Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft
File: qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft (raw, json)
Hash identifier: LbqBDIQZEm62q5egBKeeYC4rae1NnqsEEwHMFvILdAY=
Subject key identifier: 65:72:8C:86:B0:9D:D4:FA:2C:EE:89:86:4D:13:40:35:DC:FF:EF:21
Authority key identifier: A9:A0:73:B3:1D:88:8E:44:39:E2:72:E0:07:C9:53:2F:C3:05:C8:0D
Certificate issuer: /CN=a9a073b31d888e4439e272e007c9532fc305c80d
Certificate serial: 0196760D0A5E402A5FFD5087E631ED9B3725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaBzsx2IjkQ54nLgB8lTL8MFyA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft
Manifest number: 0BD1
Signing time: Sun 27 Apr 2025 07:01:28 +0000
Manifest this update: Sun 27 Apr 2025 07:01:28 +0000
Manifest next update: Mon 28 Apr 2025 07:01:28 +0000
Files and hashes: 1: E0nL2r6tA4Kip6utbHVTl2QsGcA.roa (hash: aen5+JQjIiPGZfLBCbBcX/i0rEODfLs98wUB0AIvd0A=)
2: qaBzsx2IjkQ54nLgB8lTL8MFyA0.crl (hash: N/i0DSVafxSuvqsZC4NcX3iEMjGoHobRPYK+wv/wKo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaBzsx2IjkQ54nLgB8lTL8MFyA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0d:0a:5e:40:2a:5f:fd:50:87:e6:31:ed:9b:37:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a073b31d888e4439e272e007c9532fc305c80d
Validity
Not Before: Apr 27 07:01:28 2025 GMT
Not After : Apr 28 07:01:28 2025 GMT
Subject: CN=65728c86b09dd4fa2cee89864d134035dcffef21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2b:40:7b:4a:bb:cc:70:8f:1b:0b:ed:bf:dd:
8d:e8:ac:a0:58:2c:df:d4:9f:b7:c2:6f:4f:1c:e9:
6d:48:e2:88:24:9f:a4:61:e1:b8:4f:37:c3:f4:dd:
e1:71:d5:0e:bc:92:a0:a8:31:e9:73:cb:44:54:8d:
c1:f1:0b:6a:58:c2:56:6d:6b:cb:21:ef:28:09:4b:
92:3e:8f:f0:bf:65:f1:70:0e:f9:a4:41:f3:40:cf:
68:c2:be:81:c1:f7:af:e5:ed:23:60:ba:3f:50:dc:
5b:cd:f3:4a:4e:18:3e:5e:91:b4:dd:ca:7e:0c:19:
9f:50:75:0e:23:3e:e3:8d:99:4e:f6:bd:b1:3d:b2:
61:1f:e5:37:83:6e:ff:04:f6:83:74:0a:4f:0b:4d:
77:3d:23:b5:1a:03:db:ae:f0:02:77:30:89:1f:1d:
9d:35:76:38:7c:fe:1d:33:19:e0:9c:20:11:6a:b3:
a7:1a:b2:59:79:59:96:6a:86:de:91:48:25:a0:f3:
af:9f:2c:fc:82:db:6a:67:4f:1a:ed:6e:a5:2a:4e:
68:94:7b:7a:96:b8:bb:15:77:fa:a4:c9:4c:2a:55:
84:a7:b6:13:ca:ac:c1:05:ad:c3:c0:7f:ab:94:13:
5a:04:8b:40:88:06:95:b8:b6:46:85:b1:90:23:d7:
77:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:72:8C:86:B0:9D:D4:FA:2C:EE:89:86:4D:13:40:35:DC:FF:EF:21
X509v3 Authority Key Identifier:
keyid:A9:A0:73:B3:1D:88:8E:44:39:E2:72:E0:07:C9:53:2F:C3:05:C8:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaBzsx2IjkQ54nLgB8lTL8MFyA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ee:ff:6b:4a:36:64:a1:ac:15:76:70:8d:8c:5a:20:f5:38:
ad:0a:86:8c:5e:e8:4a:84:0f:b3:73:06:28:a3:22:f1:99:52:
07:68:ff:be:16:69:6f:bf:ac:7e:da:5f:46:53:70:f7:b9:6f:
39:fa:6e:fa:43:f2:85:38:18:55:5b:92:d5:bd:a1:6f:9d:f9:
e7:29:bf:b4:35:97:d8:e0:8c:bd:bb:4c:c6:11:23:98:17:88:
b4:85:89:49:da:71:cd:46:5f:3c:17:b0:88:d3:31:dc:be:c8:
65:ff:81:54:83:41:1f:8c:78:b0:96:f3:8a:9a:69:19:36:a8:
68:73:3f:0b:f9:6d:ad:c4:ba:85:19:e7:39:d2:56:86:ad:7c:
11:c0:16:67:26:4e:bf:d0:ae:d5:d7:6d:3b:73:a7:45:06:b2:
0d:1f:01:bc:38:30:82:70:fd:c8:56:14:29:1c:8f:87:f5:2c:
41:0c:35:2f:4b:b0:06:de:9b:83:e6:a3:19:84:49:3d:b8:c0:
43:fb:ef:16:54:30:bc:79:42:d0:b8:51:44:f4:0c:0e:54:9b:
bc:74:a6:7b:36:96:3a:20:c1:bc:d5:df:91:10:ba:2f:21:b9:
e7:99:72:4e:ec:e8:b7:7c:52:b4:1a:c4:84:b2:7f:fc:c1:c7:
ad:e4:c7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:11:04 2025 by rpki-client