Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
File: qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft (raw, json)
Hash identifier: IlmyclAxMwpqZxiYlrKxNWIvLM8grd248L2VhLSlamY=
Subject key identifier: 25:02:0D:D5:60:34:12:B3:1A:5E:4E:A8:54:F3:90:EB:C0:3F:EA:1F
Authority key identifier: AB:06:90:58:B4:D3:67:61:2B:E4:80:73:72:B5:E5:93:E0:34:77:66
Certificate issuer: /CN=ab069058b4d367612be4807372b5e593e0347766
Certificate serial: 019682B548802F72F37DCF0C91B397DA52A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
Manifest number: 1517
Signing time: Tue 29 Apr 2025 18:00:40 +0000
Manifest this update: Tue 29 Apr 2025 18:00:40 +0000
Manifest next update: Wed 30 Apr 2025 18:00:40 +0000
Files and hashes: 1: Ttl-1h1-V-nLfHGl50XIPqBaOuw.roa (hash: 4ysW7rFsdP6sSTiTROvgg5H3SFvIB36uqjjGielYpHo=)
2: qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl (hash: SEIXqQ/vP/wm7K30PgLj4VgeR7McDNK9XQNVRkEKeXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b5:48:80:2f:72:f3:7d:cf:0c:91:b3:97:da:52:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab069058b4d367612be4807372b5e593e0347766
Validity
Not Before: Apr 29 18:00:40 2025 GMT
Not After : Apr 30 18:00:40 2025 GMT
Subject: CN=25020dd5603412b31a5e4ea854f390ebc03fea1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9c:45:22:df:ef:b7:43:7a:5d:2d:f6:f3:58:
60:1f:95:a5:cb:f6:9e:10:bb:ba:77:d3:f8:73:4f:
ca:c0:fc:79:0c:15:ea:05:bd:f9:36:e7:8b:06:d6:
f8:18:5b:85:c4:8f:d7:5f:6c:f0:af:c0:f5:36:b3:
b5:c3:e9:4e:6f:bf:8b:45:66:b7:7a:de:b7:e2:67:
1d:4a:f7:2b:bf:52:29:b6:45:b2:9d:e6:a6:19:aa:
36:e0:d6:3d:2d:6e:8a:cd:29:8c:b4:c6:bf:8f:16:
2c:90:eb:19:56:1f:6f:a5:66:a7:0a:77:2e:a1:96:
23:e7:0d:db:e9:13:eb:61:9b:9c:d1:02:55:90:43:
75:be:ba:b4:72:83:5e:90:a0:81:c3:89:b0:6f:dd:
c6:0b:07:a0:ce:08:7c:42:b7:60:8c:f8:98:75:60:
bb:64:32:59:d9:e1:c2:b7:ad:f3:de:04:24:18:77:
e1:40:6d:b1:d1:b5:25:4c:d1:b7:b0:8c:5f:d2:68:
b5:9c:3d:a3:e9:c5:dc:08:8f:e1:54:8c:a3:46:56:
98:da:80:af:6b:8a:17:56:75:e2:c5:4e:0e:b1:16:
51:c6:4c:6a:df:fa:ba:a7:ba:54:ff:00:b5:19:3f:
ae:64:4a:76:20:d6:21:8d:d4:22:f1:e9:39:2a:db:
a4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:02:0D:D5:60:34:12:B3:1A:5E:4E:A8:54:F3:90:EB:C0:3F:EA:1F
X509v3 Authority Key Identifier:
keyid:AB:06:90:58:B4:D3:67:61:2B:E4:80:73:72:B5:E5:93:E0:34:77:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:7e:2e:bb:b2:b1:a8:1d:a9:96:37:b3:ab:bc:95:43:fa:07:
0f:be:a3:f7:61:7f:34:8e:dd:26:b8:6f:f1:13:f5:2e:65:93:
42:01:e5:41:04:c0:c5:ac:6c:00:d5:1c:58:54:60:81:cb:02:
74:2d:67:e9:1e:32:53:fc:5b:14:1a:86:45:b3:c7:f4:47:d7:
a1:c8:4f:cb:2a:e6:6a:e7:3d:fc:13:00:aa:dc:98:3d:25:5f:
7f:c6:b5:33:67:3d:75:cf:1c:0f:97:24:ea:ae:3d:40:c3:bd:
db:b9:fb:29:f2:16:7b:f2:32:a5:d0:c0:1f:62:8b:f3:34:af:
74:7d:7a:19:d8:ea:f2:33:4f:3b:2f:0e:75:29:6e:1a:80:7b:
f3:d7:1d:9b:30:54:c3:e4:eb:99:38:0d:a3:49:8e:dd:f7:9d:
e9:3f:0a:2d:07:28:8a:79:72:b6:ed:8d:5e:df:f1:da:98:19:
92:91:59:20:2d:25:51:ff:4d:a8:53:3a:68:56:e2:61:0b:9f:
d6:74:8f:18:a1:8f:07:d8:76:7f:c8:99:3d:ea:5d:e5:f8:8c:
7e:3a:48:85:45:d4:7d:23:9b:b3:34:65:2b:4f:64:50:3e:05:
44:54:93:08:be:20:f0:d2:82:d1:5d:f9:49:f0:b4:4d:32:4a:
46:9f:cc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:17:06 2025 by rpki-client