Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/69f655-6879-426f-9bfb-3aed4cc7d5b8/1/qT2oa0r2Dn0ppYfQH8yYtZlsRto.mft
File: qT2oa0r2Dn0ppYfQH8yYtZlsRto.mft (raw, json)
Hash identifier: JOiyJj2vlKrnKnU7NMHCB+QdpglZDz1JCZXnx1KN8rU=
Subject key identifier: 5B:8F:DD:1F:0C:01:6A:02:14:0B:48:B1:7C:CD:CD:32:62:A5:00:BF
Authority key identifier: A9:3D:A8:6B:4A:F6:0E:7D:29:A5:87:D0:1F:CC:98:B5:99:6C:46:DA
Certificate issuer: /CN=a93da86b4af60e7d29a587d01fcc98b5996c46da
Certificate serial: 0196A91E1EB266F9A954D34128188549F153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT2oa0r2Dn0ppYfQH8yYtZlsRto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/69f655-6879-426f-9bfb-3aed4cc7d5b8/1/qT2oa0r2Dn0ppYfQH8yYtZlsRto.mft
Manifest number: 0A4F
Signing time: Wed 07 May 2025 05:00:45 +0000
Manifest this update: Wed 07 May 2025 05:00:45 +0000
Manifest next update: Thu 08 May 2025 05:00:45 +0000
Files and hashes: 1: LQO8Jka9B_Ga8wSNJ-H4GWRMbUM.roa (hash: 9Hoa1JZkYbMn9eEYjrKfJwUHw8DrzeOwQXlGIKyXqwo=)
2: qT2oa0r2Dn0ppYfQH8yYtZlsRto.crl (hash: H0WUG/3GHlqccN7hUKXlEkpfLRqO7OPu+YB+afuWn6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/69f655-6879-426f-9bfb-3aed4cc7d5b8/1/qT2oa0r2Dn0ppYfQH8yYtZlsRto.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/69f655-6879-426f-9bfb-3aed4cc7d5b8/1/qT2oa0r2Dn0ppYfQH8yYtZlsRto.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT2oa0r2Dn0ppYfQH8yYtZlsRto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:1e:1e:b2:66:f9:a9:54:d3:41:28:18:85:49:f1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93da86b4af60e7d29a587d01fcc98b5996c46da
Validity
Not Before: May 7 05:00:45 2025 GMT
Not After : May 8 05:00:45 2025 GMT
Subject: CN=5b8fdd1f0c016a02140b48b17ccdcd3262a500bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8d:ef:57:d3:d7:6d:ce:45:ab:4a:54:6c:2e:
7a:e3:2e:de:6c:d3:a5:f8:4f:b7:01:bd:5c:a1:da:
1c:16:7e:3e:02:7d:75:bb:6e:52:75:7c:db:5c:d8:
d0:6b:65:2f:18:dc:c2:79:5d:eb:61:ab:9b:d1:08:
7a:21:e1:31:1c:c7:62:be:5e:ff:c3:5e:d0:61:b4:
33:80:60:eb:8d:fa:02:f2:89:63:58:09:92:3d:38:
fc:87:42:3c:17:2a:3b:ef:6a:44:9b:a3:21:08:54:
1f:2d:12:dc:c3:64:8c:51:c1:63:6b:f1:a5:65:60:
d3:8c:51:f5:60:cc:cb:b6:ff:b5:49:ab:84:0f:10:
28:98:2c:7f:8b:9b:82:9b:45:87:5f:0f:ff:5a:66:
e1:dd:9e:3e:4a:d2:47:54:96:73:5d:72:ae:db:61:
6b:92:8c:b8:6f:f6:f0:65:3f:80:a8:be:5a:83:14:
df:8c:32:1e:73:e9:1b:c9:8b:ca:31:6d:91:f4:1f:
f5:4d:04:f7:17:a9:20:c6:0c:13:df:b0:69:ad:9c:
d8:d5:d3:de:a3:60:f5:f4:3f:ea:d4:b1:64:a3:7a:
23:4b:c7:44:21:90:e3:87:7d:ff:b8:1c:e3:61:0d:
6e:70:f4:68:d3:86:fd:ae:8a:69:77:02:0a:82:de:
0c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8F:DD:1F:0C:01:6A:02:14:0B:48:B1:7C:CD:CD:32:62:A5:00:BF
X509v3 Authority Key Identifier:
keyid:A9:3D:A8:6B:4A:F6:0E:7D:29:A5:87:D0:1F:CC:98:B5:99:6C:46:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT2oa0r2Dn0ppYfQH8yYtZlsRto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/69f655-6879-426f-9bfb-3aed4cc7d5b8/1/qT2oa0r2Dn0ppYfQH8yYtZlsRto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/69f655-6879-426f-9bfb-3aed4cc7d5b8/1/qT2oa0r2Dn0ppYfQH8yYtZlsRto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:5d:1b:d5:59:8a:5d:ab:dd:ac:ab:79:93:3d:23:da:f3:f6:
ec:2e:4e:ef:1e:95:c0:33:8d:86:62:d4:ad:a6:f1:92:31:0f:
6c:51:7e:78:e8:55:5b:f6:43:dc:ce:6b:61:81:bd:5b:b3:32:
a8:74:19:6c:a2:5f:0c:7f:bc:df:c2:d7:4c:84:b9:14:d3:90:
a6:d5:e1:56:87:f6:79:9a:1f:78:97:ce:e1:9b:d0:aa:cf:57:
ae:f1:a2:cd:81:45:d5:d4:8d:bd:4e:49:a9:4f:3a:ab:38:a5:
db:65:56:92:98:6b:e8:71:93:0f:0c:a7:53:95:b2:21:09:71:
63:05:ad:0d:e2:7b:bf:14:a0:ba:ca:02:ac:b9:e5:da:e0:07:
36:7e:4a:b7:de:91:f7:91:cf:58:76:e4:bf:d2:d6:9d:70:90:
c7:5b:59:4d:4c:ce:0a:83:56:d3:03:93:78:26:c3:70:53:a0:
b5:0a:b9:3d:76:86:17:18:62:1f:e5:9b:6c:b6:27:ce:f2:5f:
7f:ae:b6:50:a6:22:51:88:67:42:c4:59:25:44:40:c3:bd:45:
5a:6b:b7:6e:8e:0a:f9:41:48:e4:ab:44:67:b5:cc:97:4c:64:
60:2b:d1:4c:2b:1c:f5:ed:9f:b1:b9:b5:03:a7:4f:0f:4b:f4:
75:9d:0c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:04:46 2025 by rpki-client