Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
File: Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft (raw, json)
Hash identifier: oWo3hYkQtY72dIoQlxF9h2RDA+Q1tHLTLoWe6nJDPp4=
Subject key identifier: D7:6D:2F:D6:B5:56:DC:7C:A1:FB:DF:AC:17:B6:0A:AC:57:F4:A6:49
Authority key identifier: 43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB
Certificate issuer: /CN=4367547d851e3cd776cd33290b2454acc0e851bb
Certificate serial: 0196AA305164E28E0E08C801A246F37ABD8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
Manifest number: 01B1
Signing time: Wed 07 May 2025 10:00:15 +0000
Manifest this update: Wed 07 May 2025 10:00:15 +0000
Manifest next update: Thu 08 May 2025 10:00:15 +0000
Files and hashes: 1: FQG0ejLSzUt4iA-ikpx0cAR2OKU.roa (hash: kXmpv8tYACCxfjQibnimCHCR1m+/Ufm2bbWZrvhXv8Y=)
2: Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl (hash: H0po3At7s8Bc83n11EvO0iQrhljQqOzdchP3YM2VN50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 10:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:30:51:64:e2:8e:0e:08:c8:01:a2:46:f3:7a:bd:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4367547d851e3cd776cd33290b2454acc0e851bb
Validity
Not Before: May 7 10:00:15 2025 GMT
Not After : May 8 10:00:15 2025 GMT
Subject: CN=d76d2fd6b556dc7ca1fbdfac17b60aac57f4a649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:05:5b:6e:16:22:b0:07:2b:2c:94:5c:14:32:
82:81:5f:14:fb:1c:14:52:c1:bc:07:b9:f2:f0:9c:
3d:47:4b:af:05:74:27:30:12:61:a9:35:cc:5a:58:
cf:87:92:ec:4a:6c:93:ae:26:a6:74:f4:c7:49:00:
13:3d:76:d4:63:8a:ba:93:cd:02:9e:6d:98:15:3d:
c4:3b:e8:02:ef:82:64:4a:4e:00:68:48:af:01:1d:
49:20:e4:bc:5d:a5:05:c1:dd:4d:8d:1f:38:a7:dc:
4e:0a:64:62:90:be:6a:96:1f:7d:8f:8b:33:48:9d:
4b:b8:2a:0e:72:4b:b1:3c:55:ce:3e:07:77:a9:7e:
e9:44:01:94:26:9a:6a:3a:65:e3:f1:a2:47:c4:7e:
e5:d1:2e:f9:d5:6c:57:f5:9d:bb:7d:c1:6d:c0:b9:
eb:e8:f7:11:4b:32:89:d0:ab:7e:f2:8a:c5:41:03:
ee:0f:d9:5a:59:a3:ff:b0:91:c3:95:7e:49:35:0a:
36:4d:a6:8c:4e:36:33:c4:7a:5e:c2:cd:89:e6:f5:
b2:0b:96:cf:29:26:75:b5:f5:79:ce:eb:c4:38:a1:
9e:22:8d:fb:06:4b:c0:7e:17:45:3b:a7:3c:e1:b3:
b3:a2:87:bd:a9:47:b7:0c:5d:5a:31:30:f2:2f:58:
91:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6D:2F:D6:B5:56:DC:7C:A1:FB:DF:AC:17:B6:0A:AC:57:F4:A6:49
X509v3 Authority Key Identifier:
keyid:43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:45:a3:94:31:cc:69:54:68:97:27:52:1d:4c:0e:d9:7a:fb:
ba:2a:68:1f:aa:82:29:0b:f7:2a:68:87:6f:61:56:e4:87:a3:
71:f6:f5:d8:6f:a0:c8:34:2f:fe:75:d3:eb:dd:0e:60:70:47:
d2:dd:05:1a:91:a9:50:d3:3b:44:fb:76:e6:c2:33:b4:de:33:
cf:21:e4:e9:93:58:37:32:eb:b7:a6:b4:91:21:4c:f4:83:50:
f2:b9:ab:a5:7e:d1:da:b3:f4:d2:b6:d8:91:25:a7:ce:8e:8f:
25:4d:40:e6:d0:a9:00:86:d9:72:b4:fb:58:8a:cc:87:4d:17:
6a:3f:a7:29:f1:49:0d:81:56:88:ef:c5:1a:1e:67:cd:83:72:
9a:4a:5b:95:48:f9:aa:1a:f2:ad:bd:d2:fd:a1:07:c5:b8:80:
44:53:28:01:b9:37:1d:8c:f0:df:63:2d:d6:7b:27:34:d1:4b:
44:b8:d5:c7:c3:5b:27:71:15:8e:11:ad:3c:0b:18:6f:ff:a0:
bb:24:52:f1:b2:81:c6:e5:75:c4:ad:4f:3b:bb:1c:be:48:a5:
bc:00:b1:49:4a:65:b0:36:15:3e:04:35:da:c2:1a:7c:39:63:
80:92:4a:56:6e:21:bf:cf:e8:e4:93:8c:a0:f7:4d:16:30:57:
e8:65:51:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 19:26:39 2025 by rpki-client