Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
File: qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft (raw, json)
Hash identifier: U/TiAWB6Ro1kf4amozSOIGm9Ca/GbpdyTrAHXKqfG1Y=
Subject key identifier: 35:0D:AD:46:37:6E:22:CB:58:70:4F:89:57:40:FA:2F:36:13:69:4C
Authority key identifier: A8:F1:E0:5B:D7:B3:F8:CA:9B:4A:BD:0F:89:99:12:17:9B:56:6D:F7
Certificate issuer: /CN=a8f1e05bd7b3f8ca9b4abd0f899912179b566df7
Certificate serial: 0196A01AD40A12A57E0A1D5FFD370DD21885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
Manifest number: 0C1A
Signing time: Mon 05 May 2025 11:00:34 +0000
Manifest this update: Mon 05 May 2025 11:00:34 +0000
Manifest next update: Tue 06 May 2025 11:00:34 +0000
Files and hashes: 1: qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl (hash: V4GV2eqaMdqgxlBWJ2oyeyatEsQ+aYlSa7nM/JTKd0U=)
2: qqQQvs9nXt1HjpZfeqvOvwFytUQ.roa (hash: 63Z1XFDv2thWE6305aK6hjX0RMocIGGlkCydM7bw3MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:1a:d4:0a:12:a5:7e:0a:1d:5f:fd:37:0d:d2:18:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f1e05bd7b3f8ca9b4abd0f899912179b566df7
Validity
Not Before: May 5 11:00:34 2025 GMT
Not After : May 6 11:00:34 2025 GMT
Subject: CN=350dad46376e22cb58704f895740fa2f3613694c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e4:d8:48:8b:f7:49:bb:35:eb:5e:f0:02:e1:
19:f9:00:0b:38:d7:1b:0a:99:88:77:f3:3a:e3:97:
25:c7:e4:e5:00:c4:76:a9:9a:ac:f1:86:33:e7:7e:
39:39:22:bb:f3:8c:ce:90:b6:89:02:21:5b:c3:cd:
ea:81:91:19:42:63:60:bf:dc:fd:7c:09:89:b4:15:
0f:29:e6:ad:56:f5:5d:4a:be:bd:2a:c6:8d:18:af:
3b:6a:d1:0c:74:58:02:77:f6:b8:94:cd:82:3e:db:
b4:65:e4:60:e7:e6:22:56:61:fe:d8:1c:82:c1:59:
87:ac:05:16:01:aa:7e:72:85:bb:82:a6:1d:4a:3c:
d2:19:e5:16:e6:dd:3f:4d:05:13:8d:36:17:1d:b2:
9d:7b:fb:0a:65:d5:6d:c2:9a:a0:2b:98:25:44:06:
2c:5e:7e:f5:a2:4e:c5:f4:d5:f2:31:ae:03:9e:63:
39:08:6b:fa:79:41:12:fc:09:00:be:36:f6:3c:ce:
e4:b1:ec:bf:e9:e9:1f:5c:05:c2:1d:97:23:34:ef:
7a:fa:2f:32:c1:39:08:31:a2:62:6f:3f:7e:59:f3:
68:2f:bd:76:8b:a7:37:1f:8a:92:f3:39:5f:d9:49:
88:bc:76:c6:88:47:12:65:8f:c2:4d:8b:1e:2f:25:
be:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0D:AD:46:37:6E:22:CB:58:70:4F:89:57:40:FA:2F:36:13:69:4C
X509v3 Authority Key Identifier:
keyid:A8:F1:E0:5B:D7:B3:F8:CA:9B:4A:BD:0F:89:99:12:17:9B:56:6D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:12:5f:a3:4d:5e:bd:49:f2:54:a5:1d:e0:90:d5:47:48:be:
49:a3:ce:a9:12:7e:0d:13:0a:5c:8b:7a:52:4e:6b:e7:78:d4:
4f:3d:22:c8:dd:4f:cb:a9:3b:5e:8a:8e:6e:dd:f0:a7:5a:30:
ca:94:00:66:48:13:8d:a1:88:7b:ce:4d:7d:1d:6c:ca:60:75:
a4:ae:5f:9d:d8:4b:60:fc:60:d3:1d:ab:64:c3:5c:e7:b4:8c:
2d:6c:eb:f7:78:7c:62:a1:f0:f5:54:a5:12:5e:26:9d:0a:ef:
6e:e8:ed:44:05:bd:85:52:0d:e3:89:83:8b:f2:e4:db:9e:f8:
de:f1:23:8e:44:76:22:fa:3c:30:fe:38:57:4a:55:29:b5:70:
1f:e4:9a:84:28:c1:f1:39:c3:f1:e5:8a:c7:07:28:38:24:8e:
3e:c6:97:55:ad:14:5b:1d:a1:5d:2c:8a:ad:43:0c:47:aa:a1:
94:c1:de:ae:02:b9:97:54:4c:9b:d4:5e:ef:bc:00:b2:41:99:
2e:8c:48:69:ad:7e:58:f4:3a:55:fa:30:df:43:d5:be:62:5c:
0e:9a:e2:08:a1:dc:e7:bb:b6:c4:11:06:0c:3f:b5:7b:4f:a7:
af:f0:8a:87:3a:92:39:20:34:d1:f6:cf:4d:af:05:e5:34:f6:
08:55:67:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:41:39 2025 by rpki-client