Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
File: qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft (raw, json)
Hash identifier: xnGB3IyUZpYmIss+P+i5AYA3n1AFG1p+8hUzcyj5LHQ=
Subject key identifier: 7A:B1:C6:1F:BB:8F:7A:F1:F9:3E:7D:90:03:D9:03:83:10:BD:49:38
Authority key identifier: A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
Certificate issuer: /CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Certificate serial: 0196B822EAEF7A9638DF5F760C311F7E3C7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
Manifest number: 061A
Signing time: Sat 10 May 2025 03:00:18 +0000
Manifest this update: Sat 10 May 2025 03:00:18 +0000
Manifest next update: Sun 11 May 2025 03:00:18 +0000
Files and hashes: 1: 8CcKJiF0r4FrDqB9K7MCSFJJvag.roa (hash: oH5satYFVvZ45Q+JWd3Hf90Jew1mrnQWjIvCBL11FrU=)
2: qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl (hash: 0jzTjPbTwTiLGzazJvqW6ihmWvHSmC0/htAZZoupyKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:22:ea:ef:7a:96:38:df:5f:76:0c:31:1f:7e:3c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Validity
Not Before: May 10 03:00:18 2025 GMT
Not After : May 11 03:00:18 2025 GMT
Subject: CN=7ab1c61fbb8f7af1f93e7d9003d9038310bd4938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d4:3f:3b:4d:88:23:82:48:77:95:dc:7d:78:
43:88:42:5c:70:71:ab:a5:b2:21:52:04:45:08:76:
82:cd:eb:ae:38:62:55:3e:bb:32:12:7e:92:25:f7:
d9:b8:79:20:1b:9f:1d:d1:8d:e9:65:4a:93:a2:fd:
8a:77:0c:87:24:3e:91:2d:73:47:93:0c:4c:c5:e1:
e9:fa:35:38:bc:17:63:9f:f7:58:75:51:68:0a:86:
4e:5a:85:00:57:2c:da:1d:94:7c:be:c6:df:5e:a4:
8d:b9:fb:5e:84:25:14:e9:be:7f:8e:cc:86:c9:9e:
3a:a0:8f:92:81:ee:ff:b1:51:a6:f9:95:96:18:af:
05:19:0f:30:00:7f:39:37:25:69:65:16:75:0d:58:
96:d7:3c:0c:76:12:94:dc:4f:42:79:90:de:ef:e0:
8f:da:cd:92:4c:7a:c2:a9:ce:c6:a2:bd:9e:dd:3c:
5e:35:aa:ca:44:d2:4f:41:de:5c:9f:6e:6e:3d:c0:
9c:8e:e1:4e:ec:07:b0:63:14:52:96:84:0a:97:b7:
1e:db:20:ee:20:ea:cb:54:fe:bc:25:04:63:fd:ea:
89:0b:c9:8a:50:be:b7:d1:5d:d9:bd:1e:5c:22:27:
39:70:ad:d0:32:48:f9:fe:e2:3a:01:9d:47:4a:90:
5a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B1:C6:1F:BB:8F:7A:F1:F9:3E:7D:90:03:D9:03:83:10:BD:49:38
X509v3 Authority Key Identifier:
keyid:A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:51:51:04:8e:21:76:fa:9a:00:68:6d:56:cb:20:fa:02:da:
b3:55:a3:3e:31:d3:30:20:b6:2e:e9:63:ca:49:8d:c0:15:4f:
20:91:32:f4:f1:da:1b:f8:81:5b:a0:2d:47:40:86:f5:3c:bb:
14:61:fa:9a:dd:31:ce:11:48:9d:60:9f:70:78:ef:15:6b:ac:
e6:b4:2a:fa:5b:31:0b:92:bc:7b:f0:46:87:df:1b:fb:b1:b0:
3b:c3:f2:8d:0f:ba:54:92:c6:6e:66:ee:5c:66:0e:85:de:c0:
03:53:6c:0e:9a:ac:f9:0a:a1:17:ca:cf:af:dc:25:f3:95:1b:
d0:94:db:d8:a4:97:f1:4f:9b:b4:ca:8c:e9:0b:a8:4f:ba:04:
8e:ec:8e:74:79:01:4d:d0:23:a1:1c:9c:f9:73:b6:0b:13:e5:
e8:45:df:b5:6c:51:bf:03:77:b4:24:7b:86:77:97:8a:31:60:
8f:cb:26:36:e5:fc:ed:83:9a:f1:c3:39:b9:87:14:ba:0f:d0:
58:46:28:ce:07:2c:55:3a:6a:31:28:b7:17:b2:ce:12:ba:b6:
26:99:11:57:1a:2f:8d:64:c7:e5:85:f7:a6:e1:6a:62:42:e0:
8a:ca:d8:78:a8:38:ed:90:d2:5e:e4:58:25:b5:20:15:60:02:
51:ff:c8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:20:54 2025 by rpki-client