Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
File: qHxnPzWntwWmtCTTORT6OS07li4.mft (raw, json)
Hash identifier: VpNNXF5mXyROKiFlqWFOZqqiHNaOz48PMDV0EqOGEC4=
Subject key identifier: 2B:6A:92:2B:51:D3:AC:D0:4C:32:B1:FC:F1:7B:11:CD:07:C9:E2:F5
Authority key identifier: A8:7C:67:3F:35:A7:B7:05:A6:B4:24:D3:39:14:FA:39:2D:3B:96:2E
Certificate issuer: /CN=a87c673f35a7b705a6b424d33914fa392d3b962e
Certificate serial: 0196B032CA0B9928B8EDBD8C4F5BA8D23786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
Manifest number: 07A8
Signing time: Thu 08 May 2025 14:00:40 +0000
Manifest this update: Thu 08 May 2025 14:00:40 +0000
Manifest next update: Fri 09 May 2025 14:00:40 +0000
Files and hashes: 1: Eax-YG047Te5n0m45RUjhbrR1oI.roa (hash: iDlk1T+vVuMTMOmIBdx2Kl0rk1EldiQCxibfcQYd5i0=)
2: qHxnPzWntwWmtCTTORT6OS07li4.crl (hash: 1xcn/OZWmFFn62XV1gd3bUZyThxd6AqphO9Hi9uQkEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:32:ca:0b:99:28:b8:ed:bd:8c:4f:5b:a8:d2:37:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87c673f35a7b705a6b424d33914fa392d3b962e
Validity
Not Before: May 8 14:00:40 2025 GMT
Not After : May 9 14:00:40 2025 GMT
Subject: CN=2b6a922b51d3acd04c32b1fcf17b11cd07c9e2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:df:4e:c5:c0:5d:4f:eb:41:b3:0d:96:bf:e1:
db:8f:5e:21:17:a0:da:04:23:ac:e5:b6:05:10:91:
e4:dd:fc:bd:42:93:97:50:09:0f:7a:2a:fe:e9:a7:
ae:c2:7c:3d:67:46:f1:ca:7d:61:6d:14:38:87:1c:
a6:be:fb:31:30:bc:03:d7:54:45:6a:ed:bd:90:4f:
50:44:2d:b9:ec:71:a1:4b:08:a5:93:5a:6c:ee:90:
ed:aa:51:29:d6:96:1f:cd:7a:23:65:4b:51:00:52:
7e:60:ab:7e:00:05:da:e3:8c:16:b7:a9:c3:85:e0:
fb:92:9d:01:82:b9:43:25:ca:ab:85:75:07:09:ed:
28:ee:88:a1:18:65:7b:5e:d3:76:c7:16:ae:8b:d7:
37:a0:98:a6:c8:47:0b:c7:f9:4f:8a:7a:bb:96:b0:
92:28:30:41:37:ab:7f:a3:cd:9d:e5:1c:57:b3:71:
5e:7c:40:5f:ca:39:7f:82:f5:09:d6:4e:62:1e:d1:
ff:10:18:29:00:4a:89:9a:58:72:96:0d:33:cd:bb:
84:24:ad:61:77:5e:2f:87:7f:18:01:43:88:49:1e:
3e:0c:f2:22:dc:8b:3d:b9:b7:4a:50:6c:bb:66:3a:
3d:7e:a5:0f:bd:22:38:a5:d6:80:88:39:62:e2:81:
71:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6A:92:2B:51:D3:AC:D0:4C:32:B1:FC:F1:7B:11:CD:07:C9:E2:F5
X509v3 Authority Key Identifier:
keyid:A8:7C:67:3F:35:A7:B7:05:A6:B4:24:D3:39:14:FA:39:2D:3B:96:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:de:ad:4e:87:06:eb:b0:98:7d:28:7d:6e:a3:06:90:2f:5b:
cd:bf:bd:f5:18:6e:a9:37:be:09:81:85:f7:08:59:12:5c:22:
f0:63:d4:eb:a5:f5:3f:ba:d6:9d:4f:b2:81:8a:26:2a:e5:a6:
0a:3a:7a:7c:3d:3a:40:da:31:15:0f:ef:ab:ca:b5:83:2b:8b:
e3:78:a1:16:87:8f:3a:a6:d0:7e:e4:ce:54:9e:53:68:85:09:
0c:09:e4:79:59:87:e6:94:7d:33:30:d7:c2:f3:ba:61:6f:89:
c7:cf:5f:da:11:a1:f8:da:cb:d3:70:32:1a:b9:02:46:f4:05:
74:fc:ff:d6:6c:8d:c0:09:75:29:6e:b0:16:d9:0a:c6:55:cf:
8f:50:8a:b4:a6:84:dc:bc:c6:ed:99:a4:33:2b:37:0c:aa:56:
0c:00:46:40:8a:16:b7:e5:8a:b3:ae:58:b7:31:e9:b1:00:18:
92:20:96:4c:97:8d:13:d9:13:06:55:08:c9:bb:4a:9c:26:d9:
60:86:e4:37:58:a1:0b:19:cf:1c:cc:27:10:75:08:a2:73:8a:
af:f2:dc:67:10:89:00:87:c1:86:a8:a0:d0:cf:ab:3b:80:e9:
92:c8:78:2f:7f:3b:52:cb:21:32:de:67:67:4e:93:96:c9:b9:
f1:6a:68:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 17:48:48 2025 by rpki-client