Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
File: qTnMFiHuMBCumOEnvSVKeDP9KCc.mft (raw, json)
Hash identifier: oADoVp6bTtRd30kxG7fT+lynfS2VlKgdENbJxbvaBV0=
Subject key identifier: 16:9B:16:92:4F:80:6A:30:5E:73:AC:5D:1D:03:AF:30:01:C7:DB:86
Authority key identifier: A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
Certificate issuer: /CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Certificate serial: 01967679D5B201F9AEC2A11B4C79302B9F8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
Manifest number: 0E2C
Signing time: Sun 27 Apr 2025 09:00:18 +0000
Manifest this update: Sun 27 Apr 2025 09:00:18 +0000
Manifest next update: Mon 28 Apr 2025 09:00:18 +0000
Files and hashes: 1: I8M09wEb8pPy5aE1tmLVBA1QjII.roa (hash: H2KzL98idyYXiGDF46vhI9MdVSfKRRTkQwlTKnfvbNE=)
2: kE5clAT_On1-sKoap2EGHHtO9ks.roa (hash: 2Gqvz4gyypjZzZQdA4iyMYqLbiLT02xiEIZm2TleSrU=)
3: m8QWxGjBijSQKviqiwGPDVQObsM.roa (hash: 0nynt3B6pt+z65wp6r175QdY0trgb8BxBMo+4Klvl7g=)
4: qTnMFiHuMBCumOEnvSVKeDP9KCc.crl (hash: r1m5TtaS++bLF4s7HbAsUF6GS4KAqBgpzDb2TkajAzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:d5:b2:01:f9:ae:c2:a1:1b:4c:79:30:2b:9f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Validity
Not Before: Apr 27 09:00:18 2025 GMT
Not After : Apr 28 09:00:18 2025 GMT
Subject: CN=169b16924f806a305e73ac5d1d03af3001c7db86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:54:68:5b:a6:fe:2d:59:9a:e6:01:de:80:e5:
4e:64:f0:8d:0e:c3:b4:88:84:0f:41:03:10:6b:fb:
e6:41:f4:cb:22:2d:4a:4b:e1:35:6b:0b:1d:67:15:
00:18:d3:93:83:d1:52:28:8d:36:27:dd:32:d5:0a:
45:4a:bf:53:8c:43:5c:2c:c1:e4:55:a9:cc:0c:ee:
a9:18:7a:42:4a:29:9a:4e:1a:be:e6:ec:a3:90:9c:
df:72:c9:ac:33:5e:1e:61:84:26:00:e3:0f:ec:5f:
ae:03:ca:c9:4a:da:5e:5c:3e:49:b2:e5:37:c9:50:
36:6b:36:4e:ff:96:19:e1:d1:e6:8e:b9:55:40:76:
0f:39:29:31:a5:0d:eb:d2:94:13:60:25:c2:84:de:
6e:83:dc:c7:e0:51:f6:c3:b0:32:4f:67:2d:3e:48:
4d:2e:27:e7:76:db:c9:86:0a:f6:92:83:17:92:b4:
0c:a4:37:85:f0:45:a1:14:83:94:87:49:d7:1a:0a:
be:9c:c8:74:92:6c:b0:4d:f3:91:85:b8:0b:ba:23:
b6:53:17:70:b6:fb:76:c6:78:5f:94:b6:4b:d5:47:
e4:65:10:9c:f8:7f:ba:1f:d6:c7:96:a6:29:6a:70:
f1:1d:86:86:3f:a1:7a:8a:6b:a0:0f:c0:39:ff:8e:
f5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9B:16:92:4F:80:6A:30:5E:73:AC:5D:1D:03:AF:30:01:C7:DB:86
X509v3 Authority Key Identifier:
keyid:A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:9c:06:80:80:87:ce:63:c3:32:43:cc:4e:20:0d:6f:36:86:
e3:64:62:9d:6e:a0:ed:82:5f:af:fe:9c:40:2c:d3:24:9b:53:
4d:06:ff:fe:f0:8a:fd:3b:ba:9e:1f:df:d8:9b:20:b1:55:59:
b7:5d:56:98:35:bd:ec:95:ee:84:0f:d0:b3:2c:e3:d9:a2:bd:
bc:7c:ce:07:7d:ee:1e:7f:a0:63:6a:c4:96:06:52:c3:01:a4:
2d:5b:8f:7e:e1:ef:19:2d:4d:69:50:dc:70:79:86:6e:a4:d5:
8a:05:da:39:e9:b3:83:07:35:63:4f:10:fa:e0:d1:1c:1c:a5:
79:cd:a0:e9:5b:b6:6a:c7:d6:cc:fc:4a:8b:65:e8:32:2d:dd:
c8:2a:b6:79:e9:d4:55:01:83:0b:76:ce:4f:43:45:82:a4:34:
5d:96:00:8b:14:73:a6:93:78:6c:9b:1a:6f:e0:b1:66:01:f3:
e0:37:3c:cc:96:91:d8:90:9a:a5:9e:51:92:1a:2e:9a:93:61:
80:8a:12:e8:08:44:7e:08:53:44:b6:43:44:05:fc:ff:b8:6c:
55:36:47:64:8c:e9:d2:71:91:9f:4d:4d:4c:45:ee:c5:3c:36:
7c:88:fd:18:59:cf:43:a1:89:e7:58:e9:8e:a7:7d:e7:53:ed:
d7:f7:36:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:15:44 2025 by rpki-client