Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
File: qNU0ujy0JM9cXjuiVLojJQgGWLA.mft (raw, json)
Hash identifier: zGhjKf0vlRcIQvZobDCmQca0RXJkt6Ja7rZUr4gmlEo=
Subject key identifier: C4:9E:65:F7:A9:E3:D2:6C:9B:95:1F:B0:16:17:07:2B:14:06:8E:86
Authority key identifier: A8:D5:34:BA:3C:B4:24:CF:5C:5E:3B:A2:54:BA:23:25:08:06:58:B0
Certificate issuer: /CN=a8d534ba3cb424cf5c5e3ba254ba2325080658b0
Certificate serial: 019671F86CB73D7A542E316372F03C2944D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
Manifest number: 0650
Signing time: Sat 26 Apr 2025 12:00:28 +0000
Manifest this update: Sat 26 Apr 2025 12:00:28 +0000
Manifest next update: Sun 27 Apr 2025 12:00:28 +0000
Files and hashes: 1: oATe-_oISha7IgG23AEM218xrRE.roa (hash: uddGyx2jLyok/qpchLVARkXw2HFXXOE6m1d81wn4B4M=)
2: qNU0ujy0JM9cXjuiVLojJQgGWLA.crl (hash: to1z7iJfRdzQwXZYBB53lVKLHqGuQF12FtuzpY5fdAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:f8:6c:b7:3d:7a:54:2e:31:63:72:f0:3c:29:44:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8d534ba3cb424cf5c5e3ba254ba2325080658b0
Validity
Not Before: Apr 26 12:00:28 2025 GMT
Not After : Apr 27 12:00:28 2025 GMT
Subject: CN=c49e65f7a9e3d26c9b951fb01617072b14068e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7c:08:77:57:d7:43:15:5c:a2:06:bf:8e:a9:
6d:ad:2b:f8:34:e4:30:fb:03:3c:2c:bc:dd:bd:4a:
b7:a5:5a:ef:22:83:ed:e1:52:ce:94:0b:89:6b:73:
99:15:07:24:40:a6:bb:37:77:41:c0:b8:63:31:56:
c1:29:d9:ef:24:0f:ec:a2:0b:75:e8:9a:70:61:97:
f5:c6:e2:4e:b8:fe:e9:7b:9f:69:da:10:c5:1f:1d:
4f:82:43:5d:af:3e:37:dd:e3:af:81:76:37:d1:4f:
9c:69:54:a1:01:f7:15:45:07:98:b9:f5:0c:05:2a:
a7:c2:76:d6:0a:5e:8f:67:61:d5:eb:ec:c8:81:61:
bd:d0:a7:b1:ac:ab:7f:c6:7d:85:12:bd:34:46:ce:
80:f1:db:fe:22:8a:ed:3b:71:16:40:1c:3f:58:92:
ec:18:d1:c5:9f:d9:8c:57:7f:13:0d:ff:66:4f:24:
30:cb:f1:8c:78:f7:66:f2:8b:7f:c7:1e:96:89:d2:
92:d7:cb:f7:71:4c:db:90:07:1d:65:21:ca:0e:14:
d5:00:b9:03:e0:29:9f:98:98:28:74:b3:e5:d7:44:
33:77:d4:45:88:4d:eb:7e:58:52:d0:43:31:ce:5c:
2a:a4:80:0c:1e:2e:51:e7:3f:26:00:86:78:ab:6e:
16:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9E:65:F7:A9:E3:D2:6C:9B:95:1F:B0:16:17:07:2B:14:06:8E:86
X509v3 Authority Key Identifier:
keyid:A8:D5:34:BA:3C:B4:24:CF:5C:5E:3B:A2:54:BA:23:25:08:06:58:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:8f:b1:2a:bc:16:06:b4:5f:42:73:73:97:20:f5:1e:d2:da:
be:a7:0c:79:cd:51:15:63:28:ef:bb:9d:92:76:00:d0:be:78:
bb:2f:c5:88:80:36:1a:18:c5:35:17:a6:60:85:e0:70:04:5b:
0f:b7:6b:bb:23:dc:41:06:52:58:b4:6e:68:a2:36:e8:5b:ae:
4a:d5:b8:d1:d2:28:96:7a:02:79:27:0b:db:c9:a1:b3:90:2b:
3c:6b:96:2d:f8:9a:7b:c1:9c:3a:77:4e:0d:c3:5c:75:0f:f8:
a4:49:c8:fa:35:ac:bc:99:68:c3:9a:61:d4:5c:db:8a:8e:ef:
f0:84:6c:5c:71:65:0e:db:7f:fd:4b:04:aa:dc:be:ca:f3:9e:
b6:f6:45:93:95:46:3e:02:83:bc:e7:22:5c:0f:08:b0:d1:d4:
b0:39:4e:aa:7d:72:f4:35:e8:cd:f8:6d:7f:4d:da:b5:52:09:
5e:8d:0b:73:79:e9:0d:05:e0:f5:55:99:31:d3:cc:6d:2a:38:
8e:4f:fe:69:75:60:88:e1:bb:c8:c4:e5:43:91:4b:35:ca:95:
e8:54:ae:8f:a7:13:b1:ad:1c:bd:cb:6e:65:be:d2:4a:87:c6:
54:b6:7a:be:c1:93:c4:c5:81:de:a5:06:88:09:67:08:eb:41:
41:37:4a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:47:44 2025 by rpki-client