Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
File: qkHJOeqVoh87dCkB3-BfJqV3dYE.mft (raw, json)
Hash identifier: HtuLMj+eAk73ldNbsWMDvbnPB6JM6gRN5Erf/cgizwk=
Subject key identifier: 71:1F:E9:73:BC:75:4A:6B:2D:0B:5E:15:95:5B:A4:A9:F7:E5:18:06
Authority key identifier: AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
Certificate issuer: /CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Certificate serial: 01968058FF46066E2E6904242205CCD3C7CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
Manifest number: 09F7
Signing time: Tue 29 Apr 2025 07:00:38 +0000
Manifest this update: Tue 29 Apr 2025 07:00:38 +0000
Manifest next update: Wed 30 Apr 2025 07:00:38 +0000
Files and hashes: 1: qkHJOeqVoh87dCkB3-BfJqV3dYE.crl (hash: L+c5s1fZzNNidtV76kRgFO2KKGS4tm4qrmqLvv8d5gA=)
2: wcccpGaeYTilF5ncbceAk7mBvqQ.roa (hash: gOA2BhosHOf6qCEMFAHb8yTCso/K7yQdwGzJmIy7AF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:58:ff:46:06:6e:2e:69:04:24:22:05:cc:d3:c7:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Validity
Not Before: Apr 29 07:00:38 2025 GMT
Not After : Apr 30 07:00:38 2025 GMT
Subject: CN=711fe973bc754a6b2d0b5e15955ba4a9f7e51806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:86:76:aa:22:5b:48:16:d7:d3:8b:45:92:80:
ab:07:e5:4c:07:54:e7:c8:e4:2f:de:40:53:d3:42:
14:c8:e1:c6:6a:83:c9:71:e0:ec:98:de:b0:05:9f:
42:ba:13:10:ff:e4:60:72:fc:da:30:3b:6e:77:e3:
a2:ef:61:db:5c:20:f1:bf:57:69:a6:86:14:cb:5e:
11:51:af:6e:9f:08:fe:68:17:1b:72:c1:cc:b4:38:
e8:35:7f:7b:74:28:94:26:3d:38:3e:67:a5:46:18:
43:a1:96:53:e0:2e:c4:d8:41:ca:9e:0a:d0:7c:9f:
b0:8a:95:e6:a0:03:95:61:ac:1e:20:f5:bc:d7:90:
08:04:a6:fe:cd:11:c1:2f:0a:ad:6c:24:00:4a:1b:
c2:5b:39:12:c6:1f:33:ac:73:c0:4b:b3:af:bc:2b:
4c:78:59:98:0d:94:d2:6f:e2:64:78:18:e2:69:a8:
a5:fb:55:02:a7:d3:9c:ef:9a:de:5f:14:3f:ae:91:
2a:91:89:8e:e8:fc:98:a3:41:94:df:72:64:e4:2d:
80:82:85:8c:0d:55:c6:02:d1:82:6a:08:88:bf:96:
f9:48:5f:95:1f:ca:40:7a:45:10:b4:e5:0f:b1:0c:
be:97:0d:00:c1:09:fb:4a:49:f0:76:b4:0b:3a:e2:
f2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1F:E9:73:BC:75:4A:6B:2D:0B:5E:15:95:5B:A4:A9:F7:E5:18:06
X509v3 Authority Key Identifier:
keyid:AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:0e:1c:38:1a:39:ca:bc:bb:78:fe:12:84:11:aa:90:31:26:
8d:cb:76:7d:b8:8f:ad:0b:ea:c2:21:d2:0c:b8:4f:b5:49:5a:
28:52:aa:65:c8:67:b9:36:69:1a:f5:4b:3b:a7:82:41:82:41:
0a:3e:36:8f:61:57:11:57:82:9d:99:e9:73:cd:7c:0d:46:b1:
fa:01:5e:fb:24:05:db:54:80:5d:4c:b9:55:bf:97:ca:f7:96:
26:92:e4:a2:c3:d3:09:03:ef:71:fc:c9:9d:9c:ca:b7:cd:50:
4c:fe:ef:b7:1d:04:2c:4a:d7:e8:d5:dd:33:44:ae:a2:32:b0:
79:92:a4:3d:46:0f:ca:98:50:94:88:b8:ce:6b:64:4a:cd:f4:
6e:c4:02:03:25:4c:cc:d2:08:ce:44:9d:e4:bf:74:39:aa:fe:
5e:b1:4f:75:61:12:47:0d:ed:cf:50:fb:4e:0e:d6:47:ff:c6:
9c:b2:4a:97:2f:e7:7a:df:7d:c8:4d:a7:35:ea:1b:b6:04:50:
87:b8:2e:8f:2d:bb:b1:7d:40:e9:88:4a:cf:bd:af:c4:fd:cf:
29:13:30:81:89:0c:46:99:d3:be:b4:57:14:1e:53:01:5b:d0:
10:53:16:a9:f4:55:26:fc:79:04:f1:5b:4a:c0:fd:35:e4:36:
99:d2:90:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:38:01 2025 by rpki-client