Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
File: qsavDCm-vHxIXPgAHanxmTCs5F0.mft (raw, json)
Hash identifier: ILSuWB4aN1M1BNh2cToCiKY8b1YJRE9KXYWHFN0NjBg=
Subject key identifier: 74:85:5F:EF:67:73:22:9B:93:71:8A:97:2F:7E:AE:32:8F:5B:88:DE
Authority key identifier: AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
Certificate issuer: /CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Certificate serial: 0196C57120EC065AF3F09BF1BA09C33E3235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
Manifest number: 153C
Signing time: Mon 12 May 2025 17:00:47 +0000
Manifest this update: Mon 12 May 2025 17:00:47 +0000
Manifest next update: Tue 13 May 2025 17:00:47 +0000
Files and hashes: 1: _O5lI_NrxjYhfLVpiDzpC5pBpNo.roa (hash: kRyUBDk7DeOK1Op874QsCkY85Pkvq4XHwWApA0Uvb60=)
2: qsavDCm-vHxIXPgAHanxmTCs5F0.crl (hash: HxKiL62GSkMWhgtJ8EorI4RuHTHYADAyE48FbXuUOYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:71:20:ec:06:5a:f3:f0:9b:f1:ba:09:c3:3e:32:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Validity
Not Before: May 12 17:00:47 2025 GMT
Not After : May 13 17:00:47 2025 GMT
Subject: CN=74855fef6773229b93718a972f7eae328f5b88de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2d:4c:3b:69:24:e0:23:98:50:c5:27:8f:eb:
a4:7b:fd:13:7b:4c:6d:26:c1:fd:30:c2:72:8d:c2:
90:e9:25:1c:6c:54:09:99:36:ff:dd:54:b8:9e:59:
01:54:3f:64:c9:08:4b:3c:98:dd:f1:1e:2d:2c:92:
3a:8c:2e:11:56:bf:f9:8c:8a:f6:0e:8d:7c:17:ef:
f8:1e:2c:b9:f0:08:59:b1:aa:57:f1:7a:97:9d:b7:
b1:4a:c7:f5:bc:fb:87:4c:f9:a6:84:61:41:92:cc:
90:1e:e6:84:b6:01:1a:a5:e9:e9:86:f4:a7:94:f4:
93:d8:8f:37:78:d0:59:96:a3:ea:77:be:1e:bc:91:
20:d9:1c:5b:33:e7:82:a4:dc:40:c1:82:40:37:7a:
fb:9a:fa:e2:12:05:8b:e5:f2:82:84:d9:05:30:96:
32:11:e9:b3:85:c8:95:eb:32:d5:8f:be:dd:6e:ff:
56:ca:ad:66:1d:4b:4d:72:fa:5f:0d:6c:e3:ba:02:
bf:9d:50:08:a8:9c:85:37:e0:eb:00:bd:a0:c2:51:
8d:d6:ac:a5:aa:c9:95:ab:99:3e:4c:ee:b3:31:c0:
66:9e:85:f4:77:08:62:09:95:1d:59:35:98:ca:66:
21:d3:dd:7e:a2:ab:84:50:a5:92:df:31:2d:f2:5b:
8a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:85:5F:EF:67:73:22:9B:93:71:8A:97:2F:7E:AE:32:8F:5B:88:DE
X509v3 Authority Key Identifier:
keyid:AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6f:33:ec:75:7e:d5:7b:a0:c5:5c:26:7d:b2:d3:41:1e:25:
7e:a8:6a:96:49:c5:85:60:63:65:85:f8:d2:68:76:de:7d:67:
52:f6:a9:23:49:b7:ef:d6:c8:37:95:43:aa:a8:70:80:a5:dd:
d9:6c:2f:68:29:17:f6:38:52:bd:54:4b:6f:0e:6c:4a:ce:54:
80:27:5d:97:8a:81:98:b4:1b:03:71:b8:47:a4:a0:b0:cf:95:
86:f9:f7:39:99:39:de:c8:92:dc:cf:79:7a:b4:f4:a1:d8:56:
ce:de:08:18:2b:1d:af:08:69:dc:9d:a1:56:46:62:89:6a:c6:
38:36:2e:62:74:fd:f1:4b:f3:06:b5:e1:c3:83:2f:b9:08:2b:
8a:26:26:04:37:5d:04:43:86:c3:1c:60:d0:f1:1b:eb:d3:f4:
dc:80:f2:0e:95:1d:4e:6f:89:e3:62:88:38:5d:7b:63:e5:ac:
06:b1:94:23:84:f9:05:89:57:fb:cd:77:df:3e:d6:f9:85:08:
c8:4b:a4:ac:42:45:98:f7:a6:8b:97:8c:3b:77:0d:4d:71:e1:
91:5f:b9:7b:b4:7f:5c:4c:a6:b3:ff:33:7b:83:4d:4c:16:2a:
46:11:81:e3:09:62:fc:bc:1c:25:7c:62:dc:10:9d:54:b5:c3:
10:ef:4b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:51:31 2025 by rpki-client