ab:ea:4b:c2:ba:c6:21:28:
07:16:ed:19:5c:76:54:c0:e1:e1:a5:d8:27:17:64:f3:e0:4a:
93:65:e4:a1:b2:0e:5d:d0:07:6a:7d:20:22:b3:79:0c:5d:41:
7e:41:f6:c3:04:f4:52:cc:e8:27:80:4c:17:ce:e8:cd:d9:ff:
bc:a1:8b:b0:ba:2a:bb:be:1f:88:ab:e2:b5:49:16:3b:58:b6:
3a:2e:2f:79:6a:bf:99:7e:f5:2d:87:fe:ff:10:c5:fb:15:d0:
71:79:7d:d1:9d:e7:82:51:31:bc:38:60:a4:ec:46:cc:6b:03:
48:2d:49:e1:e5:a3:83:01:5b:9b:9f:6a:7c:58:9e:45:51:6a:
d1:e3:9a:fd:6a:5e:bf:54:d2:63:b5:4f:0a:8a:10:3a:63:8f:
56:32:eb:ab:82:cd:35:30:54:aa:fd:ef:33:ae:a2:dc:ea:dc:
91:6c:77:e0:13:4e:9a:18:86:4d:ce:5c:68:30:5c:ee:29:ab:
3d:3c:28:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:34:53 2025 by rpki-client