Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
File: qR_iZyyPHBKyetoPzLqnwhLL1xw.mft (raw, json)
Hash identifier: Jl9PuVfkBCM4Zvu5younr3Jcyh9HE+H9QzYsCM6q9ds=
Subject key identifier: 70:9F:C9:19:13:13:E9:B7:D2:09:D8:B5:6F:D9:4B:13:95:ED:22:EA
Authority key identifier: A9:1F:E2:67:2C:8F:1C:12:B2:7A:DA:0F:CC:BA:A7:C2:12:CB:D7:1C
Certificate issuer: /CN=a91fe2672c8f1c12b27ada0fccbaa7c212cbd71c
Certificate serial: 0196BCA4B1E1F71AF3485075B813C5EE5909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 00:00:32 +0000
Manifest this update: Sun 11 May 2025 00:00:32 +0000
Manifest next update: Mon 12 May 2025 00:00:32 +0000
Files and hashes: 1: 2Q0kx85pwBzfIMwLp9ldarIpih0.roa (hash: D6p/IFbJlNokn2XAUVSHhwdlOMDmGJADmbqv1d/nsjg=)
2: qR_iZyyPHBKyetoPzLqnwhLL1xw.crl (hash: aGE+npoGUgiJ8hw1Fz9H6HJ4SHsJHLBgH635mserI5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:b1:e1:f7:1a:f3:48:50:75:b8:13:c5:ee:59:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a91fe2672c8f1c12b27ada0fccbaa7c212cbd71c
Validity
Not Before: May 11 00:00:32 2025 GMT
Not After : May 12 00:00:32 2025 GMT
Subject: CN=709fc9191313e9b7d209d8b56fd94b1395ed22ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:45:12:42:e7:0f:06:b0:4d:fa:24:55:6c:52:
9c:e5:84:9f:b7:17:cb:e9:11:e6:ce:63:87:b9:f0:
c1:6c:4d:dc:6a:3e:5c:e2:7f:80:63:7a:02:c2:88:
a1:21:84:41:a1:df:95:f2:1e:03:47:2a:91:cc:95:
82:98:4c:2f:4f:c0:6f:56:b0:7b:57:8b:92:b2:39:
5a:79:00:be:1f:cf:fc:96:41:41:41:0f:5b:19:96:
e6:50:58:58:24:ab:a6:18:96:aa:6f:13:6b:50:9b:
f1:eb:c5:b1:ba:af:3a:d6:36:fd:29:79:d0:3a:20:
e3:87:ca:f3:e3:71:a7:3a:49:5a:1f:3c:5c:cc:82:
5f:73:2a:f9:33:27:a8:92:f3:2d:d5:43:e0:5b:76:
fa:77:84:d0:42:4b:73:30:d5:04:a9:3f:7d:8f:0a:
8e:2d:ee:78:bf:97:be:8d:d5:2d:2a:6d:6a:47:91:
cf:94:94:9d:67:08:e7:fa:e8:db:d8:86:37:dd:66:
6c:21:bd:91:4c:ab:b3:8e:59:96:23:64:47:48:cf:
85:4c:00:74:7d:a4:00:1d:23:c0:e1:7d:11:f9:2d:
19:27:f3:1f:16:b5:2c:0c:2f:bb:67:af:83:76:32:
96:97:2c:83:80:9a:3d:d0:dd:03:79:5a:67:8c:f0:
68:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9F:C9:19:13:13:E9:B7:D2:09:D8:B5:6F:D9:4B:13:95:ED:22:EA
X509v3 Authority Key Identifier:
keyid:A9:1F:E2:67:2C:8F:1C:12:B2:7A:DA:0F:CC:BA:A7:C2:12:CB:D7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:cc:2c:e4:ea:ac:6a:3a:01:2b:e7:e5:20:8e:02:cf:90:3e:
1c:42:24:70:37:4e:ff:fd:98:27:01:31:8c:c7:33:e7:da:8d:
08:67:e0:13:bb:57:1f:14:ad:87:89:cd:70:a1:35:70:fe:a9:
ef:74:0f:92:8c:49:ea:10:54:b8:ad:fd:e3:28:2c:29:fa:2e:
06:dc:ec:ca:65:f8:8b:8f:cb:db:95:25:55:1c:5c:a5:26:a8:
61:7b:33:53:47:5b:db:3f:83:a0:a0:4c:3a:18:66:c5:9f:a6:
48:4a:ef:0f:ad:8d:f2:f1:c2:97:56:62:63:d4:71:fd:79:ce:
3f:d9:c4:fa:8a:39:ae:1b:21:40:f4:61:86:02:07:1d:a1:bf:
85:b2:a5:4f:88:59:11:77:03:31:86:74:2a:18:3a:2a:da:0a:
5e:5b:c7:7c:a4:54:f4:f3:3c:b0:5c:e8:cc:c0:59:90:c2:47:
8a:03:39:91:88:d8:b3:39:74:00:65:49:6e:07:5f:d0:8c:72:
4a:07:35:97:97:51:60:e3:f8:da:a2:f4:97:24:b0:75:93:ce:
7a:1e:13:7b:1d:66:4c:97:f0:50:bc:a6:95:10:22:38:2e:91:
48:6f:62:6d:c8:af:70:7d:30:cd:38:1f:4a:7f:68:d0:fa:95:
c3:1a:91:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:37:36 2025 by rpki-client