Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
File: qltHHQugidnp9GwpExlnT6yBKNA.mft (raw, json)
Hash identifier: hG1t54JFo1YUhNWhbSqb3d4uVCcTNiftilvxn8VeXaU=
Subject key identifier: C4:19:1C:5E:50:24:AE:C2:81:C3:9D:41:5A:59:0B:15:A3:EA:31:4D
Authority key identifier: AA:5B:47:1D:0B:A0:89:D9:E9:F4:6C:29:13:19:67:4F:AC:81:28:D0
Certificate issuer: /CN=aa5b471d0ba089d9e9f46c291319674fac8128d0
Certificate serial: 019682EBE5901F4F2ED1B2C734D16BD5100C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
Manifest number: 0B67
Signing time: Tue 29 Apr 2025 19:00:19 +0000
Manifest this update: Tue 29 Apr 2025 19:00:19 +0000
Manifest next update: Wed 30 Apr 2025 19:00:19 +0000
Files and hashes: 1: VNd90Fl0tWahsmhhQvhoAAT8f5U.roa (hash: U+zi8hpH0S9lksZLxaBLhZX/Hg0tdOzYwVmTSHbyaHY=)
2: oPUfgQs_gRyUUqFixo17ClnZdws.roa (hash: BRanyzZIskjVzme1gyyyKAnXC2WxzE9xAlEA/GqswiQ=)
3: qltHHQugidnp9GwpExlnT6yBKNA.crl (hash: PgmH8ezkHKopQSi5iA+SgJyXfCi93OjTJe4xnneUJj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 19:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:eb:e5:90:1f:4f:2e:d1:b2:c7:34:d1:6b:d5:10:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa5b471d0ba089d9e9f46c291319674fac8128d0
Validity
Not Before: Apr 29 19:00:19 2025 GMT
Not After : Apr 30 19:00:19 2025 GMT
Subject: CN=c4191c5e5024aec281c39d415a590b15a3ea314d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bc:ff:a2:64:d5:50:16:20:c3:8e:1b:b9:42:
ed:72:86:e5:a8:93:45:0d:0b:22:2b:01:73:58:0c:
50:e6:2a:ce:76:66:60:00:b6:19:48:c6:63:0a:ec:
87:0e:9c:a3:8d:62:bd:18:39:88:92:a0:65:58:ff:
40:31:69:8b:d8:2a:56:50:30:dd:d3:36:1e:3b:10:
01:ca:1a:9b:e7:99:d0:8a:84:7c:31:cf:6d:86:9a:
72:e3:67:81:08:8c:d5:05:2b:53:ab:3f:94:44:0d:
c6:62:35:9f:40:17:dc:49:ac:b4:29:74:26:9b:08:
81:69:79:ec:10:25:aa:c5:5a:13:0c:aa:cf:e5:da:
64:4b:00:fe:8a:30:c9:3e:aa:06:f8:0f:34:46:cc:
0d:68:96:0b:7a:83:d7:2c:74:a1:69:08:78:6d:f1:
3c:06:a1:44:a6:80:bc:35:f4:34:5d:63:88:f3:79:
b8:e0:5f:5b:41:d6:7d:ad:73:d4:07:33:7e:d5:53:
f6:35:f7:31:1e:84:9e:7d:12:ed:28:87:4c:c2:f8:
9a:7a:b7:40:12:60:62:24:0b:38:0a:42:26:57:5e:
d6:2a:87:f7:48:e5:8a:0b:f9:49:36:31:de:0b:7a:
2d:a2:72:a8:b0:00:75:dd:57:f9:df:1e:d7:15:fa:
6b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:19:1C:5E:50:24:AE:C2:81:C3:9D:41:5A:59:0B:15:A3:EA:31:4D
X509v3 Authority Key Identifier:
keyid:AA:5B:47:1D:0B:A0:89:D9:E9:F4:6C:29:13:19:67:4F:AC:81:28:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:2e:32:02:2c:f9:9c:ab:5f:8c:12:86:73:0f:0a:8d:85:5d:
0e:61:c2:38:00:51:3e:59:98:c2:2c:c0:7a:e8:04:f2:16:c4:
a5:19:8c:b2:82:d5:a2:0d:0e:48:4d:2a:7f:c0:06:96:8f:77:
ce:33:4e:1e:8c:2e:39:d3:bc:34:bc:cb:27:0e:8c:88:00:68:
cb:04:c5:7f:9b:95:fa:47:96:47:c9:34:5a:2a:0e:1e:af:03:
8f:7d:a8:c1:d1:f1:d8:d2:c5:81:79:37:cc:19:a6:1a:aa:62:
a1:2a:09:6d:1e:57:1a:f0:aa:aa:f1:f5:17:43:82:dd:e0:2a:
4f:50:b5:54:2b:7d:de:3d:49:47:da:fe:ce:82:c1:dd:d6:b0:
44:8f:e6:3e:f2:21:96:30:d0:09:12:d4:5e:3e:f9:a8:84:b4:
6f:2e:d3:58:d9:76:3d:99:d9:26:fb:be:a6:3d:e8:fa:1c:16:
58:d4:f0:e2:4f:59:f4:45:ee:ea:9c:b5:84:49:38:31:94:9d:
f1:c8:53:f7:7e:39:3f:1c:67:30:99:56:66:a8:43:c9:fc:2c:
07:74:bf:11:24:6e:37:8b:c6:01:e6:f4:43:59:79:f5:fa:72:
02:92:ba:94:5d:fd:30:a3:08:af:77:77:36:2a:c3:34:02:c9:
99:c3:da:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:08:49 2025 by rpki-client