Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
File: qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft (raw, json)
Hash identifier: tBv3Tl9YXriXDNIqHkubrkS4lfzIuud27adaqZs4jBM=
Subject key identifier: D0:25:6B:22:3D:4F:BB:C5:09:46:81:06:A0:34:2A:5B:61:95:44:58
Authority key identifier: A9:86:A0:67:7B:91:C4:56:67:E4:5E:12:EE:07:F5:21:99:01:A8:7A
Certificate issuer: /CN=a986a0677b91c45667e45e12ee07f5219901a87a
Certificate serial: 019675D558DACD4B1B71129F9EFF8B290BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
Manifest number: 033D
Signing time: Sun 27 Apr 2025 06:00:38 +0000
Manifest this update: Sun 27 Apr 2025 06:00:38 +0000
Manifest next update: Mon 28 Apr 2025 06:00:38 +0000
Files and hashes: 1: R0bDzTZMsFHuXIVscoarjoJ_wTM.roa (hash: 9HD9aEc03IRoCnCCjg3LQXd12HLkqdNv34Xu2fVDTFY=)
2: qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl (hash: 4A+8ONBlzvo+PdUDiTJ2rjWC9dkxtVMZtkf7F5xUDvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:58:da:cd:4b:1b:71:12:9f:9e:ff:8b:29:0b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a986a0677b91c45667e45e12ee07f5219901a87a
Validity
Not Before: Apr 27 06:00:38 2025 GMT
Not After : Apr 28 06:00:38 2025 GMT
Subject: CN=d0256b223d4fbbc509468106a0342a5b61954458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:88:b1:45:c0:59:f1:b6:dc:76:10:67:5d:
39:aa:4f:6f:ea:d3:b8:ca:ec:b6:a5:f0:2d:58:af:
fc:8b:cd:ae:1c:de:e9:b0:7e:2e:31:c6:57:95:5d:
61:46:19:8b:2b:95:04:40:94:b1:a4:af:b2:9c:b2:
cc:76:2e:20:46:4c:c9:2e:eb:48:5b:55:00:93:ad:
a0:be:da:3a:42:90:7f:64:07:7c:51:33:4d:8a:3c:
b6:8b:9a:92:9c:50:7f:73:8d:69:cc:44:3f:4a:10:
ad:75:b6:a8:7a:54:6d:9e:d0:d3:b0:4c:a6:23:03:
8b:94:2a:bd:22:c6:4b:bd:1f:4a:ee:49:0d:ea:df:
79:35:25:36:27:c9:c6:a5:88:97:0b:94:cf:21:06:
21:9c:c4:85:68:16:e1:ab:5a:40:cc:d9:73:a1:95:
39:86:4e:e5:95:4a:d0:71:9f:39:ff:84:b8:a5:a0:
11:a2:9e:c1:47:7f:b8:78:b8:8a:53:ec:73:86:7f:
f2:73:a4:81:1e:30:27:94:8d:a9:ad:73:72:57:c9:
ce:36:da:d9:70:0a:4c:f2:1c:81:0b:aa:76:94:f9:
9b:25:ce:69:bb:67:cd:bf:14:85:b5:c4:a9:30:01:
19:19:16:0a:eb:1f:e3:6a:88:e4:ab:af:d8:e3:f1:
d2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:25:6B:22:3D:4F:BB:C5:09:46:81:06:A0:34:2A:5B:61:95:44:58
X509v3 Authority Key Identifier:
keyid:A9:86:A0:67:7B:91:C4:56:67:E4:5E:12:EE:07:F5:21:99:01:A8:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:8c:e4:ba:ef:38:b2:0c:fa:5d:71:39:c4:02:0d:28:6c:8c:
ab:9a:3f:67:59:0d:3a:5f:e9:7a:a8:b2:8b:f4:0c:06:32:35:
f8:43:b6:53:20:eb:97:53:3e:12:de:88:6d:27:c0:17:d5:ba:
70:34:af:b5:ae:79:bb:2e:b2:76:af:22:7b:5f:22:39:36:be:
26:eb:68:8b:a4:98:2a:55:cf:0d:f5:cb:b7:a2:65:3d:13:93:
f8:0b:84:7d:85:84:06:a1:64:aa:ac:30:58:0a:6e:89:40:6c:
2c:17:c8:42:94:99:9c:de:a4:45:a3:36:69:9b:db:30:f8:29:
3d:8d:fa:89:ec:ff:7e:16:cf:89:25:bd:51:c9:93:3f:ac:ff:
8e:ac:01:fc:d9:60:c0:41:98:2e:77:f4:67:f8:c5:a0:e7:cf:
66:f4:94:f1:5f:8a:5e:26:02:49:f9:cd:c4:57:5c:9f:4b:37:
a8:4b:9f:50:52:c1:8a:df:eb:90:07:09:a6:8b:bc:af:9f:ef:
ec:7e:46:b6:43:35:2e:db:97:d5:8f:0e:cc:41:58:dd:05:51:
a2:6d:5b:63:ec:b7:32:12:e1:fd:08:5a:12:4d:1d:52:eb:40:
eb:30:7b:8d:ec:4d:73:d2:98:41:12:c7:4e:a3:c5:06:f2:31:
17:cd:26:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:36:46 2025 by rpki-client