Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
File: qKJRFAEUyP2K1ftFtxiaunvFBI8.mft (raw, json)
Hash identifier: ph5IJVv5q2DEu2vF5M8iHhbJ+y4dr6sKnUqhR4q8Dfo=
Subject key identifier: BF:AA:09:3C:07:DE:47:85:8D:73:E6:4A:5A:EB:CC:8E:51:BE:79:26
Authority key identifier: A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F
Certificate issuer: /CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
Certificate serial: 0196839129BF1FE2D0A23EBA20233CFF8490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
Manifest number: 11A8
Signing time: Tue 29 Apr 2025 22:00:50 +0000
Manifest this update: Tue 29 Apr 2025 22:00:50 +0000
Manifest next update: Wed 30 Apr 2025 22:00:50 +0000
Files and hashes: 1: AHkD8Aaan3pABbcPGhXEHYTBg8Y.roa (hash: hXef/ttEb+W4FSVe0XdSIGoItwURMRnjh0hA4tDFc64=)
2: qKJRFAEUyP2K1ftFtxiaunvFBI8.crl (hash: Q1dhZbM0LINoPNhgw0lVD+of4FYEz6LwcQeJ5mHySco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:29:bf:1f:e2:d0:a2:3e:ba:20:23:3c:ff:84:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
Validity
Not Before: Apr 29 22:00:50 2025 GMT
Not After : Apr 30 22:00:50 2025 GMT
Subject: CN=bfaa093c07de47858d73e64a5aebcc8e51be7926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:05:c6:d2:da:59:e4:f2:c1:5d:bf:c3:23:aa:
d7:46:fc:f3:36:da:78:cd:12:1f:77:e7:64:c9:83:
73:02:56:bd:2e:75:c1:34:76:6d:03:02:b7:9c:b1:
a5:28:5e:0d:c6:6b:73:dd:e6:a5:42:0d:cf:d6:da:
2f:18:31:a9:26:b0:7b:3c:5c:56:a5:39:e7:b9:d0:
b4:6e:58:b8:ac:dd:8d:cb:08:c8:39:66:c2:11:b4:
7d:14:08:de:dd:cf:6a:63:dc:31:03:d6:da:d6:53:
6d:ff:18:3e:46:c5:db:17:e2:70:14:94:70:2f:74:
c3:13:de:50:c8:4b:75:d7:ed:10:2c:85:03:24:a4:
29:47:b2:89:0a:20:1c:aa:33:43:cf:95:de:64:de:
a0:09:e5:82:cc:e6:5c:c4:59:60:e9:7c:84:9b:47:
7b:00:c9:05:1b:ff:d3:c4:69:37:f9:1e:3c:5f:41:
ee:21:ba:d1:aa:ea:2c:55:3a:65:bf:49:99:1e:57:
08:8b:24:27:ab:ac:10:a7:44:82:9b:53:d5:0c:35:
b4:e2:12:d9:83:a9:f5:b3:12:af:3c:98:db:22:af:
ed:20:33:31:be:83:8a:8e:b4:31:a9:af:b8:f3:9b:
31:d6:6d:8f:44:20:2e:a7:23:0d:f2:93:de:bd:df:
9b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AA:09:3C:07:DE:47:85:8D:73:E6:4A:5A:EB:CC:8E:51:BE:79:26
X509v3 Authority Key Identifier:
keyid:A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f2:6a:ce:44:cc:ba:a8:66:97:87:3a:84:3f:5b:ca:a2:06:
49:2b:a6:a9:bf:a8:35:e9:59:98:f5:c0:f9:49:ae:df:67:ac:
ef:46:06:7a:78:4a:60:00:e4:bc:6d:58:af:f1:58:63:6d:17:
ea:e5:35:d8:00:c9:3f:0d:fa:22:67:be:d5:76:fc:0e:69:b3:
25:79:1d:ca:42:3a:1f:b1:e6:8b:53:7d:d6:c4:c8:3e:07:a9:
3d:67:86:29:35:e5:b9:40:5e:5f:c6:94:ae:e8:36:ca:38:87:
de:ec:9d:8e:58:dd:72:6f:ce:fd:05:6a:a7:9a:9a:02:c1:b6:
e9:d1:49:50:df:9c:fc:0c:e7:03:d1:0b:6a:f8:38:e0:a7:33:
93:21:e3:c4:1c:a1:04:c9:33:23:ab:f6:9b:d7:7f:4c:ff:2a:
da:0b:57:ae:6b:b5:ea:46:95:d1:3a:65:bc:52:7f:cf:ab:fe:
39:2e:1a:63:33:05:17:2d:9e:1c:21:19:ce:a9:40:ee:ff:d9:
8f:f3:3f:1c:42:da:21:26:f4:02:9e:0d:74:f3:d8:02:bc:d3:
18:64:75:29:d9:8b:94:72:25:a6:fe:04:55:0f:be:49:2a:50:
bc:31:6a:37:77:d9:1a:80:02:8f:c0:c2:be:3b:9e:cc:66:24:
81:2d:66:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:33:55 2025 by rpki-client