Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
File: QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft (raw, json)
Hash identifier: /5j2s3Xt2TAHVXS0U32KXUw84eofTiSxFgocfJ8bwdw=
Subject key identifier: 36:8C:6A:5A:99:BE:B7:2E:8E:68:A1:61:3F:E2:35:9E:C2:DC:D4:42
Authority key identifier: 41:A5:9B:09:60:EA:65:D6:B9:23:93:EE:03:47:A1:A8:32:F9:B9:84
Certificate issuer: /CN=41a59b0960ea65d6b92393ee0347a1a832f9b984
Certificate serial: 019676B112877C956B029996596EB086EB38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
Manifest number: 06CE
Signing time: Sun 27 Apr 2025 10:00:37 +0000
Manifest this update: Sun 27 Apr 2025 10:00:37 +0000
Manifest next update: Mon 28 Apr 2025 10:00:37 +0000
Files and hashes: 1: 7pmvBHJbdwVqFyqKem89BSyuKvk.roa (hash: yz/z7MiR6pHVCBirN+J/dsbi3QYekD7/Z8ghjQadQLE=)
2: LA-cz5sVCzNk_tA4a42FeutMowQ.roa (hash: uiKIsaEo4/vDsaJKzBGvYmUH1yNN4/rpS3B9ab7S0rw=)
3: QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl (hash: 0VBz+k10Dnq7GEh7LE6an5KMGKs28TPHmFPgfF8Qd/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b1:12:87:7c:95:6b:02:99:96:59:6e:b0:86:eb:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41a59b0960ea65d6b92393ee0347a1a832f9b984
Validity
Not Before: Apr 27 10:00:37 2025 GMT
Not After : Apr 28 10:00:37 2025 GMT
Subject: CN=368c6a5a99beb72e8e68a1613fe2359ec2dcd442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cd:cb:e0:31:92:a2:b0:67:10:f4:0e:fb:af:
ac:cd:0e:5a:62:3d:07:53:a4:df:bd:0d:ea:37:25:
bf:a3:fa:a6:9b:42:65:7f:dd:cf:3e:92:0d:ea:69:
39:15:1a:d4:6d:74:a4:99:cb:35:9a:be:7d:8f:33:
d0:2e:20:5b:20:55:54:66:fc:36:f3:ff:77:f1:7f:
62:62:a5:db:96:ef:30:82:5b:6c:fd:33:d7:9b:c7:
69:cb:8b:2c:91:bf:f9:bf:6a:e0:a8:10:a9:e1:47:
1b:b9:22:c8:83:9b:71:7b:cf:d2:8c:16:6c:54:ef:
d1:f5:82:13:d6:80:ee:02:e9:45:61:b6:c0:a7:89:
e4:ca:84:f4:12:d4:f0:ba:31:53:4f:d4:a3:e3:ea:
5e:ce:08:b3:56:9d:af:3d:c8:7c:6f:64:4d:dc:1c:
89:97:1e:e0:96:88:83:65:5e:ef:ce:50:6c:95:ad:
03:2a:b4:bc:5e:15:1d:18:bb:3c:5a:7d:f4:b0:d9:
c2:3f:d3:95:f1:ea:fd:f8:4e:27:86:2c:e0:3a:4e:
73:af:df:fb:76:14:63:87:38:40:85:13:cc:17:05:
68:b7:d3:34:18:f4:ff:ea:ce:77:91:d6:e5:32:5a:
33:95:f6:c8:9f:fd:24:83:c5:83:43:7d:64:31:25:
b3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8C:6A:5A:99:BE:B7:2E:8E:68:A1:61:3F:E2:35:9E:C2:DC:D4:42
X509v3 Authority Key Identifier:
keyid:41:A5:9B:09:60:EA:65:D6:B9:23:93:EE:03:47:A1:A8:32:F9:B9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:45:c8:46:4d:f5:ac:78:da:d7:7e:c3:30:fb:c2:a7:5b:ec:
03:e2:3e:1b:2d:7d:af:05:5c:fb:42:9f:03:9a:91:6d:63:58:
2b:e4:6f:9e:5a:7b:80:8b:eb:c8:c4:d8:64:3d:37:16:1a:28:
b7:b8:76:46:06:01:f6:29:34:7d:1d:f0:c0:af:68:13:1f:49:
78:01:00:7c:03:26:55:f2:98:13:e0:ac:2b:b4:57:e2:14:b3:
40:77:b3:94:92:d8:99:e1:39:1c:ef:02:37:ff:86:cc:2a:89:
cc:7b:9f:15:c8:bd:cf:26:af:70:20:26:83:7f:06:eb:91:71:
a0:bb:80:76:c3:7a:5c:60:2b:d1:26:79:47:dc:f1:fa:2d:14:
83:cf:49:17:4b:fd:4b:df:23:00:a5:46:90:be:06:d5:35:e8:
e8:42:0c:3a:2c:07:c6:73:89:9e:5d:5e:de:09:56:bf:86:79:
f5:ad:67:75:cd:0b:6f:80:92:d6:e1:c0:16:d8:80:e0:80:b8:
4d:af:6a:1a:e8:e7:d2:96:cc:e7:ed:48:69:df:7c:7d:fd:5d:
c7:ab:a3:69:23:4f:ba:93:87:4f:28:68:ff:77:b8:c9:9b:a4:
a6:52:22:6f:6f:e9:98:94:cc:fc:ab:83:0e:22:9a:e1:ec:db:
26:9f:61:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:12:25 2025 by rpki-client