Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
File: QA8uoVe7tTqwJgEazlzRNg7y930.mft (raw, json)
Hash identifier: R2DcTLSekDuX1vO8FB2EZYYtOmUhbt/GChiJqdwxYJM=
Subject key identifier: AE:1E:CC:99:C3:66:56:FC:86:C7:23:6B:87:54:6A:74:E0:79:AB:7E
Authority key identifier: 40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D
Certificate issuer: /CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d
Certificate serial: 01967BD7AD02F1A8E0312774EC2B055CF4DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
Manifest number: 1466
Signing time: Mon 28 Apr 2025 10:00:54 +0000
Manifest this update: Mon 28 Apr 2025 10:00:54 +0000
Manifest next update: Tue 29 Apr 2025 10:00:54 +0000
Files and hashes: 1: QA8uoVe7tTqwJgEazlzRNg7y930.crl (hash: IULcKpj7DJSo/u0oJ514rhFXrcptkV1ycGsYNK2zz/k=)
2: XYTPsqrRjFt2AcvYCap2e2yz93s.roa (hash: Kn1lsHWRvXKbCBaB+H+cKPNwO5N2Gs/SXNbPpw2oiTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:ad:02:f1:a8:e0:31:27:74:ec:2b:05:5c:f4:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d
Validity
Not Before: Apr 28 10:00:54 2025 GMT
Not After : Apr 29 10:00:54 2025 GMT
Subject: CN=ae1ecc99c36656fc86c7236b87546a74e079ab7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:26:91:9c:62:1e:b1:e0:fd:18:e2:fe:5d:ae:
3f:92:c8:2d:c3:56:8d:89:1c:f8:df:b6:4d:37:bf:
06:1a:b3:6a:24:06:e1:e8:ff:cf:e4:76:49:5d:9d:
dd:05:ef:75:06:87:da:d5:44:61:be:a7:56:0d:47:
d8:ab:ff:cf:33:4c:49:41:e7:02:36:ec:36:35:26:
c9:03:9a:85:72:47:16:3a:e8:26:a2:e1:19:e7:e5:
ba:89:a3:2a:38:5f:b2:c5:b0:22:46:b7:43:a2:a6:
a6:30:df:fb:77:cc:44:0d:a8:57:45:74:65:b1:8f:
59:30:b9:25:ca:99:4e:c3:62:a4:a5:4b:2e:6a:5f:
36:42:32:43:00:a1:6e:cf:e0:29:74:a5:28:c7:40:
f5:e0:05:04:97:c9:57:35:d2:51:a0:46:65:55:b3:
9c:65:4b:8c:5c:a5:45:47:07:2b:24:dc:70:ef:3c:
58:0b:39:46:0b:68:d0:ea:30:be:c4:75:b0:99:3a:
42:63:08:09:21:5e:1a:81:46:8c:72:7a:ae:34:bb:
3b:c1:28:8c:9c:12:ea:ba:32:ce:3c:c8:9d:cf:a3:
87:f7:16:f7:c7:73:dc:a3:8c:be:b3:12:94:65:46:
96:9d:24:c3:e5:af:14:46:28:75:6a:77:33:f5:03:
7a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1E:CC:99:C3:66:56:FC:86:C7:23:6B:87:54:6A:74:E0:79:AB:7E
X509v3 Authority Key Identifier:
keyid:40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:de:00:a6:6f:03:63:19:2e:a2:f2:25:65:a6:78:cf:fc:be:
50:64:97:02:9f:16:da:77:fb:cd:ec:cc:96:1f:46:7a:28:91:
5b:03:f0:ab:02:13:01:a0:c1:51:a5:7d:22:72:e9:61:f6:31:
90:c5:ff:59:77:d0:25:64:0f:65:62:aa:c7:10:25:2d:80:e4:
9c:a7:88:cc:d5:1b:42:71:10:7c:20:4a:95:aa:3c:37:d9:ab:
ee:9d:c5:78:dc:b8:01:0a:dc:02:38:d7:08:4f:1d:59:a9:55:
69:c5:76:0d:af:5a:9e:7c:4c:11:1d:d7:bb:1a:55:e9:04:d3:
36:53:89:29:fb:68:af:eb:4d:6d:62:3c:53:c8:00:de:e2:cf:
5b:1c:6b:7d:af:5c:c6:c5:73:29:b0:93:b9:14:0f:8f:9b:af:
03:4b:fe:2e:e3:34:41:6d:26:86:76:e8:a4:b4:cf:f3:a9:b3:
31:ee:6d:ad:c7:f9:9e:4f:1f:80:ca:99:26:10:55:f7:92:42:
cd:b2:f1:35:8f:5b:e4:b8:56:32:1f:bb:a3:e9:af:35:2a:28:
d0:a3:0a:ab:b0:12:51:90:e0:eb:24:c1:80:a9:b2:67:86:ab:
b5:7d:30:a7:d9:b0:bb:1b:18:ea:81:c9:d5:f5:12:32:cd:68:
4e:ba:79:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:36:51 2025 by rpki-client