Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
File: qT4365yxmDJdZWZzKJJY0o6587g.mft (raw, json)
Hash identifier: K7NQAHjzCaVAgVwqF5AEZuIegcjgSuEj1chTpt6GYbA=
Subject key identifier: D2:FF:62:BB:EA:9D:B0:36:B9:37:85:DB:B7:9D:EF:29:29:4B:FD:F6
Authority key identifier: A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
Certificate issuer: /CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Certificate serial: 0196865AE833D5E79EBDCB163A5562794EC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
Manifest number: 14AC
Signing time: Wed 30 Apr 2025 11:00:26 +0000
Manifest this update: Wed 30 Apr 2025 11:00:26 +0000
Manifest next update: Thu 01 May 2025 11:00:26 +0000
Files and hashes: 1: B6IAypRDNnn3wQIonYGMbrtebVA.roa (hash: RDNajdiQ2iOHeS1ehJ984LhPxM3hBSKi1PJW1BaavLE=)
2: qT4365yxmDJdZWZzKJJY0o6587g.crl (hash: gcrW0uT1iRJNdnmp4OGS+gJnlRpAj17j+KTdAI3Xp7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:5a:e8:33:d5:e7:9e:bd:cb:16:3a:55:62:79:4e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Validity
Not Before: Apr 30 11:00:26 2025 GMT
Not After : May 1 11:00:26 2025 GMT
Subject: CN=d2ff62bbea9db036b93785dbb79def29294bfdf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:92:34:66:2a:05:58:ef:68:fb:42:7a:97:
83:56:e1:13:e4:1f:aa:fb:2d:ed:fc:a0:d4:2b:2e:
ff:ca:66:c1:13:4a:0e:5c:0c:35:f2:e6:62:78:ea:
a0:65:e9:fc:ad:50:70:d9:f3:d6:9e:53:55:00:a1:
58:ac:c4:03:41:16:1f:6d:1b:d8:63:67:fd:ae:b3:
e6:63:50:7e:43:d9:94:ca:6a:8a:72:1a:2d:3f:5e:
12:26:94:ff:04:53:96:6b:b8:60:af:68:ab:04:f0:
81:b9:31:c7:c3:9c:1c:88:67:98:78:81:22:4c:0a:
a4:92:f1:15:e4:e0:f9:eb:d1:0d:42:7b:7f:71:00:
7f:9d:f9:62:3c:76:3e:91:65:9d:71:15:bb:67:3b:
11:88:1b:40:5a:8b:1d:1a:74:6f:ed:85:10:c9:6a:
d5:c1:4e:f9:1c:c1:0d:14:49:e2:1f:bc:70:7e:53:
4a:36:56:61:d1:5c:df:1b:7d:77:94:f7:9e:54:eb:
28:6a:0c:4e:d9:6b:a4:5b:47:f0:0e:49:f5:17:4c:
58:e2:b8:63:d1:fb:12:6c:97:77:1b:04:6d:aa:21:
08:b5:55:ff:90:65:f9:a7:c9:13:99:37:34:04:06:
fc:89:0f:6e:14:d2:b4:b0:4b:86:c5:89:b2:d1:64:
f5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FF:62:BB:EA:9D:B0:36:B9:37:85:DB:B7:9D:EF:29:29:4B:FD:F6
X509v3 Authority Key Identifier:
keyid:A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:22:fb:5e:1d:67:ec:dc:1b:56:24:f7:8e:18:27:9d:00:e6:
e2:02:2a:01:0e:06:fd:c4:48:a8:2f:27:d6:a0:70:d2:6c:93:
9c:1c:29:a0:66:af:f1:32:ec:ab:36:99:c4:d1:d2:b8:9d:83:
c0:8f:e3:a0:ca:16:55:c3:24:b5:3d:08:f0:7b:1c:bf:74:f4:
7b:07:88:a5:1b:67:39:66:ff:2b:3b:4c:1d:a3:b0:7d:6b:ff:
7a:96:01:40:a0:11:ef:ca:97:68:dd:88:bb:46:47:be:9e:8a:
b6:d0:29:dd:42:84:70:c1:a4:cf:80:10:0a:a5:24:ab:1e:49:
10:44:13:a9:1e:4f:f4:d1:21:cb:2a:34:e0:7b:f9:d9:0b:0b:
28:1f:54:ce:3e:c7:a2:be:07:7e:3a:8f:2e:8f:0f:26:f3:bc:
8f:e4:db:88:01:b3:20:76:91:22:0e:42:2f:bd:48:22:50:ab:
c7:97:ea:01:6f:51:1e:b7:a5:bd:cb:90:33:40:9a:07:e3:82:
50:3d:08:1a:50:18:ff:b8:3f:49:7c:a7:c5:8c:87:3e:7a:5c:
b2:c5:4a:4f:23:32:46:fc:dc:53:7c:1f:c6:05:e2:e4:a7:81:
50:8e:1f:78:ce:64:1b:e2:23:dc:bd:e0:4d:ce:27:38:dc:b9:
1b:1e:a9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:35:46 2025 by rpki-client