Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
File: qoj641tmtN4uQcpe4He17wtKtkk.mft (raw, json)
Hash identifier: RyLGjjr0KEssDS+upjgat6LvoxQaKfSI0F2O3Sahiko=
Subject key identifier: 43:06:C1:3D:F8:8C:F8:9C:50:3F:63:8A:FC:53:7F:03:89:0A:3F:44
Authority key identifier: AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
Certificate issuer: /CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Certificate serial: 01967DC5D4725EB32B304D3BCDC645EE2119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
Manifest number: 147A
Signing time: Mon 28 Apr 2025 19:00:39 +0000
Manifest this update: Mon 28 Apr 2025 19:00:39 +0000
Manifest next update: Tue 29 Apr 2025 19:00:39 +0000
Files and hashes: 1: oS0baXfZNGyY1D73J2ZM4dbyUEc.roa (hash: Etkc7DGAN6PIaAjm/aO1aFavjNa8wspYkBLe0PvWnjU=)
2: qoj641tmtN4uQcpe4He17wtKtkk.crl (hash: yypRGUdPalOwoexAjjVSjgIXdXmj+dQBfO6nCj09yfo=)
3: r-zsasbUjJEaU71e8kbXi99TukU.roa (hash: gv3XffgL881eMS9I6xI/He9cs/3EXg91NLNFK1oWx0g=)
4: zeGJY-nsOInvvd3T0IdWJNf1k28.roa (hash: p/aKgF7SzmiRfhNkcpLsPCyw0fGJ04jvtIbzFNx9GZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c5:d4:72:5e:b3:2b:30:4d:3b:cd:c6:45:ee:21:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Validity
Not Before: Apr 28 19:00:39 2025 GMT
Not After : Apr 29 19:00:39 2025 GMT
Subject: CN=4306c13df88cf89c503f638afc537f03890a3f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6d:ad:a8:9d:ac:0f:80:18:67:a1:55:fc:7b:
f7:22:6f:be:cf:a7:f6:37:5c:69:bd:97:ed:16:f9:
1f:cb:09:60:f3:f3:10:b2:22:c7:ef:93:bd:5c:6a:
78:2d:40:ce:34:1f:3f:95:be:27:8e:aa:91:70:d3:
18:f0:70:2b:d0:be:b5:63:89:49:81:f1:32:f7:e7:
65:ec:96:d1:7e:89:22:01:9b:74:22:75:8e:dd:38:
1d:51:2c:f8:e7:39:6f:cc:37:23:77:a2:74:3f:a2:
c7:e1:b2:06:8a:dc:74:8d:76:2b:0f:7a:9c:9b:58:
59:8f:08:39:84:d0:c6:e4:7e:db:d0:ae:40:86:59:
3c:fb:5c:64:ec:76:7d:b2:95:e2:c3:04:28:e2:37:
97:63:25:92:d4:23:24:ea:85:28:57:79:be:25:74:
b9:9c:db:d2:e8:48:03:2b:eb:47:e5:76:53:18:95:
2d:4c:84:bd:62:67:cc:95:2a:24:d5:d1:3a:b3:77:
74:fc:24:02:c3:87:17:d8:08:f6:ea:14:03:8c:0d:
52:e5:05:7a:b1:61:54:f6:d3:c3:6f:e9:21:f6:cb:
02:ec:2f:f0:69:3d:b6:ff:1b:3d:4e:77:4b:a2:ce:
b8:71:3f:f2:88:93:c0:6f:f5:7a:a5:58:64:6b:7c:
e1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:06:C1:3D:F8:8C:F8:9C:50:3F:63:8A:FC:53:7F:03:89:0A:3F:44
X509v3 Authority Key Identifier:
keyid:AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:4f:24:b0:ff:53:b4:de:05:a0:cb:6d:5a:a6:95:33:34:ca:
04:dc:75:a3:80:95:66:d5:d4:37:e5:85:08:9c:82:83:69:47:
d3:de:a5:5e:a8:06:bf:8e:0c:bb:2e:3d:2e:c7:5d:73:0a:de:
f2:5b:d2:f8:62:93:d8:59:54:77:d4:7f:5a:07:46:2c:0c:48:
c8:4e:d9:4e:28:8e:d7:96:82:ba:9d:dd:ea:48:db:c5:35:37:
d7:ef:83:bf:8f:52:4c:51:fd:92:8d:4d:f4:7b:d5:18:15:bc:
de:5c:05:dd:19:b2:88:93:cf:1f:ef:e6:01:37:d8:f4:68:83:
4e:f1:0f:7d:55:e7:32:0b:ce:f5:f2:65:86:e2:1e:85:93:d7:
96:4a:95:4d:56:e6:22:88:b9:7e:1c:0f:69:f2:84:48:70:3f:
16:1f:59:bc:81:6a:7a:ca:a0:09:e4:89:5d:a9:7e:68:80:cd:
ee:91:e8:59:5f:ca:9d:ac:7c:40:19:82:de:2c:14:84:09:18:
2c:5d:75:eb:cb:a2:58:40:90:7c:d2:34:d1:c7:db:28:5a:22:
2d:98:17:57:c3:70:e8:d1:64:2f:8f:35:5b:69:ae:40:83:55:
15:f3:30:7e:3c:fb:3a:66:f6:ab:01:3f:28:67:a0:eb:87:98:
af:61:6b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:07:22 2025 by rpki-client