Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
File: QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft (raw, json)
Hash identifier: tfIu9xYz7FcTQ/HTxApy39rSdB+/fHbzP+8C9oL6Wb8=
Subject key identifier: B2:7F:C4:B0:65:D1:35:4A:62:5A:66:FA:FB:D6:76:1A:51:9C:49:06
Authority key identifier: 40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
Certificate issuer: /CN=4003350bcc7b540fadea951e046081d8da06c145
Certificate serial: 0196797B50CE4EAC762194DEFD4FBF4B3BE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
Manifest number: 06EB
Signing time: Sun 27 Apr 2025 23:00:46 +0000
Manifest this update: Sun 27 Apr 2025 23:00:46 +0000
Manifest next update: Mon 28 Apr 2025 23:00:46 +0000
Files and hashes: 1: QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl (hash: 1SnnJ9HJhnJvD5Vm5cUtpHrKSqpNSW4PjQt7hgvIF20=)
2: pqlsmAxEb6u37QxzF6qCzpQ4SBk.roa (hash: teI/DPbnnC6ro04KC4yzmzn/SS2I9ht6+3TdoQMOA3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:50:ce:4e:ac:76:21:94:de:fd:4f:bf:4b:3b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4003350bcc7b540fadea951e046081d8da06c145
Validity
Not Before: Apr 27 23:00:46 2025 GMT
Not After : Apr 28 23:00:46 2025 GMT
Subject: CN=b27fc4b065d1354a625a66fafbd6761a519c4906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:49:6a:a5:b9:63:9e:2c:68:0b:7e:7c:41:e6:
e3:f0:fc:e0:12:ca:c6:72:27:a1:fb:39:92:26:1d:
7b:50:00:95:97:73:e0:dd:53:fb:d6:39:1c:13:09:
d5:23:18:4b:c5:8e:cf:20:a1:68:9c:2a:81:78:b3:
ed:a8:7b:aa:ce:85:0f:5d:aa:ad:5c:35:b4:91:6a:
ef:eb:9a:ec:5a:b1:56:fe:af:42:67:94:36:08:0e:
81:2b:32:96:6f:64:20:97:d8:72:b1:34:79:7c:9e:
78:36:aa:99:78:99:e9:ba:fa:3b:d7:28:f0:c9:0f:
cc:da:89:5e:80:1d:48:88:8f:99:f3:86:d3:d9:b2:
09:d5:bd:4c:45:c6:a6:7d:53:fe:df:d2:12:9b:fe:
10:98:e0:ef:39:45:b2:19:8b:c7:11:a6:50:f6:28:
0d:ce:bb:2c:32:46:0c:58:f6:7a:3b:60:df:e8:5e:
95:07:d6:f4:d3:d9:5f:30:89:6e:d6:5a:f4:d8:08:
4b:3d:df:80:fe:21:77:02:66:39:7d:f8:fb:a1:dc:
c6:ad:ee:d6:31:9a:95:ff:4e:42:9f:4d:bc:f3:96:
3d:a6:a5:bc:2e:79:f5:35:c3:25:31:42:ca:58:dd:
36:d5:66:3d:1d:de:d4:2d:5c:a2:d5:45:cf:ba:2d:
cc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7F:C4:B0:65:D1:35:4A:62:5A:66:FA:FB:D6:76:1A:51:9C:49:06
X509v3 Authority Key Identifier:
keyid:40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:d6:7d:9b:ce:82:bb:d6:21:7e:82:f2:66:b8:b3:fc:9b:af:
6d:49:d4:c6:88:3c:f3:3c:2c:aa:c6:04:8a:c4:4c:7a:58:0d:
7b:59:86:e8:18:92:88:27:47:61:c4:98:db:53:85:d4:0d:ed:
11:dd:30:7f:0b:b0:b7:4b:1f:8e:1f:57:33:52:c9:b6:29:59:
d3:1c:21:85:b5:03:4a:55:e2:df:9b:cf:22:49:2b:55:36:7e:
4a:7c:0a:68:57:1a:d8:76:9b:43:05:d7:33:c7:d8:68:a4:e8:
b7:00:5f:fb:25:bb:4a:da:f0:37:97:1d:26:00:d7:32:25:60:
20:12:b0:ac:dc:80:17:1d:01:9e:ee:13:1f:f2:35:96:3b:4a:
b4:5d:4c:4d:38:4f:b6:3a:81:7a:77:6b:6d:f8:11:1c:92:32:
41:ea:bb:f3:10:f3:12:26:51:d7:1e:2f:24:a8:61:e6:9d:82:
00:73:0e:d7:a6:62:2e:41:97:e6:13:3c:d0:0b:1f:b4:5d:6f:
d7:1a:80:e9:4b:7b:3a:8d:6b:80:7a:db:34:75:a7:4f:c1:5d:
62:7d:74:b6:93:49:b7:41:23:15:1e:83:32:e6:7a:ef:e1:d0:
3d:03:16:a7:fd:a8:7f:3d:53:f4:13:bc:27:96:d3:f6:89:ba:
b0:1f:56:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:58:44 2025 by rpki-client