Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
File: qipYxpehRJl2sNEdbxJgJeFAicY.mft (raw, json)
Hash identifier: YwBrI/SGw4LxWCE3JUFGXNb2Xrhcszkr0NrxvYo0Ctc=
Subject key identifier: 5F:E0:E0:B4:5D:F2:BB:00:01:C1:E3:06:9E:20:54:24:05:FB:89:59
Authority key identifier: AA:2A:58:C6:97:A1:44:99:76:B0:D1:1D:6F:12:60:25:E1:40:89:C6
Certificate issuer: /CN=aa2a58c697a1449976b0d11d6f126025e14089c6
Certificate serial: 0196BB5AD2B88D09720E7F119555BA9D28EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 18:00:13 +0000
Manifest this update: Sat 10 May 2025 18:00:13 +0000
Manifest next update: Sun 11 May 2025 18:00:13 +0000
Files and hashes: 1: VAOvYC0rpjyTuLuRBfTKmUOuh7I.roa (hash: 0vjmq1kF1TMQbQcMXUeFVD45hSzNPAtogdVXVCWqxwQ=)
2: iBm_nleUbu7zG2yhTM8e6MdS9CM.roa (hash: 6E9IJHdRNDgzTSIdwSFE5QhmL7tpMyjTB0okAPytvXs=)
3: qipYxpehRJl2sNEdbxJgJeFAicY.crl (hash: LJ6iAQPYgjswWNAU0HuSf1imlErk9sDiyl2XXNQoO/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 18:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5a:d2:b8:8d:09:72:0e:7f:11:95:55:ba:9d:28:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa2a58c697a1449976b0d11d6f126025e14089c6
Validity
Not Before: May 10 18:00:13 2025 GMT
Not After : May 11 18:00:13 2025 GMT
Subject: CN=5fe0e0b45df2bb0001c1e3069e20542405fb8959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5a:97:0d:ec:c2:c5:2b:65:b4:6f:13:8d:a2:
a3:14:2b:83:28:bf:88:1a:53:e0:1e:c7:41:8d:28:
1f:30:71:f0:90:f4:ec:33:fa:8b:0f:24:8f:fc:7b:
54:0e:4e:da:fc:ec:d7:14:13:4e:27:e0:e5:d0:65:
48:aa:d7:72:fc:cb:2e:07:a4:d5:af:99:2c:23:0c:
fb:5b:67:9f:e0:46:5a:79:68:1f:0a:10:85:4f:75:
cf:84:b8:14:26:6f:43:1d:36:6f:da:71:db:36:2a:
98:71:64:0a:a1:f4:ff:1a:7a:08:76:6d:ee:e6:67:
2a:b4:60:c5:2e:89:17:c9:03:44:7a:0e:fe:0f:0d:
8d:e4:47:dc:16:08:25:92:03:36:46:3e:59:50:85:
62:f7:ef:ea:a4:ec:eb:15:af:9f:5d:c7:cb:80:ec:
c1:0e:18:ae:18:20:02:6c:ad:22:ea:d5:ed:e5:8c:
0e:cc:ff:4b:49:de:fd:90:9e:0c:02:f2:39:5e:9f:
7d:90:8e:63:96:1d:34:65:83:a1:0e:6d:8c:7a:8f:
94:09:d8:3f:4b:33:b6:0c:79:d3:6e:78:35:64:23:
79:33:2f:4f:c0:b2:19:55:74:25:61:af:87:0c:8e:
fc:20:d6:42:26:32:c2:24:5a:de:e8:41:1c:be:6a:
7e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E0:E0:B4:5D:F2:BB:00:01:C1:E3:06:9E:20:54:24:05:FB:89:59
X509v3 Authority Key Identifier:
keyid:AA:2A:58:C6:97:A1:44:99:76:B0:D1:1D:6F:12:60:25:E1:40:89:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b4:14:8a:79:97:76:4c:df:b4:be:3e:a5:f7:b9:d2:cd:6b:
47:e6:ec:e6:20:ab:4f:e1:c3:14:22:fd:d9:cc:78:c6:db:41:
d5:6d:22:82:53:c3:a0:cc:d5:7f:6e:0f:ed:cc:f9:e1:5b:39:
d9:ea:73:2e:05:ba:c3:37:98:78:0e:e0:24:4e:e8:86:cb:61:
de:d7:cd:a6:0b:98:4f:93:52:cd:0c:71:5f:c4:e5:62:0b:13:
75:20:04:6f:3b:c4:9a:69:6a:91:79:f6:2b:1b:cd:60:c0:b8:
ed:83:7e:7b:ae:21:2f:14:06:9e:d5:98:80:69:25:9d:fa:dc:
00:1c:e9:9a:a0:db:09:bb:c6:bb:1c:1b:0e:f6:8c:96:a2:80:
ee:38:b7:2a:ec:53:45:05:cd:05:48:e3:e2:5e:1b:48:ce:ca:
6b:d1:c2:60:e2:00:6e:42:69:52:b7:7a:16:e6:62:90:84:99:
d2:3e:89:70:19:c0:18:b8:9d:f4:30:14:ea:bc:06:9c:1a:e3:
ac:5a:1a:3c:d3:aa:34:91:b8:ec:73:ea:b3:8f:e5:eb:aa:0b:
8d:68:4d:0c:a7:a3:c7:43:6d:8d:30:da:00:6e:8d:6e:c2:ad:
9c:05:43:cf:30:36:d0:37:2e:b8:e8:98:90:f6:6e:18:41:ea:
03:90:ea:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:58:02 2025 by rpki-client