Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
File: qujptNjblGuyDM9RJ5cHXIr9g80.mft (raw, json)
Hash identifier: V4xTC+bmKoM4VyAQCTkM7SHGAcZDZ+dEUwqeR3+2m6A=
Subject key identifier: BD:2F:37:3C:8A:BD:AB:1F:EF:19:79:5D:B5:A3:86:A2:BB:46:6E:81
Authority key identifier: AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD
Certificate issuer: /CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd
Certificate serial: 019679EA0569613B036F766F27A428590108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
Manifest number: 036B
Signing time: Mon 28 Apr 2025 01:01:42 +0000
Manifest this update: Mon 28 Apr 2025 01:01:42 +0000
Manifest next update: Tue 29 Apr 2025 01:01:42 +0000
Files and hashes: 1: ABD8LSpm9Ko-5zn9g0r9GsemMIA.roa (hash: 1zcaf+BfE0QK77Rl0YVNTPqdqeAJJr/C/HmAQhJgCmY=)
2: qujptNjblGuyDM9RJ5cHXIr9g80.crl (hash: 6dx03lgWs+LnKUpdRWeCn1/kF/yIyVZrWxg9tRyavqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 01:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:ea:05:69:61:3b:03:6f:76:6f:27:a4:28:59:01:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd
Validity
Not Before: Apr 28 01:01:42 2025 GMT
Not After : Apr 29 01:01:42 2025 GMT
Subject: CN=bd2f373c8abdab1fef19795db5a386a2bb466e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:31:0a:6c:37:2f:88:52:25:1b:3b:87:34:51:
3f:4f:fa:ec:6f:0c:27:27:e0:d5:3d:e9:75:88:d0:
24:46:b7:91:bf:c3:f8:79:13:82:fc:88:bc:5d:7d:
99:49:60:b7:ca:5a:50:cc:49:d4:91:55:fc:e9:a3:
f7:e9:a6:5c:52:ae:1c:23:b1:78:ba:ee:8a:f9:cb:
9a:00:58:bc:df:d6:e8:04:ab:69:8b:57:1f:1a:05:
60:60:07:39:33:92:0c:50:58:43:13:09:5b:bb:fb:
1e:40:81:4a:52:b0:c0:e8:61:10:1e:cf:bf:10:67:
81:e2:2f:3d:c8:02:3f:86:4b:7a:ed:e7:10:e3:ca:
36:e4:25:45:62:e2:0c:28:0d:23:70:8e:ca:03:ad:
27:46:c2:97:4a:19:d0:12:50:f6:c0:63:f6:7e:99:
24:2a:8a:de:a0:bd:fd:cc:35:62:fd:34:a3:2f:1f:
01:73:a0:1c:60:bb:65:d5:78:2f:d9:49:41:4c:ae:
d6:17:bd:98:56:e3:71:02:7d:07:f5:80:f0:89:6a:
b0:18:c0:21:10:e7:3e:47:0c:33:10:c2:4a:61:89:
da:27:0b:6c:17:81:f7:b0:05:54:a8:52:24:61:09:
cd:88:c3:17:ee:4d:54:bc:ed:bd:29:ea:43:09:35:
7f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2F:37:3C:8A:BD:AB:1F:EF:19:79:5D:B5:A3:86:A2:BB:46:6E:81
X509v3 Authority Key Identifier:
keyid:AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:00:37:3a:3d:08:fa:cb:23:08:6c:0d:f9:5f:b3:ed:81:a8:
22:3a:14:29:19:b2:90:e1:cc:61:6d:4e:02:7e:6f:17:fe:de:
2a:c1:2a:c4:90:08:71:13:7a:2a:a3:29:88:d2:ca:f4:22:ed:
f2:49:a9:e2:74:31:a6:f4:4f:91:70:c3:59:04:5c:9b:27:1b:
a9:86:0a:fe:0d:2d:b5:5d:b4:5f:6b:1a:8b:42:78:92:fe:9c:
a9:43:b8:de:bb:ee:70:5d:99:14:33:10:99:0f:9c:cc:75:f7:
e5:99:ff:f5:e8:7b:c0:e1:dd:3d:52:4e:ce:fa:08:08:77:4d:
97:eb:16:11:00:50:4a:fa:c7:c7:21:92:b0:ec:b5:ca:d1:71:
09:3c:50:6c:82:c5:f4:02:fc:21:d8:0f:b6:f1:a1:d5:70:6a:
dc:72:66:c1:b5:ce:43:6b:cf:a2:04:0c:ad:5f:c4:cc:10:4a:
7d:81:07:7b:b6:a8:f4:e1:8b:ec:59:a5:99:59:ba:4b:81:fa:
cc:25:80:12:87:82:4f:b6:1b:0a:10:d2:72:5e:ab:b3:8c:18:
49:cc:63:71:61:84:d0:a7:b9:73:91:eb:70:65:6b:29:d4:a7:
c2:47:a2:cf:ad:cd:9b:93:23:42:9b:b1:b3:64:3e:db:d1:10:
a3:01:3f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:57:27 2025 by rpki-client