Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
File: qMbzkzUMd1mMEhrNPJL3BIV274k.mft (raw, json)
Hash identifier: vz9h+tsG9aSAq/XQ+phCaO1FQ4GSM8+WXNyevAhysZQ=
Subject key identifier: 24:10:97:75:37:F8:C3:56:D0:BE:B5:6E:34:57:CD:0F:B1:A2:C6:3E
Authority key identifier: A8:C6:F3:93:35:0C:77:59:8C:12:1A:CD:3C:92:F7:04:85:76:EF:89
Certificate issuer: /CN=a8c6f393350c77598c121acd3c92f7048576ef89
Certificate serial: 0196BB920FFC2B116AD5E9745F17A91D89AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
Manifest number: 0C69
Signing time: Sat 10 May 2025 19:00:33 +0000
Manifest this update: Sat 10 May 2025 19:00:33 +0000
Manifest next update: Sun 11 May 2025 19:00:33 +0000
Files and hashes: 1: eOh7otVHHrYHGXBG7XugLjFkG3I.roa (hash: jBij6Zpdi8PdzGdFEr+QptijCvWCfUOl+3jki1c2vMs=)
2: lCDqNprGOb5vTF01oJ8hwQqZCRE.roa (hash: mFZkrlVA4mVLiefirb6z2hXCAJmumM9YtxbYwU/yy10=)
3: qMbzkzUMd1mMEhrNPJL3BIV274k.crl (hash: UWa6Cou31COu5aQRqG1Lr8PmFuzqZH83OM3Cf5DETx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:0f:fc:2b:11:6a:d5:e9:74:5f:17:a9:1d:89:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8c6f393350c77598c121acd3c92f7048576ef89
Validity
Not Before: May 10 19:00:33 2025 GMT
Not After : May 11 19:00:33 2025 GMT
Subject: CN=2410977537f8c356d0beb56e3457cd0fb1a2c63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:06:06:99:c3:73:06:a9:3d:87:b7:91:e3:ac:
43:82:d6:4c:12:8b:57:88:1b:cc:59:37:83:5e:cf:
3b:a0:a7:ae:3c:14:29:ef:a4:52:a5:a3:1c:f5:0d:
8d:30:a3:ab:28:db:bf:43:13:05:f9:ba:c5:7d:2b:
93:d5:45:82:71:ff:20:76:7a:23:48:db:e3:b1:d7:
3e:38:57:b3:e6:b8:cd:21:c9:f2:2e:1e:c1:05:61:
c4:b5:9e:c5:d9:04:96:3a:31:40:d4:08:31:0e:e3:
3a:22:1a:46:97:01:ad:c9:58:83:bd:7b:56:c7:64:
fc:b2:89:3c:8b:c3:0a:94:95:82:41:d1:2d:a5:93:
65:8d:49:45:c0:5b:fc:d5:fc:c6:ad:23:50:0a:65:
32:57:29:29:93:9b:84:d1:34:95:6f:05:5b:5d:7d:
60:a9:53:2e:95:ac:c4:e3:1b:2b:b0:94:cf:da:2d:
8a:8f:31:be:9e:35:d9:c3:30:1f:5f:93:6d:ef:d6:
da:c6:3e:02:04:e5:d0:eb:50:a1:ab:e1:f9:81:85:
16:5a:44:1d:68:36:03:c3:85:c8:89:03:f7:f4:a0:
65:ae:50:80:07:a1:28:a5:c0:86:d9:47:73:f7:58:
2b:c4:c8:f2:f2:fb:8c:84:fe:0d:d6:09:98:18:24:
6b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:10:97:75:37:F8:C3:56:D0:BE:B5:6E:34:57:CD:0F:B1:A2:C6:3E
X509v3 Authority Key Identifier:
keyid:A8:C6:F3:93:35:0C:77:59:8C:12:1A:CD:3C:92:F7:04:85:76:EF:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:c9:f7:ef:58:7e:95:11:35:6c:34:cb:83:d3:69:49:e5:80:
69:6f:ac:f7:19:6e:cc:6b:fa:8d:17:ff:79:8b:d8:9e:e5:bf:
48:ee:20:d6:55:84:4b:e9:fa:50:7b:ab:70:7f:6e:cb:06:fb:
e9:8c:53:c5:77:1a:f9:4c:19:49:11:3d:ac:91:6d:d2:ff:be:
d6:3f:2f:8d:3f:95:26:21:6d:f6:ed:7e:d1:97:1a:92:1d:eb:
69:ea:67:d1:ba:44:11:f3:59:a3:2f:97:db:d1:d1:ca:c9:2b:
ae:e4:04:ba:70:69:a5:aa:4e:1f:92:00:25:c6:d2:1d:34:d4:
72:48:9c:b4:f4:15:58:c9:fe:ad:02:ff:13:99:f9:5b:be:67:
a4:47:93:27:8e:36:7a:38:6a:fc:71:be:3a:ee:d8:ef:62:bf:
cc:4d:ab:b4:9e:d8:47:38:d0:e9:f2:cb:1d:f7:bc:09:bb:5a:
3e:90:f5:98:1d:a6:f2:cb:2c:f0:81:e3:d9:b3:cb:a5:3a:fd:
3c:93:12:cf:15:18:32:82:4e:c7:2b:b7:a1:d4:aa:75:c3:55:
d8:67:35:d0:c6:b5:b8:d2:30:e5:de:39:f7:4b:fc:84:71:a2:
9f:2b:2d:f1:5d:79:57:e3:c8:6f:22:f7:d1:37:47:ba:b0:87:
1f:08:3e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:49:47 2025 by rpki-client