Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
File: qmdFUZMj2MLZPBsQe_hfYZM8cco.mft (raw, json)
Hash identifier: oHVqiPj1vZF7aq04Uzr13MYeIUvr2SH16Q66pBmIjdg=
Subject key identifier: 86:0B:28:39:CD:B1:06:AA:6A:75:60:33:05:68:8B:CB:48:CD:D5:55
Authority key identifier: AA:67:45:51:93:23:D8:C2:D9:3C:1B:10:7B:F8:5F:61:93:3C:71:CA
Certificate issuer: /CN=aa6745519323d8c2d93c1b107bf85f61933c71ca
Certificate serial: 0196B6A2D9B07FA207868188BE5D9CF57E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmdFUZMj2MLZPBsQe_hfYZM8cco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
Manifest number: 04A2
Signing time: Fri 09 May 2025 20:00:47 +0000
Manifest this update: Fri 09 May 2025 20:00:47 +0000
Manifest next update: Sat 10 May 2025 20:00:47 +0000
Files and hashes: 1: 7ASNkD6Hgbsnqd8_wWp-_aAYGqE.roa (hash: LJjg55n4xVGP9vBgMbP2ScHffsmfqIcNY661vZ01XEY=)
2: qmdFUZMj2MLZPBsQe_hfYZM8cco.crl (hash: MXesbuJRydgklbZ2IwUMHzeg1XIUmKjzdQoNubHVoUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmdFUZMj2MLZPBsQe_hfYZM8cco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:a2:d9:b0:7f:a2:07:86:81:88:be:5d:9c:f5:7e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6745519323d8c2d93c1b107bf85f61933c71ca
Validity
Not Before: May 9 20:00:47 2025 GMT
Not After : May 10 20:00:47 2025 GMT
Subject: CN=860b2839cdb106aa6a75603305688bcb48cdd555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:4d:91:ab:19:5c:94:25:a0:50:2f:16:34:
74:b8:a5:97:5e:cf:ba:4e:bc:e5:18:03:a3:b0:17:
64:ab:03:4b:34:05:5a:88:9b:1f:a1:9e:35:fd:ed:
c9:1c:6b:c6:24:3f:20:f7:6c:e7:62:56:95:70:54:
74:d4:2f:0b:6b:ac:e9:0f:96:5f:f1:b6:fc:ea:39:
23:bc:dc:e3:0f:9f:86:4f:7d:c5:b5:d3:46:97:b6:
10:31:71:4a:b5:92:79:dd:55:ce:84:e8:2e:60:f2:
81:bd:04:8a:d5:78:34:14:56:35:fa:ac:14:98:3e:
ac:28:50:03:22:eb:17:a8:39:36:95:2e:06:02:a3:
49:f7:9d:3b:2c:3a:d5:31:f6:28:e7:3e:ab:dc:7c:
b4:ef:96:cc:cb:a5:f2:cc:f0:8d:2f:8d:74:0d:03:
ba:0c:9a:e6:43:1d:91:0d:87:5b:51:22:4e:84:39:
e5:8f:8d:92:b6:7e:2e:e9:54:e2:d8:c0:e9:5b:a9:
69:28:03:54:67:11:ab:71:59:0a:63:98:97:1f:36:
6b:7f:f6:ab:32:0a:06:46:a9:ae:d7:b3:5a:df:38:
67:2a:fe:cf:aa:24:cd:fd:c5:da:6c:17:5e:8c:85:
e6:aa:a3:76:45:63:27:0d:36:ba:87:eb:c4:79:19:
ba:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0B:28:39:CD:B1:06:AA:6A:75:60:33:05:68:8B:CB:48:CD:D5:55
X509v3 Authority Key Identifier:
keyid:AA:67:45:51:93:23:D8:C2:D9:3C:1B:10:7B:F8:5F:61:93:3C:71:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmdFUZMj2MLZPBsQe_hfYZM8cco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d3:f7:36:a3:28:10:f7:bd:5d:11:62:52:2c:e2:26:1c:3b:
5a:03:c6:6e:71:18:39:1a:bf:bc:98:3f:02:1c:76:b6:b0:73:
d9:7d:dc:e8:48:4a:f1:25:7e:35:f9:af:1f:72:0c:13:76:aa:
c1:30:0f:38:1d:8a:03:74:1c:14:4e:b5:c4:28:de:bb:9d:ae:
54:75:f1:7d:99:08:5a:26:56:fe:c9:46:25:be:0b:99:72:02:
be:42:6c:5b:19:8c:03:34:d2:77:16:19:12:4a:28:af:17:95:
24:09:4a:29:07:9c:0e:d2:3c:d0:cf:43:4c:d7:63:47:60:ef:
d2:ba:49:b2:f6:94:53:0d:52:7e:35:78:bb:b6:b8:12:35:b1:
12:a2:9c:fe:61:5b:91:a3:92:d6:81:a2:c2:9b:06:99:10:1c:
73:9a:75:b7:e4:2e:4b:ce:1d:d8:6e:22:70:0f:95:dd:4c:46:
fc:66:67:2b:85:a8:7d:01:e9:8d:41:08:88:1d:a2:45:09:43:
db:c4:16:37:b3:19:b2:54:7c:f5:02:e3:e9:32:72:27:74:63:
14:21:37:5a:bb:95:38:c1:7d:f7:39:80:57:f5:61:d1:bb:d4:
16:c2:a6:5f:6e:9b:ee:71:ee:29:dc:5c:8b:fc:01:97:8f:15:
6a:5f:a3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:34:38 2025 by rpki-client