Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
File: qpoWTGVkErfar66FccxnnMb1h9A.mft (raw, json)
Hash identifier: SJSjNEriVSEyh5Hx+A09z+Z0+YjdgqQZFm+qNFuC0m8=
Subject key identifier: 1A:3B:3C:E8:DB:C2:08:DF:23:A7:48:CF:59:A8:D7:34:78:A5:DE:6A
Authority key identifier: AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
Certificate issuer: /CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Certificate serial: 019675D576968F1BF9733B288CA2EC448FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
Manifest number: 1514
Signing time: Sun 27 Apr 2025 06:00:45 +0000
Manifest this update: Sun 27 Apr 2025 06:00:45 +0000
Manifest next update: Mon 28 Apr 2025 06:00:45 +0000
Files and hashes: 1: VnsTdGec-3pHRJVLeuucM8lE74g.roa (hash: VZlx25MKWdF5CVCWwcXrJ37GBCTfmMAe38xqZnEYBGw=)
2: _1ATULCZ98sbSKA4UnZIqchgnFI.roa (hash: dqzQIeMxGMrNSZ+FakLTrNvjbHnx3VcQtBASfsN8WNM=)
3: qpoWTGVkErfar66FccxnnMb1h9A.crl (hash: yrTHAFEEyFh8EovLPFcr+E1gCzvtMdqhmVAb8yU5HZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:76:96:8f:1b:f9:73:3b:28:8c:a2:ec:44:8f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Validity
Not Before: Apr 27 06:00:45 2025 GMT
Not After : Apr 28 06:00:45 2025 GMT
Subject: CN=1a3b3ce8dbc208df23a748cf59a8d73478a5de6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:25:63:14:ed:8f:44:28:61:47:85:1e:e3:ad:
08:29:4d:f3:fc:53:72:64:e7:cd:28:39:24:33:26:
a0:11:b7:69:91:eb:76:34:b0:1b:3a:3d:1f:74:de:
b3:98:38:d8:f2:da:37:b2:bf:43:4b:39:9f:15:56:
c1:3f:c1:30:23:86:38:99:b9:ab:b4:90:f2:10:eb:
6d:28:8e:25:cc:4b:2d:b7:d8:d8:f9:54:28:3f:59:
ff:c7:4c:75:5b:d4:19:a3:5d:99:86:1a:b0:f9:30:
5c:ca:ca:21:e9:05:c4:59:a1:2b:5f:af:4f:a9:c9:
07:e3:1f:70:cd:81:33:01:a7:19:6f:f6:88:1f:fc:
83:4e:6f:7d:a3:24:c3:24:64:22:fd:ce:27:47:6c:
a3:21:12:4d:0f:cd:6f:40:14:80:f7:71:d4:a7:15:
2f:60:e0:a7:7b:60:02:d5:cf:97:80:29:80:de:5f:
13:17:79:c3:21:9b:76:60:0c:ef:ee:7a:81:ca:c2:
7d:1d:f8:df:3f:44:f9:f1:97:fc:78:f4:1e:e9:d7:
fb:a2:b4:b8:94:62:19:7a:5e:9f:0f:fb:3d:88:a0:
1d:03:61:be:b4:84:50:42:25:12:6c:15:1b:40:f6:
e8:39:1a:27:e6:c0:91:5e:98:68:f3:df:64:8b:e8:
67:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3B:3C:E8:DB:C2:08:DF:23:A7:48:CF:59:A8:D7:34:78:A5:DE:6A
X509v3 Authority Key Identifier:
keyid:AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:6d:e1:7e:a0:7f:c0:b6:c4:6a:7a:2c:74:49:c5:8e:2e:d7:
c0:98:22:37:b2:1a:31:1b:12:a4:bb:01:62:f5:63:4f:59:d7:
b0:62:d8:a6:db:ac:8f:d0:b6:ff:19:12:c7:d4:22:f6:73:e0:
84:46:4d:84:a2:2f:71:32:26:58:da:e9:24:00:01:50:c9:70:
1e:ae:c6:e6:7a:f5:2b:02:4a:45:bd:91:12:b0:e9:61:d0:72:
c2:77:c7:a6:8e:c9:00:30:e3:28:01:f9:f3:cd:11:23:aa:e7:
ae:2d:9c:57:66:5c:34:c0:93:81:6b:3f:6f:25:b7:70:13:43:
54:a1:82:0b:d4:fe:83:92:d0:ba:d2:80:b1:51:cd:37:6c:c2:
be:65:c3:76:cc:09:d5:22:12:28:27:1b:21:82:23:a4:5a:cd:
35:08:ce:62:f6:16:c7:ca:92:55:6b:0a:1d:60:5f:7b:ec:96:
7b:b2:3d:37:37:13:e2:76:fe:f5:f6:9f:58:9b:a6:4c:c1:d4:
57:23:ea:cd:2f:16:dc:12:b2:6b:13:fb:ca:c3:70:a3:94:5a:
f5:ff:59:4e:ae:5d:1a:12:e7:b5:f0:8a:61:27:18:38:70:52:
d6:40:5d:88:a4:35:89:9a:1d:30:7d:74:01:78:93:6c:11:26:
1f:b7:56:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:38:27 2025 by rpki-client