Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
File: quibwwl3aKzWfC3XR9O-Gtty6Zc.mft (raw, json)
Hash identifier: te1S4g1fKW9uZnYi90JXYSaPR5G1bccMqL8LaDRYHoE=
Subject key identifier: 73:EF:85:C0:5F:D6:AA:88:4C:A6:86:73:12:27:4A:73:2F:0C:4C:F3
Authority key identifier: AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97
Certificate issuer: /CN=aae89bc3097768acd67c2dd747d3be1adb72e997
Certificate serial: 01969D87A6123B8BE8FFD78AF426DEED9CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
Manifest number: 1526
Signing time: Sun 04 May 2025 23:00:34 +0000
Manifest this update: Sun 04 May 2025 23:00:34 +0000
Manifest next update: Mon 05 May 2025 23:00:34 +0000
Files and hashes: 1: Se8jY-LoM2MVsZ37wmyygWUdZqw.roa (hash: 460xRSiSARjue5TmuazrIkrxiYolcj28Woj0bWcIVJo=)
2: quibwwl3aKzWfC3XR9O-Gtty6Zc.crl (hash: 0ApdT8u81iu4voMSAxXPoNaMpRH2JiuSS/nyOo0V6VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:87:a6:12:3b:8b:e8:ff:d7:8a:f4:26:de:ed:9c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae89bc3097768acd67c2dd747d3be1adb72e997
Validity
Not Before: May 4 23:00:34 2025 GMT
Not After : May 5 23:00:34 2025 GMT
Subject: CN=73ef85c05fd6aa884ca6867312274a732f0c4cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3a:5b:db:f5:d2:c3:09:be:5a:0c:0e:e2:90:
aa:7a:d7:f3:de:23:e8:a4:43:3a:00:98:a6:2d:95:
be:14:3e:e6:08:1f:fc:ea:b0:8e:fb:d4:f3:d8:99:
b1:1c:0c:b2:73:8c:2b:07:a6:b6:55:85:d7:a4:e7:
db:9d:fe:92:3e:ce:ff:fd:97:ce:87:cc:94:7c:f5:
2c:60:85:6f:12:1a:09:7c:30:64:77:d0:a2:e4:aa:
76:7f:19:46:06:f4:6a:1b:34:4a:a6:87:8c:a6:32:
10:45:f5:47:38:4b:16:70:1e:86:b3:56:a5:a3:6d:
68:07:f3:ff:8e:3c:81:2f:99:07:e5:f6:01:9c:cc:
db:b5:30:d6:5a:26:f2:c6:3e:68:f8:c1:d9:b7:61:
4a:c7:ea:ec:64:8a:0a:77:81:6e:e0:34:1f:50:1e:
c3:91:a1:76:d0:9f:e5:d7:c1:e7:e3:6f:ac:78:4c:
89:8b:da:8d:b5:0e:87:c5:9c:1a:d6:26:c4:23:9d:
b1:e5:00:de:52:e6:07:23:df:c8:3e:d5:24:90:2d:
03:f9:6d:6c:43:85:8d:93:e8:74:43:1a:be:6e:a0:
d6:f1:85:54:29:94:14:02:8c:11:b5:71:40:fa:f1:
54:12:d6:c1:83:4d:ac:d6:a6:cd:ba:3f:21:78:dd:
f4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EF:85:C0:5F:D6:AA:88:4C:A6:86:73:12:27:4A:73:2F:0C:4C:F3
X509v3 Authority Key Identifier:
keyid:AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:cd:8e:20:20:5f:8c:b9:19:b6:fe:cf:38:3e:34:17:76:5f:
06:c1:ab:5d:75:28:9c:97:07:fd:88:48:e1:c8:d0:17:9a:6b:
c5:16:b7:5b:1d:e7:92:9f:08:09:75:7d:57:b5:11:df:b1:fd:
52:12:88:9e:18:b8:0f:04:e3:be:60:16:10:0b:af:14:be:3d:
60:bd:c4:46:b7:81:d9:b1:c9:22:57:26:fa:8d:38:36:bf:c5:
74:1c:96:c2:80:bd:d5:2d:ba:f4:8b:53:92:26:87:ea:a2:27:
0e:95:0c:1a:c7:85:63:cf:1f:37:c0:d2:ec:a7:78:6a:34:68:
c3:ce:2c:8d:2c:ea:be:23:07:c9:41:cc:b0:fe:33:89:0f:7a:
9e:d4:9b:85:95:86:38:2f:01:e2:9c:86:ef:68:d2:ed:f3:f6:
58:f8:7a:92:23:aa:04:57:94:59:0c:79:c8:bd:2a:11:a1:b0:
2e:49:07:ca:3b:33:71:42:97:84:20:18:2c:ed:28:d5:9a:71:
98:24:cb:ed:a6:7d:77:8e:6a:05:90:a7:2d:75:18:aa:17:68:
e5:12:eb:52:86:c6:48:c3:e2:ab:59:3d:87:ff:61:2a:7f:c1:
11:0a:84:03:ea:e4:b4:43:78:cd:4c:5f:05:aa:5e:d2:ed:2e:
24:bf:81:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:24:23 2025 by rpki-client