Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
File: QqYv_JnylBAtzOI13Bo8E9q81po.mft (raw, json)
Hash identifier: pjORR1NKrS1HALZTXRbEGWK4An/0M2A0xepiBH3EOhI=
Subject key identifier: 34:9A:7B:55:99:98:53:F7:66:8A:C6:B9:C4:EB:F0:CF:2E:A0:92:62
Authority key identifier: 42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A
Certificate issuer: /CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
Certificate serial: 01967ED8ABBF052AACF002230EBC72D31F03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 00:00:51 +0000
Manifest this update: Tue 29 Apr 2025 00:00:51 +0000
Manifest next update: Wed 30 Apr 2025 00:00:51 +0000
Files and hashes: 1: QqYv_JnylBAtzOI13Bo8E9q81po.crl (hash: fsEOMRENcXeRg3UckszEZuK8p+MhYAOnNfszMm4nIAQ=)
2: WTARnFcaaxywjD8542Gln8y_dnw.roa (hash: Ftlz5tAZ1Wy4DgBSL6cjF0uXQi2BfjzAEtpVPnOo5XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:ab:bf:05:2a:ac:f0:02:23:0e:bc:72:d3:1f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
Validity
Not Before: Apr 29 00:00:51 2025 GMT
Not After : Apr 30 00:00:51 2025 GMT
Subject: CN=349a7b55999853f7668ac6b9c4ebf0cf2ea09262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ba:6d:70:e8:1d:e4:29:5d:e7:2c:1b:28:73:
04:18:76:8a:7b:65:3b:1c:c1:75:2e:8b:61:d6:9a:
49:a6:88:a5:c0:02:da:93:79:c5:1b:81:a0:a9:cc:
13:0a:36:19:25:d7:38:67:3f:4c:1e:ce:2a:d8:cf:
6c:c0:d7:38:0a:c5:cb:8f:aa:7f:3c:07:3a:1f:87:
54:c5:ba:4a:5c:b5:41:0e:89:d8:8e:0e:ce:bd:8a:
da:06:8d:00:62:91:d8:a3:cc:71:0e:f9:d5:a6:43:
f0:99:f7:0e:22:d6:67:33:05:61:a9:03:65:c7:1a:
d7:cc:86:f3:11:a2:9a:92:6a:5c:12:d9:46:f9:7c:
15:9b:8a:0d:73:71:a4:ff:93:a1:60:be:76:70:c2:
02:8e:6d:08:20:84:d3:f9:0e:bf:80:0f:a7:0c:26:
42:a2:40:4c:d8:83:19:dc:69:00:29:c1:c3:79:98:
8d:e9:10:c3:2b:37:8b:15:89:1c:0f:e6:23:8e:b3:
26:0b:b3:fb:4e:78:94:e7:15:e8:13:45:4a:2c:db:
bc:0f:86:2e:98:cf:82:58:05:63:33:d4:a5:65:07:
ec:bd:dd:c7:e4:b3:e7:1a:bd:f0:82:d6:e5:59:ad:
c9:c0:5c:53:01:1a:9f:7a:48:42:ed:a0:06:52:c1:
0f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9A:7B:55:99:98:53:F7:66:8A:C6:B9:C4:EB:F0:CF:2E:A0:92:62
X509v3 Authority Key Identifier:
keyid:42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d9:d9:a4:7d:51:89:33:00:8f:46:24:e0:e3:05:6c:4c:55:
98:7e:f7:3f:26:b9:00:2f:73:46:c3:62:db:aa:4c:7e:ef:87:
af:5c:82:03:ae:10:1d:d6:35:0a:53:63:89:50:91:69:e6:d8:
4e:e5:e8:0d:18:70:d5:48:c7:17:97:22:7c:0f:a8:37:a6:2c:
23:84:d8:30:38:9f:bf:ff:bf:c0:f6:ae:c6:82:de:e8:06:90:
ec:02:78:50:3f:f7:c0:4f:31:c7:aa:d1:13:70:b1:78:80:49:
8f:07:91:46:a2:f4:bb:06:40:08:a6:82:3d:84:90:68:7e:49:
e4:a8:1e:4f:73:e5:89:97:20:c9:80:64:89:1c:b8:f7:57:81:
55:f1:50:e4:18:80:94:24:9c:63:85:45:c3:2e:2a:2a:e1:c5:
52:86:f9:fb:bf:43:34:dc:a2:e2:be:5d:cd:ac:91:08:14:35:
c4:51:64:38:70:95:07:50:af:49:2e:49:76:e9:df:bf:4e:9d:
75:c2:07:1e:05:06:73:74:c3:67:a1:5c:d0:38:ae:87:6c:13:
f7:43:af:53:40:e1:20:c3:03:62:1b:c0:99:ad:1f:f5:8f:9b:
04:63:8c:88:fb:6d:c2:59:78:11:1c:17:91:b7:ea:20:30:bc:
1b:c0:57:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:12:11 2025 by rpki-client