Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
File: qQIAoAAN9dhFudsoTQotvuZ2xag.mft (raw, json)
Hash identifier: 5PK+2PeDctWO9wkfkpRfeH/De59T9Lb2LlTPdXoZb3w=
Subject key identifier: 18:39:9E:2A:A5:D0:2D:92:E7:05:BB:39:B4:AA:98:8A:E1:18:55:56
Authority key identifier: A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
Certificate issuer: /CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Certificate serial: 0196B710299EAD7CC88670AA92C2255E69A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
Manifest number: 0E34
Signing time: Fri 09 May 2025 22:00:11 +0000
Manifest this update: Fri 09 May 2025 22:00:11 +0000
Manifest next update: Sat 10 May 2025 22:00:11 +0000
Files and hashes: 1: XVxrMXrjLDQVv9bac22qQ0QMNvQ.roa (hash: Yc8aZeN9qk7mkDqbHTwdGKZnQ52FHThS1w10bQxAp2w=)
2: i3VEozY7zHl6WOCVl59PVxz43a8.roa (hash: jzz5iRsaOnS+mlLDbSWuuSqGL3bfQAaKxsPDmiylUHA=)
3: qQIAoAAN9dhFudsoTQotvuZ2xag.crl (hash: cxpSYr3ME15XO3UlSVnUyCTZmHu4En9vyB1khzsy8UI=)
4: uC9PLmr5O8CehNSZEFEDNzHH7Us.roa (hash: rxEdnwW/DBAsm5BXVYbjYVnepXH4Kn8/IHHbh9uyU6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:10:29:9e:ad:7c:c8:86:70:aa:92:c2:25:5e:69:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Validity
Not Before: May 9 22:00:11 2025 GMT
Not After : May 10 22:00:11 2025 GMT
Subject: CN=18399e2aa5d02d92e705bb39b4aa988ae1185556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9f:cf:c2:55:3b:a8:3c:39:dd:40:f0:8c:a9:
05:5e:1b:27:e6:84:6a:a3:cd:33:ba:6a:57:b7:a4:
58:11:9e:70:9f:5b:0f:bb:0c:c2:24:47:ed:4a:22:
5a:3f:09:bd:33:33:fe:0e:53:ba:61:d4:d7:43:40:
38:de:2c:0c:4c:9d:88:5d:b9:a7:8c:e0:31:5d:c8:
03:84:1c:01:d1:58:b0:f8:43:26:71:8f:92:52:cd:
ed:62:12:d9:1b:2a:40:f0:34:24:b1:e7:88:37:02:
24:70:96:c0:bb:f9:96:e8:c5:6c:05:84:a3:d9:cf:
1c:c2:b9:3a:a6:f9:ed:07:b7:af:a1:56:ae:ea:f2:
dd:69:05:db:69:08:73:72:00:f4:4a:d7:45:5c:8f:
79:e2:39:d0:69:b3:b9:a5:9d:21:3f:a4:c7:a5:49:
12:dd:a1:69:ea:0b:dc:4a:b3:d1:7b:fc:30:90:76:
d2:89:37:0e:3b:c8:70:ca:5d:4f:f3:65:24:31:c7:
ab:9e:e2:e8:4a:6f:5d:3f:2b:5d:c5:85:2d:2f:51:
1d:3c:9c:ae:1c:58:eb:44:f6:88:01:60:14:3c:fb:
76:c5:12:34:f0:7d:b7:3e:06:40:fa:2d:c6:0a:03:
0c:59:9b:6b:88:a5:a5:99:b5:dd:b1:a4:cd:aa:c4:
f6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:39:9E:2A:A5:D0:2D:92:E7:05:BB:39:B4:AA:98:8A:E1:18:55:56
X509v3 Authority Key Identifier:
keyid:A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ae:01:b4:de:ca:5b:90:34:0d:60:7e:48:a4:72:d0:e4:b7:
41:f4:3c:ae:e8:a8:99:63:4f:6a:cd:f7:ac:20:d7:0c:7c:aa:
d3:e5:18:cc:ec:40:01:98:00:49:63:45:93:03:67:9f:87:c7:
ca:90:90:15:36:f5:ae:15:e9:28:da:41:fc:e5:cb:bf:e9:26:
d5:8d:ab:6e:7e:40:33:0a:7c:ea:f2:72:ea:cc:52:76:dd:88:
1f:1b:1a:3b:59:a0:36:0e:c2:ee:d4:f6:8b:b1:e9:06:fe:2b:
4e:49:86:80:9a:f6:01:be:9e:57:4a:f0:bf:ba:5a:85:e4:04:
6d:57:9f:20:e1:af:cb:a0:e5:52:7f:02:08:3f:68:4a:6c:89:
34:1f:87:4b:4d:8d:c0:a7:f2:9d:94:29:e6:d4:95:60:ba:65:
b8:fa:18:fe:38:9c:05:02:aa:d3:35:fe:0d:32:69:53:6e:5f:
57:32:25:5b:e2:81:a5:ec:46:1f:ab:38:62:68:15:8f:51:8e:
83:a9:97:45:37:a4:2e:20:6a:d6:4b:36:77:23:87:ca:80:a3:
6b:b2:c7:b0:0d:ff:7a:6f:3b:3e:bf:f0:c6:cf:b3:a0:df:36:
22:5d:23:dc:dd:cf:2f:cc:52:d4:fb:72:4e:bb:18:43:2f:20:
13:31:70:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 01:38:29 2025 by rpki-client