Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4a3068-ea9d-4966-be55-7943d9a79bd2/1/Qn35XuEKKtTq8ILfrBWYOLN9NFA.mft
File: Qn35XuEKKtTq8ILfrBWYOLN9NFA.mft (raw, json)
Hash identifier: Lg4GQIIYTCrclbf43yZfw3689VAxWDc8vePwdiW69fw=
Subject key identifier: A0:7B:8A:B0:AA:BF:8A:A4:B7:76:87:3B:F7:02:F9:FA:10:0A:5F:FE
Authority key identifier: 42:7D:F9:5E:E1:0A:2A:D4:EA:F0:82:DF:AC:15:98:38:B3:7D:34:50
Certificate issuer: /CN=427df95ee10a2ad4eaf082dfac159838b37d3450
Certificate serial: 0196D88A92E4B8D0F5C43FCB559F2525D659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qn35XuEKKtTq8ILfrBWYOLN9NFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a3068-ea9d-4966-be55-7943d9a79bd2/1/Qn35XuEKKtTq8ILfrBWYOLN9NFA.mft
Manifest number: 0599
Signing time: Fri 16 May 2025 10:01:22 +0000
Manifest this update: Fri 16 May 2025 10:01:22 +0000
Manifest next update: Sat 17 May 2025 10:01:22 +0000
Files and hashes: 1: BR-wwst0Mwoj4cW4aMMLkST0T08.roa (hash: KhuoTa1EwW+NDwJopflLn+SOxpsU8qTU0jm6Bsplu/Y=)
2: Qn35XuEKKtTq8ILfrBWYOLN9NFA.crl (hash: 5RCoFiSNvdA18p+lSLEhfc8ge5LB/yhItHsaIbHQggQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a3068-ea9d-4966-be55-7943d9a79bd2/1/Qn35XuEKKtTq8ILfrBWYOLN9NFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4a3068-ea9d-4966-be55-7943d9a79bd2/1/Qn35XuEKKtTq8ILfrBWYOLN9NFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qn35XuEKKtTq8ILfrBWYOLN9NFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:8a:92:e4:b8:d0:f5:c4:3f:cb:55:9f:25:25:d6:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427df95ee10a2ad4eaf082dfac159838b37d3450
Validity
Not Before: May 16 10:01:22 2025 GMT
Not After : May 17 10:01:22 2025 GMT
Subject: CN=a07b8ab0aabf8aa4b776873bf702f9fa100a5ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2a:e5:44:95:96:9a:57:e7:fb:3f:d6:6a:c6:
87:11:83:16:d3:0a:6b:33:e6:d9:7d:02:51:b0:c9:
14:57:af:bd:63:54:e6:52:6e:22:b2:04:f9:44:f7:
d0:84:6b:58:80:2a:39:7b:33:59:d7:33:43:4a:ef:
2a:78:3b:3a:36:a8:9c:dc:05:75:7f:7d:e7:f8:bf:
97:76:30:a2:22:3e:89:f3:5d:2b:08:85:d7:f2:12:
43:be:87:fc:78:91:19:f2:b1:bf:7c:e7:d6:9f:b4:
e2:95:4e:70:bd:b9:17:5b:e3:37:5e:3b:0b:fe:1c:
98:fa:02:6f:ce:57:13:d0:37:9b:4d:f1:28:37:4c:
75:a0:2e:56:88:05:2c:40:10:15:bf:46:29:fc:9d:
55:6e:ed:e8:62:e5:22:0b:95:3b:76:d7:5f:86:76:
08:e6:25:f0:aa:1a:a1:5d:be:df:a7:32:46:d3:db:
d8:9e:c8:0e:fd:30:2d:08:45:72:4b:9b:90:6a:3d:
84:79:90:79:69:c9:45:c9:7c:ae:e8:0d:13:e8:d0:
f6:23:3c:07:3e:ca:23:53:31:f7:79:45:e9:93:9c:
06:e2:91:b9:37:f4:26:78:58:fd:0e:cf:8c:7c:84:
3b:ec:2b:42:d1:4b:d4:7c:a5:5a:a2:4e:83:10:c2:
f9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7B:8A:B0:AA:BF:8A:A4:B7:76:87:3B:F7:02:F9:FA:10:0A:5F:FE
X509v3 Authority Key Identifier:
keyid:42:7D:F9:5E:E1:0A:2A:D4:EA:F0:82:DF:AC:15:98:38:B3:7D:34:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qn35XuEKKtTq8ILfrBWYOLN9NFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a3068-ea9d-4966-be55-7943d9a79bd2/1/Qn35XuEKKtTq8ILfrBWYOLN9NFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a3068-ea9d-4966-be55-7943d9a79bd2/1/Qn35XuEKKtTq8ILfrBWYOLN9NFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a2:69:36:45:ff:d2:92:dc:11:cc:67:1b:91:0b:d6:09:5c:
1f:73:ee:1f:75:80:e8:42:dc:09:67:cc:16:ba:f6:78:f7:cc:
9b:25:53:6c:c9:f1:48:55:1c:f8:4a:97:5c:ac:24:76:d3:73:
d8:3a:6e:80:57:7b:1c:6b:09:10:da:b5:fa:62:a8:a2:ad:b8:
7c:f2:e3:50:62:e0:92:e1:60:b9:c3:8e:de:fd:74:ee:02:49:
d3:07:8f:24:28:76:34:21:56:d1:01:09:34:33:c1:bd:24:a4:
01:a5:9f:99:07:45:6f:7d:9a:6c:30:13:19:3e:b2:d4:d2:75:
82:74:f3:f5:d2:fc:73:70:48:7f:72:f2:42:84:7e:d9:62:26:
17:b6:a7:03:ff:b9:16:bb:3e:64:cb:b0:f6:9f:4a:de:6d:b8:
45:f1:18:3f:0b:5b:53:b6:d2:ed:21:e1:f9:b6:d5:9f:02:21:
3f:87:f3:1d:aa:e6:79:9b:18:02:d4:04:41:6c:94:2e:07:9c:
fd:00:85:0d:68:0d:c3:b0:34:66:5b:6b:7c:04:e5:d6:fe:bf:
bd:a3:35:20:fc:05:70:67:e7:52:30:e7:25:56:cf:8a:79:5e:
6f:31:e4:43:18:72:96:a9:22:09:ce:7b:5d:bd:da:56:7e:fa:
be:27:fb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:14:30 2025 by rpki-client