Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.mft
File: QYHCLrezLZAdElcA4UDrYAncxto.mft (raw, json)
Hash identifier: UAwyfgE/eqF78dV8kCBEak4+j7QYXSQUCA2HQzqE/VQ=
Subject key identifier: 82:3A:09:EE:05:4A:16:E0:4F:29:FE:78:2A:82:49:DF:BB:23:F5:16
Authority key identifier: 41:81:C2:2E:B7:B3:2D:90:1D:12:57:00:E1:40:EB:60:09:DC:C6:DA
Certificate issuer: /CN=4181c22eb7b32d901d125700e140eb6009dcc6da
Certificate serial: 01967CB31AC0A222C5460D0A88CEECF2D922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QYHCLrezLZAdElcA4UDrYAncxto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.mft
Manifest number: 1517
Signing time: Mon 28 Apr 2025 14:00:34 +0000
Manifest this update: Mon 28 Apr 2025 14:00:34 +0000
Manifest next update: Tue 29 Apr 2025 14:00:34 +0000
Files and hashes: 1: HitPQyHhpEoVidVOwqr2ddK23LE.roa (hash: UNtTyCfc7GR1gxgfjG0Y/XLw7gBd/DnSW8H0cz2SvrM=)
2: QYHCLrezLZAdElcA4UDrYAncxto.crl (hash: bc5CcsAOsflq7z94y5WWeDEf6vz1hiUG5SDu8UseUfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.mft
rsync://rpki.ripe.net/repository/DEFAULT/QYHCLrezLZAdElcA4UDrYAncxto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:b3:1a:c0:a2:22:c5:46:0d:0a:88:ce:ec:f2:d9:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4181c22eb7b32d901d125700e140eb6009dcc6da
Validity
Not Before: Apr 28 14:00:34 2025 GMT
Not After : Apr 29 14:00:34 2025 GMT
Subject: CN=823a09ee054a16e04f29fe782a8249dfbb23f516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ef:19:3a:db:88:a1:8b:e8:85:62:5b:f2:c1:
7f:14:a9:8c:f2:a3:ff:29:83:82:da:15:09:3d:f2:
c5:c4:5a:3a:11:b4:0c:35:41:51:55:a9:95:4a:e7:
28:31:2d:bc:61:e9:4c:2e:89:6d:90:b3:4b:8e:7a:
2d:65:b1:50:69:c0:24:5d:24:25:36:36:ee:7c:a3:
a5:f4:12:33:6b:34:c8:9e:79:3d:eb:c8:ae:b8:f7:
5a:99:b5:55:a9:53:45:1f:05:19:13:48:4a:3b:4e:
73:ed:43:98:84:0f:38:39:6c:81:10:18:f1:de:82:
17:1d:ae:6f:37:d4:8b:a4:50:82:f5:cc:0e:7e:c8:
b6:82:4e:dd:b7:7e:07:ad:ea:f8:e6:f4:0a:4b:d1:
6f:45:8b:60:83:a1:8a:3d:00:21:e0:5d:fe:24:a5:
48:0a:21:d0:63:54:86:eb:1b:a1:c5:56:d2:b8:9f:
7f:77:9c:51:44:2d:f2:9d:0a:ae:34:7e:8c:32:c2:
db:19:1b:fc:94:64:e4:fa:9b:81:d9:d2:cd:64:b7:
44:b0:56:7e:db:8f:4e:d3:f0:f6:ea:cb:eb:05:c1:
d6:31:50:7e:26:53:ab:9f:f3:86:84:5b:12:dc:35:
1f:e0:32:6d:67:5f:00:2a:c8:ad:c5:fe:7b:37:ab:
cc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3A:09:EE:05:4A:16:E0:4F:29:FE:78:2A:82:49:DF:BB:23:F5:16
X509v3 Authority Key Identifier:
keyid:41:81:C2:2E:B7:B3:2D:90:1D:12:57:00:E1:40:EB:60:09:DC:C6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYHCLrezLZAdElcA4UDrYAncxto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:cf:a2:a4:b2:13:1a:78:a5:92:61:26:71:2f:9d:7a:3a:e0:
fa:72:a7:ff:92:0a:2f:37:9c:e5:f4:a1:e4:03:3b:e7:3d:4f:
69:1a:d6:a5:15:cf:c0:b4:b5:81:36:a8:31:13:22:df:c0:c4:
f3:78:dd:55:93:98:a2:00:bd:6f:84:bd:fb:04:c7:ef:f3:2a:
1a:b1:2b:96:46:3a:d1:d2:c3:63:4e:99:92:5c:ab:24:1f:55:
5a:6f:b4:1b:df:23:a3:8c:1e:8d:5a:81:28:16:43:eb:f3:c8:
a4:f5:be:f2:62:93:4c:d5:25:68:f1:ba:16:12:1f:81:66:8f:
f4:b8:3c:7d:cf:d6:38:bd:f1:af:a0:cd:fc:3f:2f:a2:53:b2:
c3:8f:2c:44:b4:62:57:c7:b9:ba:4c:da:61:77:33:61:71:52:
b2:38:89:ae:c4:46:dd:38:f6:1d:0a:b6:53:d1:5d:82:f5:7e:
16:49:6f:74:e0:56:11:6b:cf:dc:8a:68:21:74:8f:62:c2:b0:
2f:52:38:3d:4e:d7:77:ba:8e:03:42:3b:0c:3a:d4:b9:3b:8e:
ba:e4:0f:bb:02:88:b6:78:58:99:34:f7:98:b3:2b:02:d0:db:
08:72:86:01:70:bf:7c:5e:f6:eb:b8:17:c9:ec:e6:0d:e5:fa:
fd:57:db:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:39:22 2025 by rpki-client