Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
File: qdeM56IchB2HNUJHdut_9YetBNE.mft (raw, json)
Hash identifier: GmvHyKH4H/gImFco1D9JptasPb3RANd0W4uzC3pikfw=
Subject key identifier: 05:72:57:F3:33:2B:70:17:F8:AD:EE:5B:89:E1:C8:32:FE:08:00:92
Authority key identifier: A9:D7:8C:E7:A2:1C:84:1D:87:35:42:47:76:EB:7F:F5:87:AD:04:D1
Certificate issuer: /CN=a9d78ce7a21c841d8735424776eb7ff587ad04d1
Certificate serial: 01967F0F4BA5E98DB4218D67D633D764307A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
Manifest number: 13ED
Signing time: Tue 29 Apr 2025 01:00:30 +0000
Manifest this update: Tue 29 Apr 2025 01:00:30 +0000
Manifest next update: Wed 30 Apr 2025 01:00:30 +0000
Files and hashes: 1: mzdjW8d1g2RTbpkDyieCRb4Rhp4.roa (hash: +eSn1whG8BEnu+P7IU1V/ISLWfTeC4hd2INZhTzIgYI=)
2: qdeM56IchB2HNUJHdut_9YetBNE.crl (hash: fIfi0l8K8ANec3Z63pKOP0u0H2yd6HiEyMDVQanWoB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:4b:a5:e9:8d:b4:21:8d:67:d6:33:d7:64:30:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d78ce7a21c841d8735424776eb7ff587ad04d1
Validity
Not Before: Apr 29 01:00:30 2025 GMT
Not After : Apr 30 01:00:30 2025 GMT
Subject: CN=057257f3332b7017f8adee5b89e1c832fe080092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:f4:4b:db:7d:e9:69:4f:52:43:d9:ba:f7:
22:33:bc:f4:c0:41:e4:23:17:23:c0:73:0c:a1:3f:
0a:eb:96:f8:26:78:33:f0:78:f4:dd:fa:33:b5:d2:
e0:6d:58:32:53:56:49:42:80:96:e6:3a:d1:a4:8a:
c6:64:4e:2c:10:d4:e8:d9:31:18:a7:78:5d:71:e2:
51:c5:6b:67:77:d4:54:a3:ad:58:81:07:d9:4c:14:
27:60:13:d4:c5:a9:b0:86:e4:ab:e9:c5:72:53:d0:
7e:bf:24:83:a1:6e:8f:9c:3d:80:b7:7c:8c:7e:7d:
54:96:e4:c8:67:c1:46:cd:fd:91:a8:38:cc:6d:9d:
02:7d:bc:81:cb:d5:0d:f6:45:cd:d9:43:df:7a:3d:
71:d3:1a:40:9a:17:b1:83:6b:ff:44:35:4b:89:9a:
fe:6a:c9:7a:2a:48:b9:f2:20:d0:7d:02:9a:ff:26:
c8:6b:1a:1a:94:bd:a4:8c:bc:45:5f:1f:28:43:1d:
82:8d:40:70:fa:15:9b:11:1b:43:3d:1e:88:1b:e1:
44:fe:e9:60:5b:c1:f7:0d:8b:8c:a4:d7:ee:6e:be:
34:88:8b:59:af:00:dc:ad:5f:f2:6d:96:7e:b6:aa:
19:5d:45:35:8e:30:b7:5a:67:a5:a5:e2:95:1c:bb:
0e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:72:57:F3:33:2B:70:17:F8:AD:EE:5B:89:E1:C8:32:FE:08:00:92
X509v3 Authority Key Identifier:
keyid:A9:D7:8C:E7:A2:1C:84:1D:87:35:42:47:76:EB:7F:F5:87:AD:04:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c4:48:13:33:c8:fe:cc:a4:b3:0d:e7:ca:35:80:4e:1e:7b:
9f:ce:b2:f3:e0:78:fa:2d:0e:16:73:51:88:c7:c4:5e:7e:0f:
7c:f0:42:9e:e2:a1:b8:dd:2a:4a:8f:2f:c4:70:19:87:e5:5d:
63:c3:5a:93:15:e0:26:32:32:19:02:bb:0e:b6:a7:86:a1:30:
37:e6:5a:2f:fa:c6:25:ef:de:f3:1a:c2:80:39:4b:70:67:c6:
bb:f3:ff:ed:2d:48:f0:03:e6:85:20:81:f4:25:44:0c:6a:d6:
d3:bf:a6:2a:25:0c:80:70:9e:8e:a0:ed:93:3a:ed:c7:df:b6:
91:eb:57:a0:b0:67:fb:e8:19:43:ed:0d:ce:d4:d7:8e:26:df:
70:6d:09:9c:df:92:23:af:0e:e8:1c:02:f9:d0:33:ca:1c:31:
0c:c0:39:4c:58:b7:4f:6c:18:1c:30:5e:4d:43:bd:de:f3:c9:
38:8c:6f:eb:a4:44:1a:35:3a:b3:da:01:67:9d:74:cb:ca:93:
ef:25:50:c4:6c:b5:13:e6:a6:d8:93:d9:8a:cf:36:e8:43:82:
58:07:57:bf:aa:0d:e2:b6:ea:1e:95:78:b7:52:db:47:69:d7:
3e:af:54:6d:77:0d:33:2b:a6:e5:d3:d5:82:1a:d6:92:d3:da:
2d:5b:10:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:01:17 2025 by rpki-client