Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.mft
File: q9lqrojvmbTVDknsrpyuSPN4gfc.mft (raw, json)
Hash identifier: oPlCxQay+/cTwqkAtNHPK50bYuY4YJ/xOAd/3my39sY=
Subject key identifier: 0F:75:22:1C:D7:11:F1:E0:40:4A:8F:C9:FB:11:B2:3A:2B:3C:81:49
Authority key identifier: AB:D9:6A:AE:88:EF:99:B4:D5:0E:49:EC:AE:9C:AE:48:F3:78:81:F7
Certificate issuer: /CN=abd96aae88ef99b4d50e49ecae9cae48f37881f7
Certificate serial: 0196DBF906BE57508D9A9006D17B7506F04F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9lqrojvmbTVDknsrpyuSPN4gfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.mft
Manifest number: 0192
Signing time: Sat 17 May 2025 02:00:52 +0000
Manifest this update: Sat 17 May 2025 02:00:52 +0000
Manifest next update: Sun 18 May 2025 02:00:52 +0000
Files and hashes: 1: jOBsmTZZQR2oFpHPynuOSfcKlhQ.roa (hash: HS2UqrHXUPTUg04Ke/uHXIU8tldEPiGgxWt1zu5k5H0=)
2: q9lqrojvmbTVDknsrpyuSPN4gfc.crl (hash: fkgYILwbzH07uPhxDoHrp0kAh6I535gwNsG7zlFKBw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9lqrojvmbTVDknsrpyuSPN4gfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:db:f9:06:be:57:50:8d:9a:90:06:d1:7b:75:06:f0:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd96aae88ef99b4d50e49ecae9cae48f37881f7
Validity
Not Before: May 17 02:00:52 2025 GMT
Not After : May 18 02:00:52 2025 GMT
Subject: CN=0f75221cd711f1e0404a8fc9fb11b23a2b3c8149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b5:a5:7d:90:8c:9c:67:70:3a:c2:02:78:5b:
f8:00:4f:55:16:cb:02:fe:4d:10:de:c6:3b:35:97:
22:55:fd:7a:c6:35:52:33:f2:23:0c:c6:b4:cb:22:
8d:62:00:be:b8:58:e5:1a:ea:3a:5b:fc:05:89:2f:
db:d7:af:48:31:ee:56:3d:42:ca:39:38:62:67:dd:
fd:8b:b5:90:7a:17:5b:50:2b:7a:78:5e:1d:90:60:
8e:f5:12:20:59:6d:36:2f:bf:d2:58:3d:c7:72:6f:
9c:c9:b5:19:80:fd:c0:b4:85:7c:30:92:f0:ee:13:
01:09:94:58:6c:92:2b:b3:da:8d:3d:09:24:08:0e:
f8:4f:df:c9:bc:c1:81:48:02:c7:98:df:11:68:12:
bf:d8:af:9f:a6:c9:5d:3b:6b:0d:27:81:2b:97:cc:
57:bf:e4:b5:09:15:a7:aa:bc:d9:b6:eb:db:ee:3d:
a4:bd:9c:48:a7:47:cb:c4:bd:22:4b:49:42:4b:c6:
f1:bf:d9:6b:0a:5e:3f:da:5a:8d:31:d7:64:e8:96:
22:f7:bc:f1:2f:80:4e:9c:d9:2a:9e:b6:be:7b:f2:
47:77:c4:ae:8b:f2:da:13:cb:4a:67:29:90:35:cb:
e5:19:d1:10:78:76:93:c2:d9:c0:36:cc:44:fd:1a:
a9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:75:22:1C:D7:11:F1:E0:40:4A:8F:C9:FB:11:B2:3A:2B:3C:81:49
X509v3 Authority Key Identifier:
keyid:AB:D9:6A:AE:88:EF:99:B4:D5:0E:49:EC:AE:9C:AE:48:F3:78:81:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9lqrojvmbTVDknsrpyuSPN4gfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:06:a6:2e:69:3c:39:63:53:2f:e0:ec:da:24:e7:94:9d:d8:
71:73:70:46:7e:5d:17:54:56:fc:72:6b:2b:b0:a7:09:95:56:
d3:6a:01:9c:85:a1:44:c1:ac:9f:e7:f3:09:24:00:10:ea:28:
66:26:cd:fd:03:2b:43:7c:86:bd:4b:4d:41:c1:cc:56:8f:1a:
81:4d:90:fc:c1:d1:38:54:42:ef:37:96:51:8f:5b:a1:c8:77:
8b:ea:a9:37:50:73:96:d6:d8:b7:9c:88:98:22:63:95:be:7a:
37:fb:d7:71:ca:d4:a9:9c:2d:d1:bb:e2:c0:85:0a:96:06:bf:
1e:53:7e:2b:5b:85:19:35:e1:ae:1c:18:d2:b2:ae:ea:fd:46:
18:11:e5:cc:fd:de:68:8f:f9:8e:bb:ad:81:87:e4:28:ec:30:
c2:73:65:86:5b:1b:df:63:b5:c0:ed:50:1c:79:33:08:33:c4:
4b:6d:82:db:3a:7a:00:59:57:87:98:72:e7:36:6a:01:43:bc:
97:d1:94:8c:11:9f:9d:56:16:26:1e:06:3b:d8:6e:96:0e:af:
ec:d8:2b:bb:97:c6:4a:74:b0:fb:b4:48:55:f0:95:b4:53:28:
72:99:37:ca:59:96:0b:89:cb:36:51:f5:40:e4:17:1a:ec:c5:
58:1c:fc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 08:28:49 2025 by rpki-client