Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
File: qkHJOeqVoh87dCkB3-BfJqV3dYE.mft (raw, json)
Hash identifier: Hkq/j0RkQ8qkioSpGTG4le095EKBwndPxpcvQYrI0FA=
Subject key identifier: DC:4A:D1:6C:8B:35:01:52:12:A4:7F:7F:26:6A:6A:09:4F:AD:BD:22
Authority key identifier: AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
Certificate issuer: /CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Certificate serial: 0196BA48E6F292D119051095E5BE3D271765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
Manifest number: 0A15
Signing time: Sat 10 May 2025 13:01:01 +0000
Manifest this update: Sat 10 May 2025 13:01:01 +0000
Manifest next update: Sun 11 May 2025 13:01:01 +0000
Files and hashes: 1: qkHJOeqVoh87dCkB3-BfJqV3dYE.crl (hash: lZhEHogpQB6cXcwRlIPh9EEJSJi2y/w6hfLrO0z93WM=)
2: wcccpGaeYTilF5ncbceAk7mBvqQ.roa (hash: gOA2BhosHOf6qCEMFAHb8yTCso/K7yQdwGzJmIy7AF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:e6:f2:92:d1:19:05:10:95:e5:be:3d:27:17:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Validity
Not Before: May 10 13:01:01 2025 GMT
Not After : May 11 13:01:01 2025 GMT
Subject: CN=dc4ad16c8b35015212a47f7f266a6a094fadbd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7a:21:f5:b3:b9:17:44:47:22:58:95:13:99:
4d:b6:8f:61:bf:5d:d3:3e:a2:f7:79:1c:05:86:0c:
ab:64:d4:52:39:94:27:5a:78:05:87:fe:68:e1:79:
81:5a:65:5d:d8:75:93:56:fc:c4:50:dc:74:48:53:
8d:f2:d6:1e:f2:cd:c4:5c:b5:15:5c:4a:83:9e:90:
ba:3a:2e:e6:c6:dd:37:e2:e4:8b:10:c4:0e:7e:e7:
da:6d:5c:36:e8:2d:b4:bd:e3:47:5b:20:15:fe:25:
68:5f:ef:57:ea:c1:e6:c0:38:a9:b2:4b:b2:ec:1a:
3a:58:dd:0c:20:a6:b0:dd:ee:af:9a:59:12:ea:8d:
a5:f5:db:4d:4a:d5:16:3d:9b:14:07:06:1d:6e:9d:
34:00:86:9f:89:11:3c:f8:0d:af:0b:16:1b:a3:b6:
0d:4e:a5:8c:31:2b:85:6a:49:46:11:2f:e7:ad:c0:
8a:69:0b:f5:06:bb:4f:5f:da:aa:02:79:f9:02:38:
18:dc:8e:1e:c8:d2:37:0e:76:6f:3f:27:97:9b:fb:
c5:78:44:21:69:89:6c:85:5b:5a:63:a3:93:b4:da:
8c:be:66:03:58:4c:a8:73:98:3c:c3:62:2b:07:82:
63:21:8f:c7:b0:5c:50:4a:37:ba:5a:d6:db:dc:89:
85:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4A:D1:6C:8B:35:01:52:12:A4:7F:7F:26:6A:6A:09:4F:AD:BD:22
X509v3 Authority Key Identifier:
keyid:AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:6e:67:ee:d7:ad:2f:04:49:1c:26:0c:14:c2:da:29:6a:ea:
97:e8:1f:de:fa:81:f2:f0:d8:38:77:3e:9b:34:04:23:e8:01:
4e:bf:32:71:de:27:c4:e2:0a:e0:ae:27:e0:da:15:14:4d:6a:
a9:21:49:aa:a3:18:da:cd:86:cf:99:3d:a7:27:9f:ba:6a:d6:
40:2f:72:89:f3:4c:a9:5e:01:56:4c:d6:03:a1:e9:c8:75:19:
85:4a:71:a2:28:a6:5a:12:ec:ef:c9:7e:2f:db:59:e8:6e:ce:
88:2b:23:29:86:44:6b:1e:c3:71:01:82:3b:f9:44:ec:40:de:
b0:60:ac:73:b1:2f:d4:36:85:5a:42:98:c9:be:b1:6c:1b:ab:
7f:25:02:79:60:a7:3d:66:16:18:98:70:67:6e:2b:00:7f:03:
4b:99:f9:af:75:6e:86:91:c5:ab:be:d1:19:0f:d3:49:2b:28:
25:a4:1f:ae:8b:39:ec:e3:11:22:95:d9:cf:84:d5:6c:ae:6d:
90:b0:cc:ea:ea:c0:68:61:f2:30:f0:5b:aa:29:cc:65:76:37:
49:ad:0e:10:22:1e:ce:9f:56:c4:d4:fb:da:83:72:39:c3:e7:
8b:b7:01:53:51:35:e2:05:72:9e:7f:37:3f:17:9c:0c:bd:0e:
38:b6:98:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:50:04 2025 by rpki-client