Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
File: pqqcrek75rp8irsyODGAdjF9YH0.mft (raw, json)
Hash identifier: +tQqEKXhxwwMO1X/skpBt0PNUHsSUWcAePOLePL/JD0=
Subject key identifier: EA:DF:C5:0F:A0:64:C3:B8:11:FA:2D:CD:9C:4E:69:60:17:87:DF:34
Authority key identifier: A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
Certificate issuer: /CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Certificate serial: 01967567BF451C1988A6757BF7131FB5A4D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
Manifest number: 0C28
Signing time: Sun 27 Apr 2025 04:00:55 +0000
Manifest this update: Sun 27 Apr 2025 04:00:55 +0000
Manifest next update: Mon 28 Apr 2025 04:00:55 +0000
Files and hashes: 1: S2CydqVU1Bg8JlGW4qN48rRbYzM.roa (hash: BGDB4Vnl+lNKwWJXdwvf53CCXNQUCVk3dMF/mpOaQyY=)
2: pqqcrek75rp8irsyODGAdjF9YH0.crl (hash: cxm+ismQxI+tbJp81lC0qn59LqrqmjkXfC3s/fdDOBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:bf:45:1c:19:88:a6:75:7b:f7:13:1f:b5:a4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Validity
Not Before: Apr 27 04:00:55 2025 GMT
Not After : Apr 28 04:00:55 2025 GMT
Subject: CN=eadfc50fa064c3b811fa2dcd9c4e69601787df34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:64:77:c1:bb:9e:8a:99:47:b5:25:dc:aa:88:
2b:a1:62:47:18:0a:7c:b9:4b:3e:19:f5:1e:c2:dd:
68:dc:4c:ab:d9:5c:3a:2c:77:df:6f:e5:2b:70:ad:
39:e9:e4:53:c7:3d:3c:25:0c:ec:90:46:28:bf:aa:
30:68:23:9a:f8:10:e1:fb:fd:00:a8:cf:46:c7:0c:
c7:9f:ec:74:1e:2d:0b:1c:fc:0a:58:ab:7d:bd:14:
73:e9:3c:13:63:3e:d3:9e:72:fd:1d:e2:e7:8d:de:
48:12:7a:ea:97:19:57:94:f9:18:24:dd:6c:f8:c0:
0c:33:d4:11:f5:b2:b0:63:46:60:0d:7b:73:db:5d:
00:c2:cc:a4:5a:bf:91:a6:da:62:3f:fa:d2:40:6f:
e9:c6:a8:4a:d7:8e:f0:7a:4f:cb:2a:e2:ba:03:e9:
c2:09:0b:99:6a:bd:dc:65:8d:64:02:71:91:94:a3:
85:3f:cf:1f:5e:e8:c2:7f:ab:cd:6e:c8:59:7a:9d:
25:4f:2d:13:04:18:90:79:0e:90:a8:f8:85:cc:d9:
f6:ae:71:78:54:fd:1c:b5:64:2a:0e:e3:20:35:74:
88:42:96:ca:d7:ec:b4:d5:37:6f:29:55:b5:d9:29:
e9:a1:6e:ec:5f:91:be:8c:0a:e8:48:5a:61:f2:dc:
e1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DF:C5:0F:A0:64:C3:B8:11:FA:2D:CD:9C:4E:69:60:17:87:DF:34
X509v3 Authority Key Identifier:
keyid:A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:d3:20:63:69:53:4c:13:99:db:64:a0:72:1c:01:5b:39:20:
fd:f4:5b:7a:58:d2:17:77:61:21:5b:4a:96:f4:0e:b1:8d:e7:
b2:1d:9b:81:e4:66:65:60:2f:d5:67:11:a5:33:1c:c2:bf:4b:
c8:1b:b5:ee:2c:de:34:34:14:4d:b2:34:5d:e7:59:ca:3a:7d:
d5:8f:7d:7f:fb:05:d8:02:de:f6:a1:6f:f8:41:1f:62:2c:ee:
4a:c0:56:bc:d5:d0:bd:d0:7d:e4:b2:d2:13:10:51:86:34:6c:
25:6f:61:b0:7c:f3:a0:7f:3c:d4:52:fe:78:c5:73:34:72:f8:
c7:fd:a4:f1:bd:ab:77:92:56:36:ca:b9:3c:c7:d8:a5:b6:c4:
79:93:41:4d:3e:1c:0a:28:7f:5c:a2:b7:ec:ed:14:90:77:f7:
ae:f8:06:5f:6f:fb:59:c2:dc:e7:c2:23:e0:bd:29:19:b4:5c:
a6:95:55:3c:bc:2b:57:4c:74:53:a4:4d:ea:25:6d:ee:c4:7a:
81:66:b6:3a:eb:cd:6c:72:20:15:0d:5e:13:a9:78:86:04:99:
ed:18:bb:7a:a9:83:79:7c:dd:4c:fa:da:f7:54:8d:2c:98:2a:
9d:f8:a0:49:39:c3:0d:72:2a:b8:7d:49:34:07:07:13:be:99:
f2:7f:3a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:54:52 2025 by rpki-client