Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
File: qPAjGPLOly5yQIzMx9MgrzDNKw0.mft (raw, json)
Hash identifier: cT8O6OxJ9gddxAeT6SS5XPg1oFbet7do7PlDkO5BzNE=
Subject key identifier: 9D:3F:21:BE:2B:2D:86:F8:17:EF:60:0D:12:AC:DC:94:5C:9C:2A:23
Authority key identifier: A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D
Certificate issuer: /CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d
Certificate serial: 01967E6A8DA04000620E56ED69B1F0BC771F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
Manifest number: 1408
Signing time: Mon 28 Apr 2025 22:00:34 +0000
Manifest this update: Mon 28 Apr 2025 22:00:34 +0000
Manifest next update: Tue 29 Apr 2025 22:00:34 +0000
Files and hashes: 1: _RYA60WhNQpChcuS-ZhpeHNn3Ro.roa (hash: /o7/5SeEgngQyysQsPfhFgp/4dtDLAhE3JTXwNG/WOo=)
2: qPAjGPLOly5yQIzMx9MgrzDNKw0.crl (hash: ue2BmNwqloagIV4rWTVKGjz5r+IdGcHf35pS7Pl6nI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:6a:8d:a0:40:00:62:0e:56:ed:69:b1:f0:bc:77:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d
Validity
Not Before: Apr 28 22:00:34 2025 GMT
Not After : Apr 29 22:00:34 2025 GMT
Subject: CN=9d3f21be2b2d86f817ef600d12acdc945c9c2a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ff:47:c0:0a:96:8a:1b:9b:14:21:9d:a0:1b:
8c:af:07:3d:33:91:d7:d8:1d:e1:c2:f3:7a:c3:10:
97:9b:d5:96:b5:44:ae:f4:33:54:a8:e5:83:8d:fa:
ac:40:f6:d0:57:46:6f:72:ef:83:9a:29:ad:8d:a0:
07:05:33:7f:a5:48:84:c4:5a:22:0e:6f:c9:f5:40:
38:e5:90:5f:df:d5:6f:29:20:bb:39:21:50:ce:4d:
ee:e9:f5:a7:c6:77:36:36:62:4a:ea:8a:94:20:24:
ca:11:62:df:6f:83:e3:70:55:63:9d:80:c0:d2:26:
0f:a2:a0:29:af:33:51:3a:f3:2d:a3:d7:04:45:41:
5d:c9:73:a1:d7:58:35:cf:79:2e:a3:59:d6:d4:fe:
06:8b:0e:32:c0:1a:52:40:77:04:44:17:cd:ed:c6:
7f:c9:c6:a2:90:96:2f:c2:32:45:d5:50:dd:7f:fc:
21:09:d5:3e:49:1d:1c:50:84:59:9b:a6:5d:bf:7a:
0c:68:91:d4:97:f1:f7:1f:0b:bc:ef:70:da:20:e1:
62:05:19:48:f9:89:0c:f9:90:6e:af:36:c6:fb:a8:
98:7a:fe:45:bb:02:59:14:2c:9c:76:9d:12:bb:a1:
2c:a9:e5:79:ea:6a:d9:4d:3c:02:4c:7a:d5:b9:42:
02:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3F:21:BE:2B:2D:86:F8:17:EF:60:0D:12:AC:DC:94:5C:9C:2A:23
X509v3 Authority Key Identifier:
keyid:A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:dd:98:f2:f2:5f:38:84:0a:8c:6e:74:3d:53:bd:04:66:6d:
9b:5c:1a:71:d0:a0:16:4e:b9:fa:d5:04:8b:5d:6d:44:21:89:
dd:93:95:b8:00:09:05:8f:67:ce:ed:b2:dd:61:1e:19:12:af:
94:4c:2f:da:4a:5c:63:c7:60:b6:23:39:dd:24:0b:b1:70:6b:
f8:11:8c:39:34:85:db:43:b5:9d:12:4a:11:b4:1d:67:e0:02:
d6:2a:99:ba:f6:a8:25:bb:5e:46:e6:05:3d:65:1d:13:b1:42:
3f:99:50:25:5d:ab:ea:e9:5a:3b:2e:24:d6:5d:58:b6:d2:22:
99:47:94:12:66:36:64:6b:4e:b7:11:9a:93:6a:91:71:01:dc:
77:46:49:37:5d:7d:09:01:fd:ea:7d:fe:4e:d6:33:c8:ca:3b:
b0:30:c2:41:3a:72:c4:e0:98:a7:30:4d:c4:2c:89:13:3c:f3:
fe:1a:66:bf:b1:02:d4:cd:2c:6b:f7:9b:39:70:2a:80:ed:51:
79:e0:76:86:32:88:aa:2d:78:4b:98:ee:d3:cd:2d:2f:4b:7c:
a2:15:fc:3c:c3:3f:56:19:d3:ca:33:ba:f3:4e:a5:72:ac:99:
36:db:b5:92:7e:46:63:11:13:ae:88:3c:9f:5e:80:54:43:2b:
e8:ea:80:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:28:34 2025 by rpki-client