Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
File: qjV0fbQXDtRXVsyaOk52iaDrYsc.mft (raw, json)
Hash identifier: IjrtsjA4skOzeXwY/vfVErsKG+2gsU5H1mykfEjYbJQ=
Subject key identifier: 19:35:7A:B2:77:96:49:F6:2B:36:8E:7A:FB:0D:48:BA:BB:FD:F3:07
Authority key identifier: AA:35:74:7D:B4:17:0E:D4:57:56:CC:9A:3A:4E:76:89:A0:EB:62:C7
Certificate issuer: /CN=aa35747db4170ed45756cc9a3a4e7689a0eb62c7
Certificate serial: 01969B2BB6CBAAB3A09A156713D20CBF341D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
Manifest number: 0209
Signing time: Sun 04 May 2025 12:00:55 +0000
Manifest this update: Sun 04 May 2025 12:00:55 +0000
Manifest next update: Mon 05 May 2025 12:00:55 +0000
Files and hashes: 1: c4TxJnX6SULpOIlEbtsYVcPO_1E.roa (hash: mprESb6/2u0lim3u1bjN8fuUSWrOypjztHMO2wyLys0=)
2: qjV0fbQXDtRXVsyaOk52iaDrYsc.crl (hash: k8ILsbVrIuMMvFf7O9LGSMSRuypBTUdC8wLSY5lDQsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9b:2b:b6:cb:aa:b3:a0:9a:15:67:13:d2:0c:bf:34:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35747db4170ed45756cc9a3a4e7689a0eb62c7
Validity
Not Before: May 4 12:00:55 2025 GMT
Not After : May 5 12:00:55 2025 GMT
Subject: CN=19357ab2779649f62b368e7afb0d48babbfdf307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0a:ef:c6:7f:b5:0d:d7:26:8e:4b:81:4d:60:
be:54:ab:1d:ca:27:32:95:5c:7f:65:eb:62:91:35:
4d:76:b4:53:67:4e:02:9f:ad:4b:2e:dc:94:4d:17:
40:18:68:49:b9:0a:f0:a1:7d:cf:85:eb:ed:d3:77:
eb:03:70:4a:38:10:1a:7e:33:ae:eb:9e:3c:fa:0f:
94:9f:a6:9e:ff:f6:60:85:a3:62:9b:ef:8b:7d:58:
14:6c:be:11:b6:d2:ef:8f:7e:59:26:f7:13:cc:80:
3d:e4:6e:1e:29:11:8a:9b:fd:48:12:c6:32:4e:83:
25:c7:25:ce:02:e5:c3:f1:cc:fc:35:b4:61:c9:e0:
b2:af:69:d4:5d:19:23:df:56:9c:ba:ac:e6:e8:63:
70:8e:3f:c9:9c:bc:02:9e:0f:32:d7:7f:57:e3:b1:
ce:20:e7:56:12:95:6f:cb:1b:8c:22:bc:71:c8:01:
60:b8:66:57:eb:cb:79:45:8f:5e:fc:04:31:02:56:
93:3d:67:84:4c:47:bc:3f:39:89:5d:bb:d2:7b:eb:
15:c2:9a:b8:8c:10:70:1d:b9:0b:3b:eb:e8:ae:e5:
1f:58:db:6c:48:12:79:76:ce:2c:dd:f2:73:47:71:
77:a9:03:b8:bc:58:b2:00:73:64:93:84:86:20:26:
8a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:35:7A:B2:77:96:49:F6:2B:36:8E:7A:FB:0D:48:BA:BB:FD:F3:07
X509v3 Authority Key Identifier:
keyid:AA:35:74:7D:B4:17:0E:D4:57:56:CC:9A:3A:4E:76:89:A0:EB:62:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5d:30:4c:a5:cd:5c:a8:ce:45:a6:e6:f8:99:6c:c1:bf:bd:
97:bd:80:24:dd:35:31:e9:ef:5a:76:47:31:bd:9c:a0:be:9d:
72:4c:e7:df:d9:13:90:b8:37:8d:8d:86:91:c5:88:0a:8a:4e:
13:79:7b:e2:45:28:75:fb:a6:26:fb:97:0f:41:24:d2:13:14:
bb:e5:de:ea:97:d7:6d:ca:9d:08:e3:80:5b:ec:9d:bb:28:3c:
64:79:04:50:20:6d:66:ce:5a:b7:eb:63:5f:62:e0:5c:7a:5a:
fa:11:a0:91:b8:81:ee:08:0f:af:be:56:2e:26:78:19:51:06:
51:86:df:9d:e8:a9:9e:f8:09:3f:d9:ad:ea:07:f2:ba:f3:a3:
92:2a:19:12:71:07:53:0a:dd:a3:35:41:64:36:0e:85:54:7a:
85:01:04:81:14:96:23:6e:d4:93:a6:cc:c8:6c:03:52:f4:ce:
ff:16:16:9b:6b:ce:e5:6e:30:ad:d8:94:c4:cf:a2:50:bf:70:
7a:e8:8c:52:43:cd:ed:f6:5e:76:2c:e4:be:78:c9:75:83:56:
9b:19:b6:20:7d:b1:ba:79:c6:13:84:a2:f5:63:a9:e9:fe:18:
b1:19:1a:c6:48:53:82:7d:76:24:e9:5f:9d:46:e1:73:7d:96:
ef:a0:d1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 14:00:23 2025 by rpki-client