Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
File: qLq2HDYOoQjNGSx856ftVWW9--A.mft (raw, json)
Hash identifier: jFhXpbEm2CeA1UqTA+9TY2NxLdxFtwoxQW/ZNRTuACI=
Subject key identifier: 71:D7:67:F4:7D:90:32:C6:E2:52:01:BC:27:7F:1A:C0:E8:42:91:1A
Authority key identifier: A8:BA:B6:1C:36:0E:A1:08:CD:19:2C:7C:E7:A7:ED:55:65:BD:FB:E0
Certificate issuer: /CN=a8bab61c360ea108cd192c7ce7a7ed5565bdfbe0
Certificate serial: 019678691108F3D9EFAE7FD2DA64A044FBB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
Manifest number: 0C86
Signing time: Sun 27 Apr 2025 18:01:13 +0000
Manifest this update: Sun 27 Apr 2025 18:01:13 +0000
Manifest next update: Mon 28 Apr 2025 18:01:13 +0000
Files and hashes: 1: llKmEV0JVzIG0_MZWPlP8ygpeC0.roa (hash: jPaOJ8ND+JyHLtdhEIszWBX4EhT8804ihxPfOvX+M6g=)
2: qLq2HDYOoQjNGSx856ftVWW9--A.crl (hash: kx0xjDXFIXFfcwc0wrsGJXQrkYF68JlS2QAVUOsieKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:69:11:08:f3:d9:ef:ae:7f:d2:da:64:a0:44:fb:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8bab61c360ea108cd192c7ce7a7ed5565bdfbe0
Validity
Not Before: Apr 27 18:01:13 2025 GMT
Not After : Apr 28 18:01:13 2025 GMT
Subject: CN=71d767f47d9032c6e25201bc277f1ac0e842911a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bb:b3:e9:86:0e:f7:57:44:7c:1b:2a:55:0e:
58:0e:55:4d:75:a2:0e:3b:3a:83:3e:3c:cc:b8:8b:
5a:8e:f4:b8:95:df:cd:c9:09:9d:05:79:61:41:65:
42:64:9f:49:67:26:8f:2f:7c:0c:69:81:f9:09:50:
2c:cd:cb:be:67:a8:a8:85:b4:aa:ad:a3:e3:b8:cc:
ef:58:59:5d:53:76:41:31:69:ed:62:bc:59:f7:94:
56:13:2b:cb:9f:d8:04:4a:b8:68:e7:fd:ff:04:4d:
4d:f4:52:92:32:8b:fe:2b:2f:84:ed:5d:ca:de:0a:
78:ae:9e:0c:a4:4c:6a:59:8c:b8:bd:90:1f:c8:85:
e6:e3:ac:22:1b:a6:8f:9d:96:1a:9c:67:6e:1b:7f:
b3:6e:80:26:e6:8e:d9:87:a0:a5:f3:24:c9:69:34:
26:1f:7f:2f:6c:ce:57:57:09:5c:4b:1e:e5:40:f8:
3e:a1:49:e8:89:44:a5:54:83:1f:87:90:b9:ba:1b:
92:d0:c7:94:ee:40:5a:ed:ac:e0:0e:90:20:00:96:
fe:94:43:59:19:b3:2c:fb:74:68:a4:26:8e:79:cd:
34:22:5f:c1:6e:2a:83:ce:ec:0c:48:b1:23:fa:a8:
6e:8f:f0:2c:5a:6b:dc:a2:a1:17:ad:d3:8a:72:d7:
90:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D7:67:F4:7D:90:32:C6:E2:52:01:BC:27:7F:1A:C0:E8:42:91:1A
X509v3 Authority Key Identifier:
keyid:A8:BA:B6:1C:36:0E:A1:08:CD:19:2C:7C:E7:A7:ED:55:65:BD:FB:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:97:6b:16:a4:9c:64:b2:17:b6:3b:25:ce:04:7d:7b:21:60:
88:1f:0c:81:eb:30:8a:ee:77:c8:b9:19:25:41:19:2c:d5:3f:
a4:86:b3:84:8f:75:6d:bb:4f:4e:08:2a:07:e6:5a:bb:66:24:
1d:96:b1:57:8f:16:17:27:41:76:53:49:ea:42:3b:d9:ad:5d:
2d:f4:bc:62:b0:cf:7f:be:3e:44:fc:63:d3:d3:bd:6c:d6:65:
b3:30:ba:cd:ba:65:e6:33:54:a0:e3:4c:20:f9:b5:bb:1d:8e:
ef:6d:81:e9:b2:80:8f:47:69:c4:5b:24:58:dd:38:65:eb:c1:
72:80:36:08:16:e7:12:03:39:7a:e2:b9:fb:65:2f:23:eb:20:
45:61:be:db:5c:1f:12:ff:fc:d5:8e:4a:e0:a4:f8:f0:39:44:
93:e1:16:73:57:7c:91:d5:7a:39:21:09:85:a3:bc:35:14:fa:
96:15:d4:49:4b:32:d5:80:6a:29:22:1d:f9:0e:5e:8f:4e:ca:
bc:f1:32:3a:19:07:1e:3d:b2:05:68:33:20:24:8b:b3:d2:c4:
a2:09:e8:f5:d3:b9:3b:6f:af:96:b2:a0:1d:46:1b:c1:b1:24:
01:a5:01:2c:7f:5b:2d:b8:0c:ca:7a:7c:26:55:93:e6:c1:92:
42:08:2d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:56:21 2025 by rpki-client