Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
File: qawfhZW61VgkDXQGgAChz3CLoaU.mft (raw, json)
Hash identifier: sLW1SCLFt/0cct46j+1Mo0HFwi9ijnUezvtWzjHJKlQ=
Subject key identifier: 7A:D9:21:CD:6B:9E:8D:79:76:6B:75:28:7D:C7:83:58:60:9B:98:1E
Authority key identifier: A9:AC:1F:85:95:BA:D5:58:24:0D:74:06:80:00:A1:CF:70:8B:A1:A5
Certificate issuer: /CN=a9ac1f8595bad558240d74068000a1cf708ba1a5
Certificate serial: 0196C984EF4F324843296018F49BDB3BD5A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
Manifest number: 1535
Signing time: Tue 13 May 2025 12:00:54 +0000
Manifest this update: Tue 13 May 2025 12:00:54 +0000
Manifest next update: Wed 14 May 2025 12:00:54 +0000
Files and hashes: 1: BW_w5tNvIWO1-tVFP8df1MdaWTA.roa (hash: rExjPSaaFahRIKD/ZiQ7dk1JIKInqDzh+Jo+aqkHWCA=)
2: SHt83tHCOqEqNWz8C0rDKgPLSVk.roa (hash: 5uUYud3teEzP7h4GRY2ZjMn6NzU1+BqyXIl56/9+cO0=)
3: qawfhZW61VgkDXQGgAChz3CLoaU.crl (hash: 81p6uL/o9KQXUrtglflAIs90PjAL8zp9g40iwSavJvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:84:ef:4f:32:48:43:29:60:18:f4:9b:db:3b:d5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ac1f8595bad558240d74068000a1cf708ba1a5
Validity
Not Before: May 13 12:00:54 2025 GMT
Not After : May 14 12:00:54 2025 GMT
Subject: CN=7ad921cd6b9e8d79766b75287dc78358609b981e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9b:5b:69:5a:eb:95:fd:be:15:12:5d:25:68:
a2:80:d7:49:fb:d4:0b:da:73:b5:18:7b:90:0f:5d:
52:02:76:9c:35:72:d9:94:6b:d3:35:67:12:b8:cc:
8c:0f:70:09:bd:2a:89:e0:62:43:d4:b0:c4:b2:02:
4b:7c:02:e6:6e:4e:22:8b:e9:2c:d6:10:8b:3d:ec:
c4:6b:4b:32:70:15:45:00:53:e1:93:df:73:ff:dc:
a7:96:bf:99:64:95:83:59:ce:d5:e7:8c:18:9d:f3:
7e:15:e6:6d:fe:83:0b:de:67:bb:0c:4f:f2:ee:bc:
84:57:20:0e:33:a9:e9:b2:47:32:7e:b3:9b:f8:df:
2a:f8:63:09:6b:0b:f5:34:68:fb:5c:16:49:dd:14:
09:47:65:5e:38:9f:51:f3:11:58:08:af:09:1b:0e:
b8:76:d7:f0:a4:26:ed:4e:6a:5b:67:59:64:95:cf:
de:84:5e:f9:2f:0e:9e:0e:6b:05:26:df:48:53:57:
03:29:c5:67:17:bc:a7:4e:2b:a3:4f:5a:17:2b:ac:
26:4a:3b:b9:79:e2:7a:6a:a1:b6:da:7f:6d:4f:b2:
8e:62:53:e6:78:c2:c0:67:4a:62:83:f0:4c:db:33:
25:44:0f:40:19:ce:de:a8:4f:37:b1:35:35:5f:ea:
7a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D9:21:CD:6B:9E:8D:79:76:6B:75:28:7D:C7:83:58:60:9B:98:1E
X509v3 Authority Key Identifier:
keyid:A9:AC:1F:85:95:BA:D5:58:24:0D:74:06:80:00:A1:CF:70:8B:A1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:0f:c1:81:37:39:3a:53:be:5f:c8:58:68:94:e9:2b:85:8f:
15:a2:c3:1f:70:cf:d8:08:2c:4e:9a:a4:73:b9:b0:27:ed:9e:
50:a5:8a:25:87:ff:71:c7:ad:df:72:c5:0b:50:d1:1c:76:08:
f3:cb:da:fa:43:be:67:6e:04:df:d5:e4:f6:85:3a:35:09:8e:
8b:cc:b9:2e:98:97:8e:22:43:25:54:32:07:d0:1d:05:26:e4:
94:57:40:29:79:56:c9:33:a8:0c:10:91:63:1d:bb:09:4d:d6:
a4:e8:cc:59:e9:8b:0e:65:8e:4b:b2:40:4b:a1:23:17:54:2a:
e3:87:f3:dd:31:5e:78:b5:95:d9:e1:b0:f9:ab:e4:83:71:f5:
92:11:58:21:d9:9d:ed:89:81:b5:fa:78:6b:d8:b9:47:7f:20:
87:50:b7:26:7b:1f:2e:aa:8f:a9:ff:2a:80:39:f0:f5:e2:df:
d5:77:d2:83:99:e1:91:0b:dd:38:85:4c:63:3e:81:e7:c3:d9:
bd:e6:78:99:8d:90:21:38:14:1e:8a:ee:b1:d1:ea:e3:f2:60:
b3:71:5f:ad:e0:c2:db:fc:46:30:96:d6:27:d2:37:69:11:b3:
5c:88:d9:fe:91:96:39:00:22:bd:1b:fe:10:23:45:96:96:18:
c6:82:da:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:48:06 2025 by rpki-client