Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.mft
File: qnD7s9sihDfWBXmaxPRZjSLhPhs.mft (raw, json)
Hash identifier: sylbM6T8Vk5jrmEuG6S9pxfFBGtof0CU30u3ra1cIDo=
Subject key identifier: 91:09:92:68:C9:89:7F:44:27:D3:4E:BF:55:2C:02:C5:17:3B:F9:6E
Authority key identifier: AA:70:FB:B3:DB:22:84:37:D6:05:79:9A:C4:F4:59:8D:22:E1:3E:1B
Certificate issuer: /CN=aa70fbb3db228437d605799ac4f4598d22e13e1b
Certificate serial: 0196AC1F4B876880EAD8FCEA292EAE2F623E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnD7s9sihDfWBXmaxPRZjSLhPhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.mft
Manifest number: 152C
Signing time: Wed 07 May 2025 19:00:54 +0000
Manifest this update: Wed 07 May 2025 19:00:54 +0000
Manifest next update: Thu 08 May 2025 19:00:54 +0000
Files and hashes: 1: JDPCHXAUbfBXZ-JAE6cFE-tGXMI.roa (hash: bOxTgT+7J9XF4HocPumdm4M3ak6meIWnJq5cg5Hpmfs=)
2: qnD7s9sihDfWBXmaxPRZjSLhPhs.crl (hash: n1IKxtbJPCLXvEiU/QcsXFvnDQhVbYyXXNabr1/6Vm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnD7s9sihDfWBXmaxPRZjSLhPhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:1f:4b:87:68:80:ea:d8:fc:ea:29:2e:ae:2f:62:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa70fbb3db228437d605799ac4f4598d22e13e1b
Validity
Not Before: May 7 19:00:54 2025 GMT
Not After : May 8 19:00:54 2025 GMT
Subject: CN=91099268c9897f4427d34ebf552c02c5173bf96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7e:14:84:3b:8c:f8:09:17:28:e8:a0:de:45:
01:a2:16:f6:5a:8b:92:13:3f:70:b6:49:07:b7:de:
a9:83:b3:0a:88:48:ed:37:62:0e:9a:9a:b0:96:ea:
16:cd:47:db:6b:3e:a9:84:f9:46:58:f3:a2:eb:e5:
37:27:41:30:96:80:56:49:54:7f:00:af:79:80:b3:
9c:14:8c:60:d8:f9:59:d5:24:a2:93:69:5f:ea:7f:
e7:ab:76:01:2a:58:14:54:7b:25:4c:77:91:c7:39:
3a:cf:9b:3f:c4:24:e6:f3:3c:be:36:65:8b:ec:f4:
d1:fc:fc:ec:f2:96:35:ff:3c:3a:fb:cf:9c:90:cc:
55:2b:71:2c:37:98:59:44:46:89:08:54:ca:3e:91:
71:52:f1:71:bd:2f:94:df:ff:bc:d3:13:6b:6f:da:
58:9c:6a:d2:27:21:51:78:13:f9:92:93:0b:ab:ae:
e7:cf:c6:c3:d8:7b:2d:17:da:6e:2a:20:2b:48:5e:
b9:2c:f5:d1:4c:14:4f:fe:4e:22:f0:51:3b:03:1e:
1c:63:cf:3c:56:33:03:a0:d7:51:12:a9:63:3b:54:
d8:8f:83:c0:03:5c:08:9f:f6:e5:5d:4c:9e:96:e9:
9a:7a:74:ba:10:51:50:57:9a:63:a6:9f:de:79:75:
25:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:09:92:68:C9:89:7F:44:27:D3:4E:BF:55:2C:02:C5:17:3B:F9:6E
X509v3 Authority Key Identifier:
keyid:AA:70:FB:B3:DB:22:84:37:D6:05:79:9A:C4:F4:59:8D:22:E1:3E:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnD7s9sihDfWBXmaxPRZjSLhPhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:47:41:be:d1:fa:00:31:ff:bc:0a:3d:9f:f7:a9:d3:7e:ac:
26:24:08:b0:53:c8:05:f6:39:f8:d1:67:f5:dc:16:3e:31:3d:
98:3b:5f:7d:49:4f:ab:d2:b2:ee:13:32:d1:50:17:ec:fc:7c:
5e:3d:37:2f:34:de:6c:61:22:4f:76:24:1e:dd:7f:69:85:21:
3b:b8:06:e4:70:a4:e6:f2:c0:a8:c3:85:94:66:75:be:73:8b:
d3:f4:25:1a:2f:88:be:bb:ea:87:be:1d:3d:70:4d:75:bb:e8:
c1:e3:a1:a2:0d:bb:2d:84:a4:d9:35:70:2c:b4:27:a1:56:9d:
29:e2:a7:69:a6:e7:23:44:49:77:19:a5:1b:58:7c:71:42:a6:
4a:c6:5a:d2:61:9f:63:70:1a:4d:9d:a6:7a:f8:b0:ea:a2:17:
2b:8a:3c:a2:b2:dd:9c:c3:b7:aa:b9:2a:e6:e1:ca:ec:ab:e2:
ba:e8:98:4b:a2:4b:a8:9e:e8:1e:fc:73:9b:05:54:c5:3c:81:
e7:5a:70:44:76:21:4b:0c:3b:05:5a:e8:f4:5c:a6:8a:7a:71:
b1:b2:04:60:11:aa:34:04:1f:8e:cd:9b:71:6e:41:a1:84:31:
ff:ed:fd:02:03:10:e5:bd:68:21:2d:bd:d7:f4:6d:8e:8d:f8:
c0:f3:4e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 21:55:34 2025 by rpki-client