Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
File: QET9GYC6AXiKNTom_viVTtfBH5Y.mft (raw, json)
Hash identifier: mymZJ+hS0PJCMlzcERBVQ+CaUhs698lt8y3mfH+qlvs=
Subject key identifier: 29:B8:07:E2:D9:EB:E5:1F:30:88:72:42:B3:3F:96:CD:2D:42:6B:9A
Authority key identifier: 40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96
Certificate issuer: /CN=4044fd1980ba01788a353a26fef8954ed7c11f96
Certificate serial: 01967567B22F2D1CE4674327630D09048EBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
Manifest number: 0BF7
Signing time: Sun 27 Apr 2025 04:00:52 +0000
Manifest this update: Sun 27 Apr 2025 04:00:52 +0000
Manifest next update: Mon 28 Apr 2025 04:00:52 +0000
Files and hashes: 1: QET9GYC6AXiKNTom_viVTtfBH5Y.crl (hash: /cDLrcESp7o8E7F1vPtF6MdzPwYf1lMiM7XqfYVPv88=)
2: VF4oENC3ROv0PkRYyOKz5znS7Lw.roa (hash: VANb10DSIL8eOlHbsJ6So28/QiKbnVdpu6HtPHf6lTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:b2:2f:2d:1c:e4:67:43:27:63:0d:09:04:8e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fd1980ba01788a353a26fef8954ed7c11f96
Validity
Not Before: Apr 27 04:00:52 2025 GMT
Not After : Apr 28 04:00:52 2025 GMT
Subject: CN=29b807e2d9ebe51f30887242b33f96cd2d426b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4e:8a:2b:df:98:b3:65:33:c9:07:17:2e:69:
de:26:c9:d9:61:8a:eb:19:bd:9c:9a:4e:08:08:e3:
fa:d3:44:82:c0:0c:59:77:c6:de:a5:3a:c8:f1:4c:
49:8f:2c:58:5e:e3:f0:fc:64:fb:cd:96:f0:c3:39:
01:eb:18:0f:76:2c:a9:64:6d:b6:ad:89:5a:88:e3:
38:b0:1b:d5:70:ad:32:45:72:75:1d:32:64:40:ca:
8b:7d:4d:ab:8b:55:f3:94:19:f5:3f:f8:5d:95:ea:
65:ea:8e:ab:5c:d8:fb:1e:54:3b:9a:17:dc:c8:e3:
d8:ea:3b:e1:70:d6:ef:6f:f3:7f:df:7a:09:20:cf:
75:b9:6d:6d:b6:38:78:ea:0d:de:66:64:68:76:f3:
a9:db:82:b7:ba:63:1d:9a:cf:b4:5c:36:15:fc:31:
d9:31:68:db:c6:28:e9:70:f8:fb:97:f5:cd:d3:c6:
d1:d7:d5:fc:3d:1e:03:49:d7:69:6b:35:68:75:25:
07:c4:1c:aa:8a:1b:6e:eb:7d:bd:d4:1e:f7:86:eb:
ce:00:5f:16:e2:fc:c7:32:a5:2e:b5:91:8b:69:d8:
d5:8c:72:a3:7d:32:e0:6b:a2:3f:f3:d8:ed:64:e7:
96:e0:a2:db:1e:91:44:a1:54:d9:bc:ed:5a:cb:9f:
04:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B8:07:E2:D9:EB:E5:1F:30:88:72:42:B3:3F:96:CD:2D:42:6B:9A
X509v3 Authority Key Identifier:
keyid:40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:43:01:df:ef:7f:4a:d1:1a:29:cf:0d:3f:65:7e:e7:79:8e:
e0:b4:c8:4a:fe:21:ab:3c:85:d8:8d:54:ed:5c:f2:96:0c:5d:
fd:db:b3:48:6b:b7:96:d7:27:17:19:6a:b7:29:54:28:ce:a8:
56:bb:f1:a0:51:11:f8:71:b8:db:4e:9e:dc:c7:a1:bd:07:26:
de:cc:23:ac:ca:be:1a:fd:85:65:66:8b:d4:c3:ac:00:2f:56:
28:15:83:20:1d:e5:a6:24:a5:07:57:12:5b:98:76:59:80:59:
aa:f4:10:e0:19:1d:51:43:e7:da:97:62:c1:d5:a7:35:c7:dc:
aa:63:9e:f1:bf:9b:b4:1f:78:0c:c2:9f:1c:ec:64:e8:c9:12:
f0:66:1a:7f:1a:12:5f:ab:c3:2d:6f:b1:7e:45:b6:21:e1:7b:
4e:ea:67:b5:f8:ca:c9:0a:4a:c6:3a:a5:38:b9:41:42:2b:ab:
04:44:0e:15:47:20:69:db:a0:8f:ef:98:35:c3:69:1b:b5:49:
f6:a7:87:0c:44:b4:b4:ba:7a:d6:d2:a9:32:3b:0b:94:dc:c4:
a9:7b:87:6b:38:26:0c:67:95:94:1f:ac:05:9e:a2:11:8d:87:
56:03:cd:5b:6c:92:e7:dd:1b:c8:8c:5a:45:49:39:3b:48:15:
12:15:a4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:45:58 2025 by rpki-client