Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
File: qvSWmELenEweGldZ2Y0e1cDWLvg.mft (raw, json)
Hash identifier: hZmNtAj8YeR9A1jp6IsVQ4cy6d8bOeUFFyjb31EHSx4=
Subject key identifier: 6E:51:5F:B1:E0:EB:40:63:EC:2C:F4:82:85:F2:8D:62:05:14:37:F4
Authority key identifier: AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
Certificate issuer: /CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Certificate serial: 0196A61CEA5F1CC4AA734D7A2F00761D4F00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
Manifest number: 10DD
Signing time: Tue 06 May 2025 15:00:34 +0000
Manifest this update: Tue 06 May 2025 15:00:34 +0000
Manifest next update: Wed 07 May 2025 15:00:34 +0000
Files and hashes: 1: 1-9PbJd606SAcljFaDXOqMtimHsk.roa (hash: KXw8kntxbx0A19gUTumtpNuhW4BHiQmmsQFSl5B6ZYs=)
2: 2-vgpJwDsEY_VoNu8cnFA12khB8.roa (hash: iUnRP/l7HzWTkjMJX+R7OEZ9+tX6NbtdM3UPohuBzqw=)
3: 8w9BEQzRPPy9olwFaw-Zn6Va6YU.roa (hash: g6jDxz/UxGzzizwSc5CDzUUAAjalGAWQr2yYfR64f7Y=)
4: Egh3cL0v2_H-TY-QEmnrWnX0arg.roa (hash: uAUHTXbdFEHAhORw9S54HkonrjueALJUqc4yeHLWHu8=)
5: TvcD9AMtT0yWtHonps0hocI3dlg.roa (hash: fuU4HZNYKHN5G71TXaO9NMKHsWQTf51zKQ44BmOWV1o=)
6: nSrKwFeL2JWJX-O6yRsJjMyenO4.roa (hash: T5rsVBpHF0FkBvtcb+csX6yuqxHhug7dklzF66IL7J0=)
7: qvSWmELenEweGldZ2Y0e1cDWLvg.crl (hash: pOdBMAj0ItAg7FhyqemWBIQlvHtO0S0prUK9ZIgF5lw=)
8: vEaBzwoEAwzosXDFzJLUwLp5Y64.roa (hash: P0SFRAVbYdQfuoozG6LdZarwkxJX0gGTe/XAuMu2MyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:1c:ea:5f:1c:c4:aa:73:4d:7a:2f:00:76:1d:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Validity
Not Before: May 6 15:00:34 2025 GMT
Not After : May 7 15:00:34 2025 GMT
Subject: CN=6e515fb1e0eb4063ec2cf48285f28d62051437f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0c:40:3b:33:5e:e0:4a:d7:78:f0:98:e2:c7:
76:8f:9c:9c:8a:38:6c:b4:e7:bd:e9:cd:42:d5:be:
44:d9:fb:fd:8c:84:21:b9:ce:7a:61:a1:14:41:5e:
bf:ba:e4:df:0b:3a:e1:a5:c3:0f:f6:6b:5f:a7:08:
96:20:9d:63:e4:12:2b:00:7b:f0:80:81:cb:4c:d4:
f6:c8:b0:dd:c1:94:09:d1:25:36:c8:1d:cc:2a:03:
65:e6:6b:70:75:6c:21:fe:95:23:43:b4:60:d2:9f:
eb:9e:55:d5:5c:9a:69:94:df:6d:56:0a:49:ab:2f:
53:d1:a1:aa:ec:5d:f7:0b:00:a7:32:da:77:05:c7:
ee:44:02:e6:c5:36:7c:e9:6f:db:c8:73:15:25:ec:
2b:32:aa:8d:61:f3:de:f4:88:16:2e:fb:34:74:eb:
d2:0d:a5:4b:84:d0:26:0a:cd:1d:bb:0a:88:6d:a2:
95:3d:93:3f:36:cb:7d:26:ca:91:a8:70:a1:f7:2b:
b3:ef:2e:73:3e:1d:74:0f:7e:ba:fc:91:85:a4:f2:
f2:cc:f9:ba:ef:09:8c:2f:4b:93:77:0c:95:19:4a:
33:03:f0:46:4c:b8:74:b2:39:5d:f8:42:e4:1c:54:
d6:5d:b9:7d:af:a2:cc:de:71:30:92:ef:a8:e4:a3:
3a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:51:5F:B1:E0:EB:40:63:EC:2C:F4:82:85:F2:8D:62:05:14:37:F4
X509v3 Authority Key Identifier:
keyid:AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:5f:45:78:d3:ea:dd:17:8b:32:24:29:1e:00:9b:ba:4a:59:
80:ec:87:8b:00:9a:36:35:ca:0c:9f:bb:a4:99:90:a8:1c:ce:
8e:dc:23:7b:25:6a:78:ec:e8:cc:af:58:6a:b0:b7:f9:84:f9:
51:fd:77:4c:2b:3c:15:f6:8a:f9:37:1f:32:3a:b3:1a:0d:ed:
7e:98:80:5d:08:a5:26:db:58:14:6b:f7:d6:02:b2:f0:a6:23:
de:a6:a5:a6:f1:3d:3a:20:a7:49:b1:53:0c:a4:f7:b0:65:a1:
72:74:a0:dd:96:34:51:00:2a:9d:b1:80:92:22:dd:d1:b5:d4:
41:cc:c1:db:5d:b0:64:24:3f:c6:cf:37:2a:ae:de:a7:a2:63:
ef:9a:b8:af:8e:5a:dc:b8:a4:70:94:37:2b:31:8f:55:bb:86:
68:c7:40:59:7b:03:5a:36:dd:3d:34:fe:c9:3a:1a:0c:ab:1b:
55:f6:89:b2:83:63:00:ce:6a:2d:7e:09:8d:5b:03:d9:73:64:
09:0c:ff:c2:87:16:e3:e4:fa:b0:4c:a0:72:49:1f:7f:74:2f:
1c:fa:06:46:39:12:e9:ef:78:41:46:ab:fc:62:68:67:30:22:
ca:9d:82:45:35:80:f5:c2:d7:9d:74:c1:f7:cd:81:17:ae:30:
64:72:fe:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 17:24:13 2025 by rpki-client