Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
File: QRbw6a_zmosZbEg-CF3nnyRtn90.mft (raw, json)
Hash identifier: xuAGJx9gbuWz1HsWcfWIkehc6prsKSnpSYfouT+yfSU=
Subject key identifier: F5:38:42:F6:EE:99:11:4E:C5:A0:E5:C9:02:08:DB:3E:EA:7F:C4:B7
Authority key identifier: 41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
Certificate issuer: /CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Certificate serial: 0196760CF4CF73626536AA28770437DC92F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
Manifest number: 0AA4
Signing time: Sun 27 Apr 2025 07:01:22 +0000
Manifest this update: Sun 27 Apr 2025 07:01:22 +0000
Manifest next update: Mon 28 Apr 2025 07:01:22 +0000
Files and hashes: 1: QRbw6a_zmosZbEg-CF3nnyRtn90.crl (hash: t9zN4C6Rcf+lkJAKkoJOSRLHHaphfrmtBE7RiVfcL6g=)
2: fB_8Kj8FVwA_pRirxgUk8V0Sdls.roa (hash: goBjhg/MD5RTfp4bLaJFULnPwSaD80DrHVFmGJjDPXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:f4:cf:73:62:65:36:aa:28:77:04:37:dc:92:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Validity
Not Before: Apr 27 07:01:22 2025 GMT
Not After : Apr 28 07:01:22 2025 GMT
Subject: CN=f53842f6ee99114ec5a0e5c90208db3eea7fc4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:ff:27:00:35:f2:cc:0f:f4:4a:25:c4:3f:
f5:64:34:c7:f6:13:6f:38:0e:95:39:85:c4:af:b8:
b8:ec:af:90:c8:c7:4e:48:70:06:8f:95:8d:88:14:
04:51:a8:ce:e9:e4:03:42:a5:d3:40:95:fa:67:37:
52:0d:45:c5:d0:2c:d2:cf:68:0e:62:2b:58:02:ff:
22:d2:cd:26:1b:c4:3f:71:5b:aa:b8:ca:f1:c6:05:
c9:b7:4a:67:f9:e4:c7:73:68:14:0b:3b:1c:9c:ae:
2a:53:ef:f0:22:88:f5:29:d3:57:9e:52:fb:ec:dd:
3b:0f:9a:42:49:14:56:6e:db:c8:25:9e:c0:21:a8:
38:fa:64:0e:f5:97:4e:6a:c4:1f:1b:0e:51:40:88:
1a:cc:3b:53:68:11:73:6c:c2:91:f9:31:7d:a3:5e:
18:67:30:99:c7:3f:e9:25:da:e1:7e:0e:b1:a1:dd:
18:ad:9c:40:60:b1:8b:43:ad:f9:fb:82:90:3c:23:
2c:f8:86:40:b0:a5:96:65:af:70:dd:10:b7:a7:2f:
f2:0d:d7:ef:0a:62:26:f5:83:4c:24:7a:4b:fb:52:
cb:c4:41:0b:af:0d:28:4f:43:18:9a:87:fd:0b:1c:
fa:b5:e5:34:b8:f8:40:14:45:89:16:58:95:f7:82:
87:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:38:42:F6:EE:99:11:4E:C5:A0:E5:C9:02:08:DB:3E:EA:7F:C4:B7
X509v3 Authority Key Identifier:
keyid:41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:95:7c:59:05:d2:03:54:be:9f:e6:f3:68:95:66:62:3d:23:
42:9b:d8:16:ca:f9:7f:3d:84:e5:d8:fa:20:62:4d:87:ae:63:
fd:da:09:cf:63:48:b2:24:a1:09:bc:9b:3f:de:1a:e0:0e:c9:
e5:ad:1f:0e:aa:4c:7b:93:34:12:29:e9:7a:38:b9:51:87:2f:
80:cd:12:39:6d:8f:5c:5f:54:5f:4e:3a:35:cc:72:b2:49:c7:
fa:29:76:3a:39:c6:2a:89:46:97:f4:3f:4f:c6:2f:30:04:b3:
18:41:fb:4b:f7:c3:ee:e1:4f:d0:9c:95:99:2a:80:da:45:f1:
ec:26:f4:05:be:9f:a7:f7:c4:bd:49:d3:2c:1e:d8:19:ec:ed:
d3:36:54:3e:d7:88:8e:e8:b4:60:35:2d:12:61:40:06:7f:92:
43:b7:06:fc:cd:82:04:c5:1d:db:21:14:e3:27:d3:43:47:90:
06:04:a9:e9:4c:37:80:df:85:e0:74:0a:d9:a9:e3:af:4b:da:
ee:1c:ba:38:fe:81:91:ff:b9:53:92:31:4f:4f:5d:f2:64:8e:
0c:3a:e8:7d:56:f4:2e:6b:87:f2:a1:c0:b1:ba:62:d5:3c:1c:
79:b6:ba:b3:7e:44:4f:4f:24:eb:97:75:e4:e8:b2:8d:08:a4:
6f:99:29:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:13:58 2025 by rpki-client