Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
File: qsIj-xlCEV5IqXVCByktAKCC7N8.mft (raw, json)
Hash identifier: s9T5SngpO1g1CT7Sba1S7iJdMhqcsh31M7HOhvTYS4Y=
Subject key identifier: 75:D8:BD:4E:B1:87:5D:B4:79:35:36:7A:C1:0E:C0:ED:2B:CE:3F:A3
Authority key identifier: AA:C2:23:FB:19:42:11:5E:48:A9:75:42:07:29:2D:00:A0:82:EC:DF
Certificate issuer: /CN=aac223fb1942115e48a9754207292d00a082ecdf
Certificate serial: 01967C4559A641888C575E481E933076376B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
Manifest number: 0763
Signing time: Mon 28 Apr 2025 12:00:41 +0000
Manifest this update: Mon 28 Apr 2025 12:00:41 +0000
Manifest next update: Tue 29 Apr 2025 12:00:41 +0000
Files and hashes: 1: f7H4NvJn5XG9ZEVLvo3rzyryem0.roa (hash: FIvnUTIH/WyzVRn7SNngTErOpdYKzvrkMjSyoAbXEio=)
2: qsIj-xlCEV5IqXVCByktAKCC7N8.crl (hash: Mc+hNuhXOh44NqlPVEOhUvp61OEFZ93RQrc0el3tCLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:59:a6:41:88:8c:57:5e:48:1e:93:30:76:37:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac223fb1942115e48a9754207292d00a082ecdf
Validity
Not Before: Apr 28 12:00:41 2025 GMT
Not After : Apr 29 12:00:41 2025 GMT
Subject: CN=75d8bd4eb1875db47935367ac10ec0ed2bce3fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ff:09:9c:a8:74:a9:a3:a0:7e:e0:b2:00:92:
84:90:96:53:7c:ce:71:6b:1c:94:f8:aa:67:0c:c8:
ba:25:6a:82:37:1f:9a:da:d1:68:35:a1:41:93:37:
94:ca:4e:80:b7:5e:f1:4e:a9:45:2d:35:5e:a0:3f:
73:9d:5e:f8:1b:4b:1c:5f:d8:ab:c5:90:1a:90:3c:
71:08:8d:83:d6:4f:b6:fa:70:7f:67:a8:c2:ee:c6:
d2:7e:25:9c:9e:f0:a7:08:fa:f0:2d:05:60:35:41:
3f:23:e9:43:33:81:7c:cc:31:89:ec:d0:c6:1d:e7:
a8:6c:9e:11:eb:81:d6:c0:5d:cb:90:17:dc:4b:aa:
c3:78:77:10:f1:88:9e:b0:7f:7e:b0:68:1e:b2:82:
a9:5e:b4:4a:b1:9c:3e:ab:b8:65:e0:1f:85:40:ea:
86:7f:02:4a:21:90:e2:4f:32:ce:47:f0:f2:cc:3c:
08:d5:6a:c7:31:43:19:69:11:25:f0:91:48:f2:3f:
ed:47:c4:21:83:e2:c1:70:86:d3:57:94:c9:73:cc:
53:c0:80:fe:ea:f9:a5:65:1c:ae:84:ae:f9:33:76:
8d:ea:7a:e8:94:7a:2f:29:b5:fd:74:c6:cb:70:c5:
73:65:0a:7d:26:97:12:51:c2:20:df:93:dc:87:f8:
b9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D8:BD:4E:B1:87:5D:B4:79:35:36:7A:C1:0E:C0:ED:2B:CE:3F:A3
X509v3 Authority Key Identifier:
keyid:AA:C2:23:FB:19:42:11:5E:48:A9:75:42:07:29:2D:00:A0:82:EC:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:96:43:56:8f:6d:ef:f6:d1:ae:e9:e7:ab:de:5a:63:6f:50:
a0:09:a5:f6:c9:80:ae:79:2f:3c:b8:5b:f8:7b:aa:d9:ea:af:
49:2e:0e:77:19:8a:78:51:d1:7a:ce:84:b7:a3:0c:1e:79:0c:
bf:2f:b0:77:9f:13:56:6d:94:7e:9f:bb:39:5e:05:78:d3:48:
d2:8e:26:1c:76:3f:30:8f:4a:c2:b5:d0:94:a0:30:ba:19:14:
30:f1:61:cb:fc:b1:73:11:f7:47:39:39:d6:7b:d6:fc:21:8c:
49:f1:63:fd:6f:27:9f:be:81:0b:36:4d:a9:7f:dd:5b:3b:e8:
66:81:4e:67:b3:fe:93:e1:98:71:8c:17:30:10:a9:e7:6c:28:
2d:62:24:40:fe:b3:37:3b:76:8c:fb:a6:29:8c:4b:b9:00:d6:
a7:92:56:1e:16:ff:fa:bb:97:94:43:0b:69:04:d5:79:7d:f1:
c9:49:32:ba:96:88:bd:92:59:c1:42:18:5f:db:30:f0:fd:df:
4f:e1:a7:7c:d0:24:ab:a1:13:ab:f7:38:12:e3:3f:f1:18:14:
0f:2d:32:0a:30:90:14:2a:96:7b:7c:72:52:29:82:a0:f3:6c:
e0:32:d1:89:2c:6b:15:25:10:eb:a8:21:0c:ba:b8:03:97:39:
0b:f9:65:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:01:02 2025 by rpki-client