Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
File: qawfhZW61VgkDXQGgAChz3CLoaU.mft (raw, json)
Hash identifier: dFouKuD/QiOoggNXJCKNjKGzwxvJ53hxCufJaFOq5A8=
Subject key identifier: DC:81:B0:EB:F9:BC:90:77:BB:A7:85:EE:BE:77:B1:6A:29:60:AC:8F
Authority key identifier: A9:AC:1F:85:95:BA:D5:58:24:0D:74:06:80:00:A1:CF:70:8B:A1:A5
Certificate issuer: /CN=a9ac1f8595bad558240d74068000a1cf708ba1a5
Certificate serial: 01968210E482738EBF2F22750AF96B2984B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
Manifest number: 1510
Signing time: Tue 29 Apr 2025 15:01:07 +0000
Manifest this update: Tue 29 Apr 2025 15:01:07 +0000
Manifest next update: Wed 30 Apr 2025 15:01:07 +0000
Files and hashes: 1: BW_w5tNvIWO1-tVFP8df1MdaWTA.roa (hash: rExjPSaaFahRIKD/ZiQ7dk1JIKInqDzh+Jo+aqkHWCA=)
2: SHt83tHCOqEqNWz8C0rDKgPLSVk.roa (hash: 5uUYud3teEzP7h4GRY2ZjMn6NzU1+BqyXIl56/9+cO0=)
3: qawfhZW61VgkDXQGgAChz3CLoaU.crl (hash: o257Ic1pwjAKj4X5oeZU/HSIWadreRvY0u0ocnTJ4Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:e4:82:73:8e:bf:2f:22:75:0a:f9:6b:29:84:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ac1f8595bad558240d74068000a1cf708ba1a5
Validity
Not Before: Apr 29 15:01:07 2025 GMT
Not After : Apr 30 15:01:07 2025 GMT
Subject: CN=dc81b0ebf9bc9077bba785eebe77b16a2960ac8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ab:1d:d6:27:5f:ae:e4:af:59:30:50:d1:23:
5c:66:2f:66:99:d7:c1:ed:63:a0:a2:d0:c8:2c:8b:
a8:63:68:30:e6:58:37:25:00:be:ba:c1:7f:13:b4:
8d:92:7d:e6:d5:a9:4d:f4:c8:80:d0:9d:96:df:43:
4b:1a:0c:aa:12:5b:48:37:75:a4:20:c0:b2:4d:ac:
a2:d6:18:42:67:3c:a3:7e:7c:2e:17:a6:d0:68:fd:
37:e9:56:6b:7f:6f:a1:84:c3:7f:6f:35:75:67:5a:
da:3f:63:a7:d0:40:37:c3:79:5e:e8:19:e6:f0:d0:
56:43:5b:00:0f:dd:dc:79:f9:23:05:4e:87:c5:26:
83:1d:58:49:4f:46:f6:64:3c:51:4d:2e:c7:d9:dd:
76:45:9b:56:26:4e:b1:b9:62:50:7d:bc:ae:7a:b1:
79:00:29:1f:88:60:c2:68:b2:17:64:48:9d:d9:10:
de:a8:91:91:22:db:0a:95:64:36:b8:5e:89:a8:6b:
bc:2c:f5:61:b1:8c:61:75:29:3e:8f:bb:f4:a5:5c:
f6:04:51:23:4d:1f:2d:19:f5:4f:67:f7:37:38:da:
a3:07:5f:d9:bb:f3:d5:dc:e2:bc:58:40:de:aa:ec:
d2:28:d7:f2:bf:89:51:f4:b4:f7:65:26:6d:e0:04:
11:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:81:B0:EB:F9:BC:90:77:BB:A7:85:EE:BE:77:B1:6A:29:60:AC:8F
X509v3 Authority Key Identifier:
keyid:A9:AC:1F:85:95:BA:D5:58:24:0D:74:06:80:00:A1:CF:70:8B:A1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:10:de:c9:54:bb:9e:e8:e9:34:bf:d0:a6:d1:ac:14:a1:3b:
9d:a3:4e:71:98:fd:ae:ea:2b:1d:ea:e2:fe:07:42:d5:83:d8:
54:25:27:bc:e2:fb:a9:a3:31:de:eb:19:53:47:8b:57:03:0a:
4d:58:a7:63:5c:e7:2a:c1:9e:69:74:d2:2c:32:7a:d5:21:5e:
57:8c:b3:40:5f:9b:0b:47:fd:0e:04:aa:7a:34:3d:d1:69:cc:
f1:92:26:c5:44:9e:f1:03:8d:6e:3d:8f:33:6a:91:40:f7:ca:
75:c7:80:6f:e7:1c:22:f1:e3:2b:2f:d0:e6:64:1f:11:60:8a:
54:43:33:74:0a:26:0d:c8:c6:5d:7c:f6:70:a8:ce:f0:b5:8c:
17:61:17:6b:07:23:a4:cc:01:05:18:a3:9a:d0:f5:e8:21:4e:
7d:9e:6d:08:3b:3c:54:38:5d:ee:5b:ec:d9:0b:32:d3:c4:5f:
36:87:31:df:36:12:8a:86:e9:42:b1:85:a1:95:21:a6:2f:fd:
4b:35:02:f8:65:d0:c2:e4:67:a7:4e:c6:09:d2:d4:8c:68:22:
e9:55:be:6b:5b:e6:24:64:87:d0:7b:7e:25:fb:c6:3e:e5:d3:
9c:6e:5b:6f:5c:ca:dc:96:b7:89:6f:6f:55:05:ff:20:f1:9d:
cb:ff:51:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:42:47 2025 by rpki-client