Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
File: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft (raw, json)
Hash identifier: y5SCYURibmW2Lc7NG9FK+sE0l7tlVTtqwPim0EpkMio=
Subject key identifier: 76:41:22:3F:C0:E9:DD:37:2E:FF:EA:23:40:67:40:EA:ED:BE:96:C4
Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Certificate issuer: /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Certificate serial: 019673E6BAD2C1115CBEF40C53DE1F37F35E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
Manifest number: 0598
Signing time: Sat 26 Apr 2025 21:00:22 +0000
Manifest this update: Sat 26 Apr 2025 21:00:22 +0000
Manifest next update: Sun 27 Apr 2025 21:00:22 +0000
Files and hashes: 1: 1-llihL5lyA2GQR2PsGqhLCANktk.roa (hash: mzRJaHFcotS/RWlzVy4qgPbMvteqzba1lDARW973GdY=)
2: 5O0UiD_W3tjgR9ssx2_M3oXSAqs.roa (hash: gAGUmwLvei624zjz2Ru7prJo+tns2dqLybNdH1gm80g=)
3: fjZ2O6X1drD4u2kQUpCSZOgPEgQ.roa (hash: C+uPnjidRp+aUpGFTJLFRy477yZGyTAEpW7NYrD38KM=)
4: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl (hash: PErJubsDz+1peC90PkX39Ti0YR2i/tmtd3JsGVM+QxE=)
5: zkvZvBR_ZIBD-QsAPtiUmTfPoYw.roa (hash: QZPnljABa+B7L3bRvs6ZKt265sGoFXO7IkclbyLbbsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e6:ba:d2:c1:11:5c:be:f4:0c:53:de:1f:37:f3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Validity
Not Before: Apr 26 21:00:22 2025 GMT
Not After : Apr 27 21:00:22 2025 GMT
Subject: CN=7641223fc0e9dd372effea23406740eaedbe96c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:01:51:88:af:8d:ef:6e:81:af:ae:92:68:e4:
ec:ae:a8:51:e1:cd:e9:91:39:b2:df:ce:06:38:e9:
0f:5c:77:2f:7d:97:e9:b9:7c:21:f3:3a:5b:b1:f8:
50:ea:0e:cd:b8:75:d2:8d:48:37:ec:15:a9:c6:34:
d0:31:f8:e0:55:8d:22:e2:10:81:fe:de:b2:2a:3e:
e7:c2:02:9c:74:a4:92:4b:17:cc:ba:2c:dd:89:90:
61:f1:fa:da:27:25:5c:3e:37:06:d1:f9:fa:1e:73:
78:0e:6d:b6:9c:e3:70:b6:13:3d:e1:ba:b5:b6:b3:
ea:80:10:33:ff:87:ea:3d:07:20:0e:e5:7a:80:2b:
71:8b:7c:e2:1a:ba:76:5f:21:20:65:fb:84:9e:40:
88:72:a9:fa:51:8b:8a:c6:31:3f:0e:8d:62:65:3a:
2b:d8:5b:da:a0:80:f4:32:ab:d9:fc:87:27:08:f2:
f0:6e:de:00:32:bc:fc:7f:2d:28:9b:9d:47:26:fc:
07:63:fd:df:a5:b8:16:40:c3:a8:81:fa:dc:4e:49:
1b:8d:56:c3:ec:ba:95:5b:42:3c:40:c6:9b:ff:4e:
db:6b:43:f0:0e:13:c9:4b:f3:01:68:e7:91:c8:0e:
8e:0c:a0:fb:ce:06:20:40:de:e5:bb:26:53:56:13:
09:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:41:22:3F:C0:E9:DD:37:2E:FF:EA:23:40:67:40:EA:ED:BE:96:C4
X509v3 Authority Key Identifier:
keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:30:c4:dc:dd:10:70:6d:bc:67:d4:50:66:25:6f:86:33:dc:
c8:0d:ce:f3:1a:f1:2e:dc:4f:26:e1:8b:d5:3b:27:f1:13:2c:
d8:70:23:56:2a:ac:b2:3e:76:8a:8e:a5:a8:d6:06:5a:9a:0c:
81:4f:12:1e:6e:dd:a4:07:d5:7c:01:1a:bc:96:a8:19:3f:51:
a4:20:74:ab:a9:35:d1:0c:7b:76:24:23:eb:d5:a4:cd:9e:57:
c0:50:26:ef:cb:12:ac:86:ae:af:b2:9c:45:bf:51:7c:a8:a4:
34:65:ce:81:12:26:dd:51:8e:ff:4b:de:17:ea:3b:55:bf:6b:
61:e4:4b:b2:3f:74:5b:8d:5d:6f:3b:c3:ec:1c:76:49:d7:63:
bb:04:c3:fc:71:f4:ae:35:99:06:af:04:09:2c:40:28:80:4e:
15:10:87:26:26:74:b2:e2:e6:13:11:9b:21:69:40:55:20:21:
e7:de:06:c2:44:31:63:7b:6a:e7:9d:fd:47:a5:86:f4:e3:67:
a7:af:18:49:b3:cd:4d:54:99:86:01:5f:3b:b5:f8:a6:65:23:
35:3a:68:f2:c8:04:1e:de:7c:c3:c3:9f:1e:38:f0:43:44:d3:
8a:8d:db:3f:cf:cc:e6:67:7c:83:d2:32:e6:fd:66:26:da:94:
7d:94:06:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:03:22 2025 by rpki-client