Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
File: mqwNo1EAZoBg0w8XPWEC4YLRueo.mft (raw, json)
Hash identifier: 7PgI6bYkRTDso868hfVgDzPpEtrh8aTW//OJGA9a2zA=
Subject key identifier: A4:9F:B8:7D:7C:99:A0:0B:49:81:23:44:27:4A:D5:35:A6:02:E2:B6
Authority key identifier: 9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA
Certificate issuer: /CN=9aac0da35100668060d30f173d6102e182d1b9ea
Certificate serial: 0196AE44884A489BA15710194116E82FF4BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
Manifest number: 0F25
Signing time: Thu 08 May 2025 05:00:48 +0000
Manifest this update: Thu 08 May 2025 05:00:48 +0000
Manifest next update: Fri 09 May 2025 05:00:48 +0000
Files and hashes: 1: mqwNo1EAZoBg0w8XPWEC4YLRueo.crl (hash: sCTXjrMUR8qihTsRJphzpoeEAzOARAx3VGycBGZK4dg=)
2: x0_V_asfztSp2_6YK6MZt_fACYU.roa (hash: gFs60QtpFwMnh9KBA4cwsowTM45NdniGhBygLWcOD1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:44:88:4a:48:9b:a1:57:10:19:41:16:e8:2f:f4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aac0da35100668060d30f173d6102e182d1b9ea
Validity
Not Before: May 8 05:00:48 2025 GMT
Not After : May 9 05:00:48 2025 GMT
Subject: CN=a49fb87d7c99a00b49812344274ad535a602e2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:58:bb:4b:dd:32:74:6e:c8:91:9c:28:a5:55:
4e:c0:d4:b5:67:0a:45:39:d0:ac:70:3b:cb:7e:c0:
8b:80:f9:07:1f:fc:38:ae:34:37:61:91:7c:39:0e:
d2:a4:35:a3:9d:f4:9b:3b:4c:c2:43:01:79:af:52:
d8:d7:d7:dd:4c:81:d1:2a:f9:e4:7f:0f:52:cd:76:
f3:72:61:63:14:86:3e:6a:b7:c0:92:7e:3e:44:54:
b5:08:fc:1b:ef:f2:b9:1f:d9:14:12:54:65:dc:4f:
47:97:8f:fd:db:12:4e:6b:92:a7:d1:3c:20:42:33:
8e:3d:4a:af:ce:30:94:c6:53:19:8f:60:78:9f:3a:
1d:73:03:80:11:7a:65:96:b1:40:48:4f:95:d6:d0:
7a:d2:c2:d0:a9:65:bd:1f:45:3e:35:c5:53:90:10:
27:82:6a:bb:02:45:bd:6f:c2:2d:94:b5:11:b2:99:
20:68:5d:c1:07:af:db:f9:b9:ca:03:82:00:48:8e:
4d:b9:d0:f2:10:80:21:ad:77:c5:cc:d7:4c:b9:65:
67:7e:7e:6f:43:34:ff:e2:18:10:83:3a:06:fb:46:
d2:62:34:dd:20:8f:b1:10:04:36:1e:c5:cc:33:58:
1c:e2:42:e6:7d:7d:ee:91:e1:6f:06:1f:20:fb:e6:
c3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9F:B8:7D:7C:99:A0:0B:49:81:23:44:27:4A:D5:35:A6:02:E2:B6
X509v3 Authority Key Identifier:
keyid:9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:0c:f7:d6:f6:f0:af:29:a9:c1:1d:5d:4d:1b:b8:52:f0:d1:
4c:ee:d6:e9:51:ce:aa:05:ba:c0:9a:18:7a:55:a7:dc:a5:b2:
13:ce:c8:4b:e0:33:68:46:c3:16:04:5c:6d:0c:f7:0b:29:b6:
53:de:06:57:b6:16:04:21:1a:03:ad:f3:7a:22:40:2f:02:bc:
1e:ac:6b:ed:5c:34:06:10:2f:11:65:08:54:9a:08:7b:af:4e:
6d:3f:67:ea:79:56:56:4f:b8:46:c5:b6:78:51:4b:ae:c6:25:
37:fe:73:8b:c3:20:5b:63:26:be:ae:73:be:a4:4e:47:74:16:
07:fb:03:3f:3a:51:9e:4e:56:83:72:93:e0:5f:8c:53:45:74:
9a:2a:fa:52:77:53:cd:c3:0c:33:b1:92:48:99:b1:bb:23:03:
7e:ae:ce:4d:1b:4f:3d:63:3d:28:f1:e8:e7:c6:a3:b4:bb:b9:
1b:9c:69:7a:6d:ba:79:38:de:c5:f2:84:76:cd:c0:64:36:ff:
d5:3e:d8:ec:9e:97:ed:ff:e1:f0:c7:c2:7d:79:e1:ee:43:1e:
30:ea:a6:0a:25:4b:ae:ce:ea:b6:8c:f5:5e:e8:be:e5:ba:ec:
18:7c:b5:d9:b1:8f:19:32:ba:f6:53:4e:e8:3f:5f:bc:29:01:
19:40:e5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:04:15 2025 by rpki-client