Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft
File: qqlyrDzBD3FspJhQRaXwgktgyh8.mft (raw, json)
Hash identifier: fPzwHQtrhSyWEUSdcO/evoEguk9RhbtUdAJSGNNIUqU=
Subject key identifier: 87:98:4B:AA:92:53:67:DF:5E:31:97:AF:97:F3:4F:D4:5D:BA:39:60
Authority key identifier: AA:A9:72:AC:3C:C1:0F:71:6C:A4:98:50:45:A5:F0:82:4B:60:CA:1F
Certificate issuer: /CN=aaa972ac3cc10f716ca4985045a5f0824b60ca1f
Certificate serial: 0196BECA3B8440FA696E3E7D53074E8DD12D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqlyrDzBD3FspJhQRaXwgktgyh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft
Manifest number: 40
Signing time: Sun 11 May 2025 10:00:46 +0000
Manifest this update: Sun 11 May 2025 10:00:46 +0000
Manifest next update: Mon 12 May 2025 10:00:46 +0000
Files and hashes: 1: qqlyrDzBD3FspJhQRaXwgktgyh8.crl (hash: oMbrt2GN8NhOGQLAsZt/Tcqvn/7PreZpMx+oy4+NRJM=)
2: yIGIxees9MuARoWN6t0oVINh_4A.roa (hash: geAsTIsbC4XBTKHwgmaJ0ZNmwh/Z8F8NnaAnGD8ONe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqlyrDzBD3FspJhQRaXwgktgyh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:ca:3b:84:40:fa:69:6e:3e:7d:53:07:4e:8d:d1:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa972ac3cc10f716ca4985045a5f0824b60ca1f
Validity
Not Before: May 11 10:00:46 2025 GMT
Not After : May 12 10:00:46 2025 GMT
Subject: CN=87984baa925367df5e3197af97f34fd45dba3960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1a:12:03:50:ce:24:41:ef:b1:17:f7:24:8c:
4e:ce:08:6b:03:51:bc:86:d5:fa:72:a9:9b:41:75:
41:b7:a2:bf:6b:ef:05:a3:a4:f4:55:39:9a:2c:6b:
a6:e8:bd:20:61:60:3e:2d:21:8e:60:29:84:de:ff:
3b:d5:50:a9:9e:0d:5f:ae:9d:1b:42:07:d0:69:d7:
e4:a2:85:d4:5a:35:19:c0:50:ff:df:3f:6f:c3:03:
b5:3e:59:c0:4d:32:fe:3d:ab:3f:1c:86:d5:e3:1d:
e3:50:3a:ef:09:14:52:6a:d7:b0:30:51:d8:ad:7c:
3b:52:9e:07:bc:ab:96:9a:e2:cd:e5:d0:c8:6f:19:
db:c0:d0:b0:f9:d7:1d:b7:1c:5f:9a:30:99:19:59:
45:3c:d1:44:60:45:aa:4b:0e:58:ff:4c:03:4b:67:
3e:89:48:a0:d5:fe:06:5b:0c:77:b6:71:36:fd:9d:
24:8b:e1:32:87:c6:e6:5c:70:ef:d2:2f:36:bf:c3:
88:a3:b6:f6:a3:fc:47:88:0c:cd:60:d8:a7:c3:8f:
b6:3f:e1:c1:f1:62:12:d7:2c:35:2b:63:d0:d8:2c:
81:1f:f9:d1:44:a6:a5:86:a3:58:9c:b7:ca:e9:f8:
a5:d4:55:0c:86:5f:48:ec:e8:90:0b:de:cb:a9:0f:
68:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:98:4B:AA:92:53:67:DF:5E:31:97:AF:97:F3:4F:D4:5D:BA:39:60
X509v3 Authority Key Identifier:
keyid:AA:A9:72:AC:3C:C1:0F:71:6C:A4:98:50:45:A5:F0:82:4B:60:CA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqlyrDzBD3FspJhQRaXwgktgyh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:3f:81:87:23:07:10:e5:bc:00:eb:d4:03:17:4e:9b:8c:c8:
57:aa:4f:72:f8:aa:38:24:2d:a1:d5:ec:56:53:27:46:6a:1d:
61:1e:c0:49:6b:72:e0:9c:13:c7:a5:f6:a8:a6:d6:b8:74:b4:
d5:af:b5:2d:54:54:2b:70:77:79:53:e1:61:48:47:3e:c6:25:
d2:f5:a9:fd:a4:c1:8d:ac:71:8b:57:eb:08:ca:53:cb:52:0d:
0d:46:c3:1a:46:c0:35:b0:4b:8a:cc:cc:a4:31:be:c8:56:bd:
86:b7:6f:96:38:49:24:57:a3:53:fa:fe:c6:2e:23:ba:9a:83:
c1:65:b6:63:eb:df:8c:e2:35:25:39:9f:80:ae:9d:96:ed:19:
86:aa:3a:5c:5b:e2:de:ac:e1:5e:24:e2:4e:7a:58:3c:d5:e0:
16:8d:a1:6b:f2:a4:73:c0:cf:38:d6:ff:38:16:df:4d:fb:ab:
10:34:e0:e7:5f:d7:7a:27:ab:0c:1d:c8:85:a5:25:bd:de:02:
ed:e0:1d:90:b0:d6:ce:0e:7a:13:63:cf:24:30:45:a7:5f:05:
66:37:35:d0:f5:3b:04:e4:a2:16:c3:c8:26:52:61:ac:49:2f:
cd:ae:b3:19:1a:64:b6:0b:b6:22:30:21:99:4e:fa:25:b8:66:
d6:d5:49:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:54:16 2025 by rpki-client