Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
File: qajkTlc8U8cZIxL8xyFQ0t43fW0.mft (raw, json)
Hash identifier: BbaDuAQkd7d2q5lY16krHTdSWGth5WWcs5Hoo7+TryE=
Subject key identifier: E9:C4:91:C1:2C:AF:D6:10:98:14:04:0C:CE:F9:78:D4:C1:8E:BC:C0
Authority key identifier: A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
Certificate issuer: /CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Certificate serial: 0196771EB32B6AEFD3909D73EFA7850D0E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
Manifest number: 1515
Signing time: Sun 27 Apr 2025 12:00:22 +0000
Manifest this update: Sun 27 Apr 2025 12:00:22 +0000
Manifest next update: Mon 28 Apr 2025 12:00:22 +0000
Files and hashes: 1: CTedhf-UDhDCo0gKWN1eFB95iME.roa (hash: Vr6y6sdI8B/BSyNE6gcBQftZW1dE4fIdtomKsz3LLNE=)
2: qajkTlc8U8cZIxL8xyFQ0t43fW0.crl (hash: Sw+eGvpXEQ5A6UL+3myDnji5qCrGTvelkDdiMNDFXo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:b3:2b:6a:ef:d3:90:9d:73:ef:a7:85:0d:0e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Validity
Not Before: Apr 27 12:00:22 2025 GMT
Not After : Apr 28 12:00:22 2025 GMT
Subject: CN=e9c491c12cafd6109814040ccef978d4c18ebcc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2a:9f:99:9a:b9:28:21:40:e8:76:b5:e3:93:
69:84:c7:13:1a:82:c5:73:9a:e1:22:93:ae:de:24:
fe:ab:e5:0a:68:95:3a:76:e0:c4:be:55:7b:a4:b2:
b2:a6:5f:e8:87:9d:11:7a:d9:ae:47:a8:8c:49:61:
15:6a:82:82:72:19:e6:2e:ea:f4:4f:76:b7:72:88:
30:54:05:5a:15:21:11:9e:0a:7f:62:1c:0d:c5:31:
fb:9e:48:00:e4:ee:fd:d4:f5:3a:36:22:7b:56:3b:
36:10:a4:8f:a9:d0:81:2c:cc:cc:b0:c3:6e:b1:fa:
b8:fb:31:2d:0b:14:ea:8e:91:bd:cf:5a:95:ab:d1:
96:bf:5f:e3:72:d1:3c:ff:00:3f:dd:ce:84:4c:52:
32:4d:81:97:37:50:dd:93:c4:28:7e:b1:0a:fd:b1:
7a:cf:a8:2c:18:f0:70:42:a4:50:3d:20:35:cf:30:
f1:5d:30:3c:a6:de:d5:90:db:1e:b6:33:78:4d:59:
7f:4f:74:7e:7a:61:a0:91:56:38:57:be:c7:48:6a:
5f:80:81:68:46:15:a9:cf:5f:a5:45:52:d9:b7:a3:
43:2d:08:25:a9:ec:9f:5c:40:45:90:5a:86:28:18:
dc:9e:eb:b9:7b:e4:9f:43:99:70:8b:bd:b7:fb:84:
d2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C4:91:C1:2C:AF:D6:10:98:14:04:0C:CE:F9:78:D4:C1:8E:BC:C0
X509v3 Authority Key Identifier:
keyid:A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f4:60:92:db:8f:74:45:af:e4:ef:ab:dd:f1:12:5f:bf:83:
49:a4:18:23:ad:21:91:81:4d:95:12:0d:a6:08:59:79:35:74:
c4:9b:aa:0a:c0:ff:a4:81:f4:fb:f0:41:39:b8:fd:c9:90:43:
8e:91:76:9a:cc:d1:3d:30:13:26:29:5b:13:91:7e:6e:d4:d2:
f2:0a:e7:de:58:2b:1a:6d:5a:e9:34:3d:45:98:19:c9:c7:b6:
fc:a1:5b:04:09:ac:e3:e5:8c:75:65:09:80:42:d9:3e:74:3c:
9e:12:5f:17:6f:a3:f5:71:d7:4f:cb:5c:44:56:de:aa:f9:91:
88:cb:c8:59:13:5f:d2:de:58:96:09:b2:81:50:ed:fd:51:62:
a8:ca:ad:ca:53:59:1b:f3:87:d2:fb:cf:f6:b9:74:1e:47:bb:
7c:42:0d:4e:8f:ca:ae:fb:4b:fb:c7:e1:cb:c0:02:83:8d:ac:
25:b2:46:41:c1:6a:ee:b5:c0:df:7e:da:80:43:02:80:f4:f3:
cd:84:1b:68:00:46:98:a4:46:08:55:0d:47:08:0f:3c:7e:e2:
54:e4:e5:ce:9e:1f:ad:0f:7a:0a:6a:aa:f5:be:f3:b5:d4:c4:
4c:f9:fe:a9:d7:13:09:78:48:cc:55:af:05:73:db:7c:76:fd:
32:d5:cb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:07:23 2025 by rpki-client