Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
File: qpoWTGVkErfar66FccxnnMb1h9A.mft (raw, json)
Hash identifier: d4onCdAGl/k5DZ44r0hcBVX2PG5PEr/XR0m1DxK1y6k=
Subject key identifier: 50:B7:74:DA:AF:0B:73:40:C9:2B:1D:12:B4:B1:6C:48:6B:44:E5:05
Authority key identifier: AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
Certificate issuer: /CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Certificate serial: 0196BD493DC6F76968636FC4AFEB4C6B9D6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
Manifest number: 1539
Signing time: Sun 11 May 2025 03:00:15 +0000
Manifest this update: Sun 11 May 2025 03:00:15 +0000
Manifest next update: Mon 12 May 2025 03:00:15 +0000
Files and hashes: 1: VnsTdGec-3pHRJVLeuucM8lE74g.roa (hash: VZlx25MKWdF5CVCWwcXrJ37GBCTfmMAe38xqZnEYBGw=)
2: _1ATULCZ98sbSKA4UnZIqchgnFI.roa (hash: dqzQIeMxGMrNSZ+FakLTrNvjbHnx3VcQtBASfsN8WNM=)
3: qpoWTGVkErfar66FccxnnMb1h9A.crl (hash: lOetVKDL62CVERI00h+6zLRy+7Qo3MoE1O81kwbSTLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:3d:c6:f7:69:68:63:6f:c4:af:eb:4c:6b:9d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Validity
Not Before: May 11 03:00:15 2025 GMT
Not After : May 12 03:00:15 2025 GMT
Subject: CN=50b774daaf0b7340c92b1d12b4b16c486b44e505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:60:35:5a:8c:15:88:bf:b8:23:cf:f2:80:61:
d2:d4:b8:06:2c:63:a1:87:1f:00:5b:2b:0a:23:1d:
1f:93:fb:d1:f8:76:ff:f0:df:87:65:95:e7:74:1a:
bf:d6:7b:94:b0:75:ee:67:87:83:8d:8d:aa:1e:1e:
c1:82:56:a6:2d:59:fa:6e:0c:06:70:ae:48:e7:74:
03:d2:7e:47:54:57:1b:b3:f5:6c:43:96:0c:7f:ff:
eb:58:1d:ca:f8:77:b7:08:7d:46:d5:c1:39:76:63:
3c:13:06:9b:3c:1c:80:52:c7:e7:41:b1:a7:8f:d9:
60:5b:69:6f:29:30:26:72:56:7c:e8:4c:87:88:b8:
67:5e:57:24:8d:2f:56:94:2c:dd:86:8f:dc:5f:b7:
e9:ec:f1:9c:9b:38:6a:eb:2c:2c:7d:b2:df:ac:42:
b7:54:72:fd:8d:59:d9:b3:59:64:26:b9:16:a3:7c:
7a:b0:33:f6:32:0d:b5:82:4b:8d:3d:8b:55:4f:b6:
1c:c5:59:83:c0:52:12:cc:88:d5:1d:3a:ea:b2:d1:
0b:d8:b3:bd:b6:65:38:36:bb:2b:72:2c:c2:a4:d4:
31:b5:f1:15:75:7a:44:30:81:3f:3e:52:21:64:c7:
5a:7e:31:7c:30:ed:26:91:cd:74:fa:b7:1f:bb:5c:
d6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B7:74:DA:AF:0B:73:40:C9:2B:1D:12:B4:B1:6C:48:6B:44:E5:05
X509v3 Authority Key Identifier:
keyid:AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:23:26:2d:c3:1c:bf:10:f2:a8:80:a7:5a:f3:85:a5:8e:c1:
15:00:f8:14:85:53:5f:05:10:7e:81:a5:38:b2:f1:fa:99:a2:
9b:27:a3:bb:34:95:23:79:33:46:22:f9:78:d0:a3:ab:be:92:
b4:c7:d5:00:f7:f0:c9:26:8d:82:74:be:0e:3e:b2:f1:43:bb:
29:75:0b:81:94:5f:f8:41:26:bd:62:19:07:4f:1c:fe:ca:85:
31:6d:d4:96:2f:98:1c:41:ad:67:bc:07:96:1f:47:13:45:69:
7f:2f:df:32:7f:49:9a:11:c9:43:50:01:79:4b:d0:c6:23:2c:
39:f2:cf:5e:e1:42:30:d7:fe:10:04:96:8d:f2:e8:77:b1:e2:
4c:9e:d9:40:51:b1:63:d0:73:b2:34:3c:03:bb:a9:9a:97:fd:
ae:dd:c9:aa:7b:02:b5:60:33:2a:7c:01:51:6a:68:12:4b:bd:
74:6e:6c:97:91:ff:76:9f:d2:97:a8:cb:b9:9a:df:90:d6:b9:
7a:d0:aa:fa:e6:48:09:c7:b8:8a:d7:01:4f:c4:29:1d:e8:57:
f3:f2:e1:02:cc:7e:f6:89:57:ef:3c:91:2f:da:f5:43:67:d2:
e4:62:e2:6f:77:5f:4b:7d:c8:1c:2f:2a:00:f2:5c:c4:28:6b:
62:21:e0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:24:52 2025 by rpki-client