Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
File: qcxE1_HQ3Apavyd2SVth3kgZkl8.mft (raw, json)
Hash identifier: Xxr22DChjZP14AumvlrzB5cQnqsjP6tu9zwBbqa7sqw=
Subject key identifier: E1:3F:8F:9B:65:F2:36:04:31:C0:5B:35:24:F2:02:19:26:BF:A6:0D
Authority key identifier: A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
Certificate issuer: /CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Certificate serial: 0196A35302465B05436CA8B280AF5DC9FC61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
Manifest number: 10C3
Signing time: Tue 06 May 2025 02:00:48 +0000
Manifest this update: Tue 06 May 2025 02:00:48 +0000
Manifest next update: Wed 07 May 2025 02:00:48 +0000
Files and hashes: 1: Jo7QZBDB32wXW0Iw1K7QdXNowZk.roa (hash: K7AhFGZtd/rNskeYTg//KKyYm9N8IOSqZd1eL/nYFI0=)
2: qcxE1_HQ3Apavyd2SVth3kgZkl8.crl (hash: pjsMpxd71aCFrLnNsu5fz8zvs7SkmA2gxA2npVxjD7Q=)
3: s7SwYsQxw0lQy1OCUyDcPA5nRsQ.roa (hash: oInMskbU1ysq45NZWBKPFPJeOmbD2WauFvK9W3eBwaY=)
4: vFfYVEKCcc2PyT6NhaZHTqsCyRc.roa (hash: IviSD1XdrOD9s0OcxHYtTVilTBOr8uyUO7SjAFCSO3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:53:02:46:5b:05:43:6c:a8:b2:80:af:5d:c9:fc:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Validity
Not Before: May 6 02:00:48 2025 GMT
Not After : May 7 02:00:48 2025 GMT
Subject: CN=e13f8f9b65f2360431c05b3524f2021926bfa60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:83:f5:c4:8b:13:48:73:6e:cd:72:9a:04:ac:
bd:a8:e9:c0:1f:2f:41:c6:f8:60:71:b3:95:6d:ba:
2e:ca:9c:0e:b4:c0:e9:2e:81:4e:79:22:02:15:e7:
66:bd:65:00:2e:a2:93:12:27:44:3f:bc:0d:65:0f:
83:a3:c1:43:56:c7:6e:b1:d2:df:49:a7:5a:53:5c:
b2:96:d9:21:cb:5a:16:80:68:2f:ad:00:e5:33:ce:
c7:51:bf:d6:8f:d9:15:5a:2b:d9:5a:b0:8f:13:91:
19:c3:ea:3d:3a:7a:fc:93:19:c8:6a:05:e6:f4:e4:
74:d5:08:45:88:17:38:19:0c:c8:60:a1:26:ab:b4:
af:e3:5a:c9:8d:89:77:fd:77:de:37:85:4d:61:7e:
76:7e:ca:8b:ed:3f:d6:40:33:2f:7a:b8:28:7f:de:
04:bc:63:9d:8f:03:9f:4b:c6:8f:3a:1d:b7:29:73:
c6:0f:00:10:ba:08:73:8e:7a:2c:49:a3:80:b0:40:
d1:cd:f6:f2:7e:10:dc:82:52:57:57:e7:36:7f:2e:
80:75:ca:c4:63:39:8a:4e:a7:f3:d1:7b:2d:cb:8d:
8d:8c:58:3f:97:48:c9:85:cd:9e:4c:2d:8a:0c:fc:
8a:67:3d:52:b4:78:0c:86:5a:44:10:fb:a5:79:2d:
f1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3F:8F:9B:65:F2:36:04:31:C0:5B:35:24:F2:02:19:26:BF:A6:0D
X509v3 Authority Key Identifier:
keyid:A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:87:8d:d1:53:67:71:ce:f9:30:7b:0c:0f:fe:75:a9:cb:cf:
00:56:4e:59:a3:69:f9:fb:81:84:ab:34:a8:0c:d1:24:0a:dd:
78:63:b7:51:99:c2:37:3c:63:b3:ab:45:1b:0d:a3:92:38:ab:
15:4e:9c:9a:89:ad:94:92:5e:1e:24:6c:cf:35:72:ae:56:14:
22:a3:2a:a1:3b:22:32:f4:e3:b0:f8:57:d1:06:50:da:3b:fd:
d1:59:58:db:ec:dc:ee:a8:be:37:47:d3:ca:04:9b:5c:bb:b8:
7e:90:88:0b:f8:8e:bb:60:a4:db:02:c7:b3:a9:22:09:3b:c0:
2c:0c:3f:b7:72:42:03:66:8a:d5:b8:49:c3:ef:c0:aa:10:6e:
92:f6:47:56:2d:5d:c2:9e:41:61:71:35:fd:f6:22:c6:30:17:
2a:15:9d:91:1f:58:8b:ee:80:33:78:e2:80:b6:45:c6:38:57:
44:86:02:b8:71:5b:d2:fd:80:f8:fa:83:1f:33:9c:5a:90:d0:
b5:c4:ea:b0:6b:af:e0:c1:db:d2:dc:1a:1f:59:b8:33:3e:3d:
1e:1a:29:af:1e:29:99:4b:7d:24:45:f8:66:fa:91:8f:1a:8b:
4a:cd:9e:ba:47:4b:c4:0a:56:cd:d8:cc:8f:f9:1c:50:d8:e1:
be:c8:c2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 11:54:16 2025 by rpki-client