Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
File: qcd4RK62qrWMRgPKCCvdSngEd58.mft (raw, json)
Hash identifier: GIT6SjdRUlr+UzLd4LkBrxI4JLrolVhtm8KRsljwcqo=
Subject key identifier: 15:CD:10:DD:8E:3C:B2:60:94:2A:C8:51:D0:7F:EE:84:25:C9:73:59
Authority key identifier: A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
Certificate issuer: /CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Certificate serial: 019679B24B91D84FE7783EAE43BD0F5E70A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 00:00:49 +0000
Manifest this update: Mon 28 Apr 2025 00:00:49 +0000
Manifest next update: Tue 29 Apr 2025 00:00:49 +0000
Files and hashes: 1: 0rwOYdPXm3SF3mlaMFSkxpfBDj8.roa (hash: ghdXu6w3ahY/kqZH3juDYd4TR5LQuKoojRWncabKdos=)
2: qcd4RK62qrWMRgPKCCvdSngEd58.crl (hash: DO/1JvMAN3VVuCiBwwjncqYppvjiLoNVC4As/8St8l4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b2:4b:91:d8:4f:e7:78:3e:ae:43:bd:0f:5e:70:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Validity
Not Before: Apr 28 00:00:49 2025 GMT
Not After : Apr 29 00:00:49 2025 GMT
Subject: CN=15cd10dd8e3cb260942ac851d07fee8425c97359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:05:ee:df:1f:16:e3:c6:e2:ed:3b:88:c6:97:
d8:1f:73:be:f0:77:f3:a3:1f:03:4f:b8:a1:67:08:
be:6d:d4:fb:cd:ed:40:cc:74:2d:c3:5e:d0:05:95:
c4:9d:1e:cf:c4:fd:25:03:fa:ef:da:e5:23:a8:cc:
72:b7:a4:56:9e:68:b7:a9:9e:0e:ca:25:db:88:86:
ed:16:37:af:c9:f0:0c:7f:71:b8:e7:f3:ee:0b:c9:
f3:0f:fc:7c:18:e3:26:54:23:e0:d1:a1:b3:96:d3:
eb:1e:e1:6c:d3:7c:42:9f:2f:af:1d:72:1b:b9:01:
d1:28:e5:8b:56:88:b9:22:62:ca:76:44:85:4f:47:
35:05:1a:b0:c2:0c:e3:df:49:b6:2a:87:35:7a:b0:
7f:d8:f6:59:ea:f2:ef:c5:f7:3b:08:cf:a2:41:dd:
53:e5:a6:80:ef:fe:00:fa:e8:51:ca:33:0c:ca:9c:
7d:85:a2:ba:5b:7b:d0:12:d6:30:72:39:5d:5e:99:
95:8b:d9:5f:5a:8a:ff:35:90:45:b9:6b:b8:85:1d:
61:64:ee:11:4e:11:10:f0:64:af:3a:5e:c9:a2:ef:
82:f6:53:9d:e6:5a:1e:e5:fa:3a:a1:74:35:22:8c:
42:6e:61:9c:10:d0:d3:f0:77:c3:80:51:43:10:a6:
02:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CD:10:DD:8E:3C:B2:60:94:2A:C8:51:D0:7F:EE:84:25:C9:73:59
X509v3 Authority Key Identifier:
keyid:A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:db:70:b3:38:ff:b1:cf:ee:0f:1c:0e:4b:de:c2:3d:b8:f7:
a0:ea:4c:db:d7:cc:15:a1:27:bf:12:f6:0c:d3:3c:90:3b:6a:
88:8c:bc:28:37:1a:59:90:db:d4:1b:10:d0:02:ba:5c:8c:82:
cc:e8:2d:cf:b2:ac:31:97:98:64:e9:3e:38:24:6a:c4:a5:52:
a8:2f:ea:1c:23:4c:fc:ff:f4:e9:fa:11:09:4b:cd:47:34:e8:
48:7f:66:e0:ea:ec:de:d2:a2:cb:98:f3:fa:e6:57:a0:1b:67:
ab:de:d7:3e:19:5d:83:9c:48:cd:74:33:b7:db:2f:83:3e:88:
66:dd:0d:a8:57:4e:fe:35:ac:97:45:b9:ab:71:7a:ad:de:8e:
3b:03:ca:26:7e:84:33:48:cc:15:43:f7:c0:73:3d:43:0d:d5:
30:bf:ca:54:34:f4:37:83:d0:1c:5a:04:16:5f:db:b4:67:51:
fc:2a:90:2a:6d:92:51:bb:0f:40:7e:c3:55:7a:3e:7a:4f:8d:
1e:42:61:b5:f0:26:13:00:e3:92:2a:b1:c3:98:c9:e8:c3:50:
a6:67:9f:5d:8b:9d:e9:d9:30:b1:df:52:41:a4:9b:0d:80:66:
f1:97:6e:a5:c7:4c:5f:d5:bf:67:1e:88:0f:e2:35:f7:21:86:
80:b0:68:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:57:28 2025 by rpki-client