Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
File: qJKcs0O9888gTEBa8KVTPqSwkzw.mft (raw, json)
Hash identifier: eYF/eJu0YszDAmRIxYrnn+ARzq9yH5afW5UHwodzfmQ=
Subject key identifier: D3:C6:D0:1B:47:D7:E1:B3:5F:34:B4:BB:90:3D:6B:07:2F:04:84:7E
Authority key identifier: A8:92:9C:B3:43:BD:F3:CF:20:4C:40:5A:F0:A5:53:3E:A4:B0:93:3C
Certificate issuer: /CN=a8929cb343bdf3cf204c405af0a5533ea4b0933c
Certificate serial: 0196789F594E0E01EDB63B54F54724503CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
Manifest number: 0A85
Signing time: Sun 27 Apr 2025 19:00:31 +0000
Manifest this update: Sun 27 Apr 2025 19:00:31 +0000
Manifest next update: Mon 28 Apr 2025 19:00:31 +0000
Files and hashes: 1: 8nlWTKhyMjB_CH2EMsOrSJHd2IE.roa (hash: mJ1SJpAndBJG+LB/ssF0bKHufcREx+RUY5ZeHveZh6w=)
2: qJKcs0O9888gTEBa8KVTPqSwkzw.crl (hash: uH3wncp9Zv0EhmyRj6jhb1EZnfPywlKd31Hr9Tdsatw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 19:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:59:4e:0e:01:ed:b6:3b:54:f5:47:24:50:3c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8929cb343bdf3cf204c405af0a5533ea4b0933c
Validity
Not Before: Apr 27 19:00:31 2025 GMT
Not After : Apr 28 19:00:31 2025 GMT
Subject: CN=d3c6d01b47d7e1b35f34b4bb903d6b072f04847e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5e:95:86:ec:88:2f:09:b0:3d:bb:f3:db:24:
fe:7b:c4:61:86:58:52:48:c8:db:a3:48:dc:5e:f2:
82:0d:ab:81:6f:ce:50:40:35:58:85:7a:c7:81:d3:
5f:41:0b:a1:5f:41:37:b0:5e:d3:9e:eb:70:9f:44:
53:e0:b4:bf:ba:13:ca:31:11:57:5c:8a:65:28:fb:
c6:4d:40:a8:a3:0f:2b:ee:cb:c5:7e:44:e6:65:39:
eb:70:22:55:06:41:05:b6:87:19:28:51:f9:b0:62:
69:bb:09:fb:93:6e:d4:b1:62:fd:7b:ab:b5:58:4e:
1f:ba:2b:72:86:c1:69:f9:50:2c:e9:ab:3e:cc:7e:
24:79:9f:7d:31:5d:7f:9e:18:29:89:ad:7a:a7:27:
18:6a:7e:9b:8b:af:eb:f8:38:1e:8e:69:8e:d9:d8:
4e:8b:23:42:62:4f:d7:24:e7:94:d4:6a:14:17:cb:
02:24:df:c7:1f:be:78:e1:02:3c:c0:a4:4b:01:d5:
dd:8a:3f:18:0d:3c:11:45:8d:92:6f:a4:31:2f:9c:
92:8a:40:9b:5a:0a:95:ab:6b:84:bd:3d:96:f3:9a:
b2:4b:32:89:8a:41:c0:bc:0c:f1:c5:b2:35:6b:e2:
62:fc:cd:25:48:12:96:c4:19:56:7a:7b:e5:c5:bb:
ce:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C6:D0:1B:47:D7:E1:B3:5F:34:B4:BB:90:3D:6B:07:2F:04:84:7E
X509v3 Authority Key Identifier:
keyid:A8:92:9C:B3:43:BD:F3:CF:20:4C:40:5A:F0:A5:53:3E:A4:B0:93:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d4:41:a8:5d:99:83:03:b1:b3:0e:99:2a:77:20:14:62:d8:
69:33:4a:93:28:16:de:1a:b2:26:23:e4:6a:fd:55:17:50:0a:
f3:92:89:f5:b5:e5:0b:3e:c7:32:98:8a:82:2e:ed:d5:2c:dc:
c2:8b:ef:17:97:ab:05:e0:d4:c8:7a:2a:47:17:14:f3:ec:24:
eb:09:2d:f3:45:4c:89:0e:15:82:1f:33:9a:8c:c1:00:85:09:
16:75:95:d5:38:a0:9a:ec:11:c0:78:d9:78:44:09:40:d1:04:
14:3a:f4:42:97:f2:5b:be:71:c7:9d:ce:3f:ad:c0:0e:96:04:
9c:6d:38:da:fc:ae:f9:e6:61:b4:cc:28:09:e4:a6:cf:e9:89:
05:72:69:b5:ad:83:54:a9:46:38:5e:a0:d8:50:e2:68:c8:20:
82:5d:c5:40:73:ba:af:f3:ee:68:49:4a:e2:44:5b:18:8b:18:
4b:20:38:25:66:c2:3d:5c:15:18:5e:60:ec:01:d2:a5:1b:8e:
39:89:3c:6a:61:1e:f1:0c:43:69:d9:38:7e:25:d3:72:c3:64:
b3:d1:02:ab:79:dd:48:8f:a8:62:ef:ae:d0:ff:59:e7:19:b3:
59:82:b5:a8:c9:67:3c:c3:c6:fd:a1:07:42:b3:b9:c9:b4:a6:
7e:b4:83:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:00:55 2025 by rpki-client