Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
File: qcd4RK62qrWMRgPKCCvdSngEd58.mft (raw, json)
Hash identifier: 7cy55U3jB7Sg5szp4bqhciLyjo9zSB9Ki8F86EF4yT8=
Subject key identifier: 40:8F:15:38:8A:2A:00:77:B9:1D:E7:9F:CA:31:F7:32:87:47:69:44
Authority key identifier: A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
Certificate issuer: /CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Certificate serial: 0196BF37E9A3B5B8B19948348AB04C39CD3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 12:00:34 +0000
Manifest this update: Sun 11 May 2025 12:00:34 +0000
Manifest next update: Mon 12 May 2025 12:00:34 +0000
Files and hashes: 1: 0rwOYdPXm3SF3mlaMFSkxpfBDj8.roa (hash: ghdXu6w3ahY/kqZH3juDYd4TR5LQuKoojRWncabKdos=)
2: qcd4RK62qrWMRgPKCCvdSngEd58.crl (hash: NTpgLfVNEsGksgNFg6qeDJOV/wWFq8JqTPxPFSrDk/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:37:e9:a3:b5:b8:b1:99:48:34:8a:b0:4c:39:cd:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Validity
Not Before: May 11 12:00:34 2025 GMT
Not After : May 12 12:00:34 2025 GMT
Subject: CN=408f15388a2a0077b91de79fca31f73287476944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:89:22:9a:3c:d7:90:78:b0:e9:79:76:62:c7:
a9:4a:3a:68:cc:f8:de:2e:a4:ae:d7:ed:50:c6:ea:
62:89:b2:0d:c7:4e:53:eb:92:6d:93:62:33:77:1b:
63:a7:d4:e5:5b:86:fa:5d:5f:ca:86:9b:7b:01:bf:
1a:9a:9b:cc:05:58:a2:4b:84:3d:77:6c:3d:db:c3:
a9:7a:16:94:ca:7d:e8:4d:1b:63:42:0c:94:46:e8:
6a:f8:5d:9a:62:d0:d4:9b:79:1a:66:66:21:9c:e2:
5a:1a:63:a3:53:1c:80:51:80:3e:58:16:4a:00:fd:
f2:14:6f:11:dc:fc:29:96:31:9d:b0:f3:87:98:2a:
09:dc:8d:58:c4:43:ab:8f:b7:1b:8c:0e:b3:2b:f2:
c3:2f:d6:a8:c5:ca:0e:e4:b8:26:4a:c2:e9:66:b4:
cf:b0:c6:ec:94:83:6e:7d:b7:cf:92:2a:56:83:76:
62:c2:51:30:86:b7:5c:8a:88:8a:b1:ad:8d:04:f9:
32:ee:2a:2a:46:5f:fb:a1:d7:4b:c2:88:d2:87:c2:
79:4e:99:b6:36:f1:d9:b5:12:05:a8:7d:8f:95:c7:
d6:22:30:33:ff:08:66:3f:d0:24:da:21:b3:ea:c4:
a5:65:a0:b6:1b:43:bb:50:1f:65:8c:8a:ee:fc:8e:
ec:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8F:15:38:8A:2A:00:77:B9:1D:E7:9F:CA:31:F7:32:87:47:69:44
X509v3 Authority Key Identifier:
keyid:A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:df:2e:3a:07:e3:1c:9b:82:6d:70:f2:95:79:d9:57:c0:61:
54:4d:a2:dc:75:d7:70:b8:dc:0a:f5:5f:9f:47:93:70:d2:da:
66:8f:63:91:06:c0:c6:7e:01:65:e7:c3:d5:aa:1a:41:e3:8c:
15:c7:6a:91:31:27:91:b2:ad:9e:95:a3:8c:20:3c:f5:df:41:
aa:cc:4f:06:e2:f1:8b:4e:b7:39:bb:5a:a0:58:ed:d4:2a:b2:
32:20:ae:0c:e1:58:22:f2:9e:a7:cc:57:35:89:0b:fc:0f:f9:
85:f7:30:af:5a:6d:6a:a6:f4:52:2c:11:f4:68:fc:2e:ef:e1:
38:8f:eb:dd:6b:c2:d0:ea:7d:f4:d8:be:16:3f:1b:e1:ab:fc:
f3:99:54:4d:79:16:f4:3c:5e:3e:f4:b8:ae:39:63:54:c8:31:
33:6d:27:bf:6d:5f:02:9c:3a:29:2d:d4:bc:23:eb:9c:61:40:
66:ed:54:ce:a1:9f:b5:60:99:48:fe:f7:14:70:81:40:f8:d0:
77:fc:46:aa:2b:22:5d:68:58:1c:7a:48:04:8b:e3:eb:27:ea:
92:e5:b7:d5:2e:f5:e4:00:a3:64:48:83:1d:0f:1b:95:cd:5f:
f2:b7:23:8f:40:49:02:d3:07:95:98:fc:dd:b3:65:e6:7b:cc:
d4:26:3a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:49:39 2025 by rpki-client