Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
File: qCoCPr2xLpceeocp2Cankkz36DI.mft (raw, json)
Hash identifier: bzyktILywrDaz8Mp4PAAMOP0HZFTm9tih8rMiYXQcTU=
Subject key identifier: 0A:E9:5B:1E:5D:FB:F8:CA:15:2B:9F:6A:BC:89:7E:E1:1E:5E:1F:2B
Authority key identifier: A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32
Certificate issuer: /CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
Certificate serial: 019676B11807CCCEFEED55603D16C58337F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
Manifest number: 0A2C
Signing time: Sun 27 Apr 2025 10:00:39 +0000
Manifest this update: Sun 27 Apr 2025 10:00:39 +0000
Manifest next update: Mon 28 Apr 2025 10:00:39 +0000
Files and hashes: 1: 0mOwovSQfaOTpOjMePlA1vJyx3o.roa (hash: UKn/uBWWad1ow9KJDqJ57gBdSqtGNkm8IvDuZQii3FA=)
2: Rb-9REf4Ku4-CgLC6REjl5LjwmQ.roa (hash: cTHupzsbPAMMKa56v6BN9R2pDgzgt3AMXO4LKaMqhQw=)
3: qCoCPr2xLpceeocp2Cankkz36DI.crl (hash: bhux/eZA1RdfUSyc1P+O3otTgRJDjMtSOm5AanDey2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b1:18:07:cc:ce:fe:ed:55:60:3d:16:c5:83:37:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
Validity
Not Before: Apr 27 10:00:39 2025 GMT
Not After : Apr 28 10:00:39 2025 GMT
Subject: CN=0ae95b1e5dfbf8ca152b9f6abc897ee11e5e1f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d2:65:66:85:ab:bb:41:f0:40:3e:42:51:9f:
7a:cd:d7:84:cc:d9:52:4a:d5:27:e2:d3:67:5b:de:
8b:fd:0a:76:ae:e8:cd:8a:da:f5:58:18:9f:8d:b4:
6c:5b:7c:d9:ae:3b:ba:66:05:5d:d7:c1:70:17:40:
ac:f8:8a:53:1a:c7:97:e6:08:be:33:5f:48:ca:92:
2b:89:db:eb:0d:7e:4e:5e:ff:09:bc:65:99:9e:8e:
c3:31:bb:0a:ea:16:06:03:e6:b4:85:1d:98:1d:ed:
90:d6:2a:99:0e:ee:3b:24:59:b8:21:82:18:25:c1:
78:af:a2:9b:4f:ab:e8:81:84:35:bc:8a:87:ef:71:
61:ca:a7:c2:63:bc:d8:2b:e9:4e:23:d8:7b:69:b6:
8d:d1:ee:74:e0:bd:b9:91:98:7f:40:54:dc:72:4d:
7a:57:55:96:ca:b6:48:ce:b8:92:fa:50:82:dd:2b:
8a:09:ad:cd:90:bd:ac:7f:34:dc:af:f8:a9:fb:00:
2c:42:c7:79:8e:77:3e:65:2d:5c:41:da:22:c0:e6:
96:c4:4d:56:de:8c:96:c8:94:14:74:91:6b:a0:94:
9a:36:b1:77:71:56:26:01:7a:9d:1b:f9:90:4d:e6:
6c:fa:e4:ca:a4:e3:5a:f4:95:8e:d7:6d:48:1e:49:
29:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E9:5B:1E:5D:FB:F8:CA:15:2B:9F:6A:BC:89:7E:E1:1E:5E:1F:2B
X509v3 Authority Key Identifier:
keyid:A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f5:3b:27:c0:d1:77:f1:f8:34:1f:ff:7a:b3:04:d0:28:71:
9a:96:28:fc:96:c5:a5:8a:bb:09:ad:88:2c:90:37:66:42:38:
7d:10:50:c4:4a:c3:3c:02:21:6a:8e:92:09:d7:c0:56:e4:92:
e6:ef:d6:56:f2:08:7b:d8:e1:c2:c7:c0:e5:00:13:91:3b:22:
5d:b7:3f:e7:b2:b6:f2:12:ef:80:67:b2:da:51:ba:09:0c:ed:
4e:bf:bf:af:72:f8:3f:9b:0b:05:03:27:09:55:82:dc:d6:58:
a7:91:69:cd:0c:77:50:ce:52:0d:63:04:b4:f8:74:b0:61:db:
4e:56:ed:3c:ef:c2:13:ab:85:9c:8d:c5:a5:09:4e:be:2b:2c:
0e:09:cb:b3:a7:6f:f3:f0:8a:67:a8:ec:8d:8b:b9:0f:de:44:
f5:99:80:1e:31:9d:be:e7:60:bf:8e:77:6c:57:bf:6a:ca:4a:
87:19:77:a9:d6:3e:1f:5b:25:3d:66:29:00:3b:e5:a8:38:80:
8b:55:28:18:1c:a8:fc:83:34:35:27:2d:14:0a:74:1e:55:55:
1e:f4:cf:0d:8a:a6:d0:fc:12:53:61:10:17:a5:cf:04:29:d1:
03:f3:fb:77:c2:10:27:5f:76:05:09:c8:aa:0a:11:43:7d:ba:
22:56:f7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:39:19 2025 by rpki-client