Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
File: q5ioJj4GO4p709cYDnpKpklTRBw.mft (raw, json)
Hash identifier: 5pIyewBrpA51kv4LwGwVzamTgYMy8VSogLohk/qAnLs=
Subject key identifier: C2:11:E3:A4:A3:B3:C3:4C:7E:66:71:1A:A7:B0:28:11:65:75:F3:A1
Authority key identifier: AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C
Certificate issuer: /CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c
Certificate serial: 0196C013AB348878279F4A366E5937890D73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
Manifest number: 0401
Signing time: Sun 11 May 2025 16:00:36 +0000
Manifest this update: Sun 11 May 2025 16:00:36 +0000
Manifest next update: Mon 12 May 2025 16:00:36 +0000
Files and hashes: 1: 4fHNG3uqnKYRdS0KPogfVSeJ6Y4.roa (hash: EoqRZ5+OD3esILCMjil4nQygTYY9bzIijeRvhLDs9S8=)
2: kD0NYEJpgxaFFDcqPxx98oDLF4A.roa (hash: kEfgwntStfXPUtLxcdJZBEv9NrzPqg0tH8aS2VZkZpA=)
3: q5ioJj4GO4p709cYDnpKpklTRBw.crl (hash: zmgcXVhmTTmJ4KG1tdf9kNHG8JJbNiCrN9xomUd2n5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:13:ab:34:88:78:27:9f:4a:36:6e:59:37:89:0d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c
Validity
Not Before: May 11 16:00:36 2025 GMT
Not After : May 12 16:00:36 2025 GMT
Subject: CN=c211e3a4a3b3c34c7e66711aa7b028116575f3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9c:be:f3:8c:e2:a6:0f:1a:fb:21:5e:e1:79:
2a:f0:2c:75:52:35:30:e3:b9:3b:70:c0:18:ad:a1:
3d:fd:19:66:d1:ed:81:52:ba:bf:c4:3e:59:5c:2e:
1f:e5:bf:8a:3e:7c:95:99:6c:ff:b4:eb:55:29:4a:
31:0f:c0:82:7c:86:6e:e9:80:86:5c:20:01:af:a2:
e1:31:a8:83:05:c1:8c:22:82:10:0e:fc:1e:7f:1f:
a9:fb:88:35:a0:2d:bb:99:b1:3e:8e:01:d0:8f:97:
1c:e3:f8:8f:d5:38:c4:22:93:2f:af:0c:35:76:dd:
e6:c3:34:e0:d6:ff:57:cf:05:55:16:20:00:d4:51:
30:ed:cb:f3:60:6c:a8:30:4f:99:5d:a5:99:e3:38:
aa:0c:57:29:78:b5:68:79:d1:b4:5f:93:22:1b:ae:
e2:f6:f7:5f:20:ef:83:b8:f4:5b:45:06:2a:39:91:
52:77:20:a9:2a:a6:a1:10:73:3a:f0:db:89:60:ea:
63:6d:25:53:ab:07:81:40:e6:e3:bf:dd:7e:39:7f:
c1:96:21:b5:59:e4:e2:33:6d:ed:10:30:17:a5:fb:
0e:03:15:b5:a4:6a:5c:53:d0:aa:01:56:2a:fd:cb:
3c:fc:4d:39:d6:8d:97:54:7d:70:14:1e:c2:3c:ef:
54:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:11:E3:A4:A3:B3:C3:4C:7E:66:71:1A:A7:B0:28:11:65:75:F3:A1
X509v3 Authority Key Identifier:
keyid:AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:dd:fd:09:e2:6b:89:9f:a5:fd:29:6e:69:61:91:5c:5c:1f:
d5:f8:dc:0f:df:53:c2:2f:13:91:b9:48:bb:b3:de:47:4d:e2:
bc:33:73:1c:79:bd:9c:3a:fd:6c:7a:15:94:27:9e:a5:d6:11:
9f:3e:55:1b:07:55:21:d8:d4:50:ec:86:35:e3:73:05:43:a9:
45:97:e4:90:c2:d9:23:f9:f5:c6:3c:9c:e6:1b:3a:8b:da:36:
ff:69:93:a9:cd:c0:38:ba:fb:c6:06:39:11:b9:53:a3:5f:df:
f3:fe:89:69:70:f9:8a:d8:9e:88:f4:f3:9f:d3:45:7e:2b:13:
d1:7e:bd:dd:48:13:01:7a:00:f2:09:d4:94:40:04:69:a0:16:
7f:3f:dc:00:8f:cd:48:61:79:7d:9c:f9:15:02:89:4e:5f:a2:
21:bd:23:fa:0a:10:78:7b:bc:49:76:f2:44:da:f8:90:81:13:
43:36:ea:38:f2:8f:ca:c9:01:ec:83:bb:dc:1d:71:26:e2:b8:
a9:aa:65:3e:17:57:8a:7d:cf:5c:fc:05:b0:e8:7e:a8:9d:ac:
9f:c7:66:a7:34:59:0e:09:71:74:ab:88:9d:f0:56:a5:32:b6:
a2:92:5b:cd:ef:3c:de:1e:98:f3:61:9b:aa:5e:4e:6e:d2:f7:
61:4d:7e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:31:41 2025 by rpki-client