Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
File: qeC20TzRHzYRT6mEAzgElByC8UM.mft (raw, json)
Hash identifier: Nl1NEuQqFbr/9zc0TUfIPy0ls59AbPI3BE8JtW25rBE=
Subject key identifier: 1E:0A:8D:80:5A:97:91:8A:E9:50:10:5D:EB:86:D0:93:0B:AB:F3:05
Authority key identifier: A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43
Certificate issuer: /CN=a9e0b6d13cd11f36114fa984033804941c82f143
Certificate serial: 0196BDEEA218649D0549E5152B2E99A4D9D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
Manifest number: 110F
Signing time: Sun 11 May 2025 06:00:54 +0000
Manifest this update: Sun 11 May 2025 06:00:54 +0000
Manifest next update: Mon 12 May 2025 06:00:54 +0000
Files and hashes: 1: lO3U7O5xn_SH8biBa02wbaj6rwE.roa (hash: Ur2/ddmmedYhTdeyhrYUxfNHrSlslVFvOy6wD+8Tc1U=)
2: qeC20TzRHzYRT6mEAzgElByC8UM.crl (hash: 8W6gXDbpGnboadOkb+Xbmlh0OqGLo9U8UaZQp+YMSKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:a2:18:64:9d:05:49:e5:15:2b:2e:99:a4:d9:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9e0b6d13cd11f36114fa984033804941c82f143
Validity
Not Before: May 11 06:00:54 2025 GMT
Not After : May 12 06:00:54 2025 GMT
Subject: CN=1e0a8d805a97918ae950105deb86d0930babf305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:90:dc:77:e1:5d:2b:98:95:2c:33:1d:97:bf:
2f:74:79:8b:00:b0:95:d3:a2:63:91:14:7e:dc:59:
ff:82:e1:1e:a2:25:5e:44:54:46:6a:b3:33:39:8d:
1a:04:76:88:c0:d4:55:f5:b8:1a:81:81:bb:4f:70:
cb:b0:1f:c4:74:b9:c3:43:32:43:f7:a8:b5:bf:29:
42:8b:26:be:a7:af:f1:b4:99:2a:d2:3b:42:cb:68:
ce:3e:92:86:6f:0a:5c:6d:38:8b:b1:31:a0:56:46:
7b:0d:b8:6d:9f:22:92:85:4e:34:51:9e:52:6b:df:
3c:9e:00:36:10:8a:75:66:a6:b0:bd:19:c1:f4:a2:
7d:85:52:d4:72:3e:89:b9:3b:7d:92:8c:1f:59:56:
bd:46:59:a6:7c:7f:a5:d4:ec:41:14:a3:4e:3e:0e:
8b:bd:29:0e:63:7f:60:6f:30:d1:b1:ff:fe:c9:05:
ff:8a:8f:88:81:bf:da:e5:b0:d7:b0:89:1d:d7:a1:
51:af:a5:59:22:7a:38:0b:70:a6:98:93:d4:c5:a0:
7d:fd:6e:06:bb:bc:1a:43:e5:b1:dc:66:7e:8a:84:
b0:80:ab:23:a5:d5:ad:72:60:07:94:78:fa:49:ad:
97:47:97:cd:5e:ef:52:4c:0d:79:b9:b3:41:7d:9c:
6a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0A:8D:80:5A:97:91:8A:E9:50:10:5D:EB:86:D0:93:0B:AB:F3:05
X509v3 Authority Key Identifier:
keyid:A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:83:e6:2e:a0:b3:00:44:f0:f0:00:72:82:ed:94:9d:5a:f2:
ca:b2:b5:f6:13:6b:9b:c6:31:a4:31:fd:fa:a3:f5:e3:49:b8:
18:e2:05:d8:dc:eb:05:0e:4c:78:1e:8b:96:cd:3e:69:de:3f:
c5:7b:97:a0:23:05:1e:24:53:61:24:1a:07:89:ff:1d:61:30:
1a:0a:ec:83:9f:8f:44:63:25:af:29:00:49:eb:a1:c1:1a:90:
c7:c9:2b:ea:6e:24:1f:1d:1c:09:ab:8a:2a:d7:b2:10:af:b9:
e4:9d:24:67:c1:3c:4c:fd:21:50:a5:b2:a8:92:51:59:f1:1b:
8c:d8:0a:cb:66:64:87:77:7e:d2:aa:99:79:63:2f:3e:de:77:
98:b1:58:aa:f5:82:71:76:b7:66:fc:36:84:db:26:a4:64:52:
80:47:51:19:52:65:1f:7c:a0:eb:c8:91:78:bf:85:8d:0a:c8:
a0:64:db:44:94:b5:75:47:24:9a:03:b9:db:09:31:d8:5c:6f:
4d:1c:34:5e:f0:62:81:11:9d:c3:16:19:ae:e6:27:ce:ad:8e:
23:0a:0c:7d:99:53:71:50:11:e4:fc:27:0f:b7:05:3d:cc:38:
05:36:a1:36:38:c6:47:43:23:88:7a:f2:eb:f7:d5:cc:bd:84:
0b:68:b3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:23:22 2025 by rpki-client