Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
File: qdeM56IchB2HNUJHdut_9YetBNE.mft (raw, json)
Hash identifier: 3ObsRsSPBCjemQtDkf8VqrXaz6qqUvLjDAVFlA/FvqI=
Subject key identifier: B4:13:57:09:B6:09:CD:69:AA:FE:F0:28:93:81:1E:61:CF:2C:15:94
Authority key identifier: A9:D7:8C:E7:A2:1C:84:1D:87:35:42:47:76:EB:7F:F5:87:AD:04:D1
Certificate issuer: /CN=a9d78ce7a21c841d8735424776eb7ff587ad04d1
Certificate serial: 0196BAED6AE7274CCFF14BB8588D1C93E2AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
Manifest number: 140C
Signing time: Sat 10 May 2025 16:00:43 +0000
Manifest this update: Sat 10 May 2025 16:00:43 +0000
Manifest next update: Sun 11 May 2025 16:00:43 +0000
Files and hashes: 1: mzdjW8d1g2RTbpkDyieCRb4Rhp4.roa (hash: +eSn1whG8BEnu+P7IU1V/ISLWfTeC4hd2INZhTzIgYI=)
2: qdeM56IchB2HNUJHdut_9YetBNE.crl (hash: C5H7x9Cu94cWvbMPeapfs1bG0OxoCMnP/2EVfyyCuzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:6a:e7:27:4c:cf:f1:4b:b8:58:8d:1c:93:e2:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d78ce7a21c841d8735424776eb7ff587ad04d1
Validity
Not Before: May 10 16:00:43 2025 GMT
Not After : May 11 16:00:43 2025 GMT
Subject: CN=b4135709b609cd69aafef02893811e61cf2c1594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:36:fb:6f:ff:0f:ec:f5:b1:ca:a0:a6:63:a5:
f2:a2:07:8d:e5:6f:f6:80:b9:63:d8:12:81:13:ce:
88:d7:fd:06:4a:48:9a:38:33:ca:87:44:db:9f:00:
2f:4e:0a:35:0d:30:5d:bf:8e:94:b0:18:2a:76:30:
b9:a1:62:42:e9:5d:38:7d:ca:88:1d:f1:a4:f4:05:
16:78:09:c3:31:8c:0e:86:1e:56:75:2b:9d:db:ad:
27:92:9e:2f:cc:3d:9d:c0:70:31:c8:a2:ba:85:b0:
d0:fe:2f:aa:c1:aa:f0:b4:22:4a:ba:c8:86:86:9e:
65:bc:b4:da:07:5d:c4:6e:00:de:b7:73:3d:05:f5:
aa:87:af:a1:02:9c:31:b4:84:59:f8:a8:1a:bf:41:
73:82:ac:e2:d1:44:58:8d:89:a7:57:db:64:0a:53:
73:9e:da:0c:a3:27:7e:6a:8f:8d:7d:bb:1c:89:fd:
58:80:cc:0e:76:99:4b:df:52:4d:3f:6c:0b:a4:7f:
d4:08:f5:0a:4f:16:32:17:76:1c:7f:b6:b0:b0:13:
f9:b9:11:4a:7e:f6:ba:f1:d9:b6:5a:82:7f:c3:90:
eb:e3:de:04:b6:82:d9:1b:7c:c1:f6:e7:ed:7c:ef:
60:5f:5b:7b:09:6a:52:04:82:35:65:2c:64:4a:d6:
fa:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:13:57:09:B6:09:CD:69:AA:FE:F0:28:93:81:1E:61:CF:2C:15:94
X509v3 Authority Key Identifier:
keyid:A9:D7:8C:E7:A2:1C:84:1D:87:35:42:47:76:EB:7F:F5:87:AD:04:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:4a:c5:7c:b3:c5:d0:7f:ff:0a:32:f4:05:8e:e2:0c:68:85:
9e:a1:f8:97:02:5a:e4:10:b0:be:b2:13:a1:66:30:62:6b:64:
88:83:c3:31:0f:84:9f:2c:16:73:35:b5:b2:8d:c0:ff:70:d2:
67:5c:cc:6d:cd:49:ba:3b:63:02:0c:15:48:1e:62:90:04:59:
e6:96:e3:e2:c1:12:9f:d3:24:ac:10:e9:51:96:f3:ea:cf:cd:
fd:42:b0:6f:fd:e4:f6:99:9d:99:8a:9c:15:46:66:05:32:b7:
60:65:e0:41:dc:1b:24:7f:6e:ae:04:3b:a8:82:7e:29:53:f4:
8d:07:f3:ce:ea:9f:84:7f:31:d4:de:78:db:0c:53:c0:32:7c:
6a:0e:4b:53:0c:42:9f:5a:9b:4d:c8:65:d6:ba:57:7b:ba:38:
8c:53:84:83:cc:75:1e:ed:dc:89:5a:01:f5:ff:18:4a:ae:74:
76:32:28:1c:67:63:d9:03:21:67:ed:52:5a:8c:16:5b:6c:22:
37:16:4d:c0:73:73:fd:09:5f:25:22:a6:84:7c:f2:51:62:c9:
7e:ab:34:f8:38:8b:78:f1:b5:c6:75:fa:56:88:31:af:fc:bf:
b8:64:24:6f:f8:2e:f3:a0:21:77:38:3c:05:4f:ca:b1:91:c7:
ad:8b:40:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:29:55 2025 by rpki-client