Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
File: qS25uA37nJVniwfvLJU9YxB_X2I.mft (raw, json)
Hash identifier: FCA0JXvi4yIeEQg2UllT0YjeNCK59tEwzPJtn9819Vw=
Subject key identifier: 09:03:D1:1B:AD:1A:68:A1:4F:C3:2C:4A:FC:C2:A0:B4:16:7C:71:83
Authority key identifier: A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62
Certificate issuer: /CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62
Certificate serial: 0196BAB64F5F836B2E550A001E78D098A852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
Manifest number: 0793
Signing time: Sat 10 May 2025 15:00:31 +0000
Manifest this update: Sat 10 May 2025 15:00:31 +0000
Manifest next update: Sun 11 May 2025 15:00:31 +0000
Files and hashes: 1: qS25uA37nJVniwfvLJU9YxB_X2I.crl (hash: cF27bb4/Bihi9VlFA4svdD0LckeKDM1K3qvOHwLU+xU=)
2: u2PcO0qxdpMSmR6nWgSSQ3nTHEM.roa (hash: hawJL7X7ALdqooYTS/10qneIqHecH3wASpMJDU35WRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 15:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:b6:4f:5f:83:6b:2e:55:0a:00:1e:78:d0:98:a8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62
Validity
Not Before: May 10 15:00:31 2025 GMT
Not After : May 11 15:00:31 2025 GMT
Subject: CN=0903d11bad1a68a14fc32c4afcc2a0b4167c7183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b2:59:43:a2:ca:0b:17:64:16:a5:28:ff:0e:
8f:06:9e:58:85:fc:7c:28:2f:01:6a:a9:5e:50:07:
65:0f:db:03:ed:56:6e:6b:02:72:5e:29:fa:6f:76:
ea:4b:51:3f:1b:6b:f4:73:63:3a:0b:94:aa:b1:27:
3d:15:39:c5:9f:b5:da:32:8c:84:9f:5c:21:db:ef:
ef:8a:52:6f:bf:c6:09:3c:be:44:f0:df:1f:09:3f:
d8:64:b2:e3:60:ec:4a:cb:3f:2c:e1:b3:00:ac:a7:
1c:06:53:4e:f6:00:1c:f0:e8:cc:4d:01:47:a1:c3:
db:8e:1d:49:97:bf:dc:da:b1:97:f9:ee:32:24:4b:
52:27:ae:e3:7d:38:5d:4e:e5:f8:d0:41:3c:bf:d0:
0f:1d:e5:12:54:b5:3d:61:fc:e5:8f:48:78:13:2a:
63:61:be:30:91:8b:41:ac:a4:dd:7f:cb:c0:54:29:
57:73:17:f2:08:bb:6d:c5:8d:13:3b:8c:31:fb:57:
b3:41:e5:d7:e5:4c:a1:27:50:16:07:d3:ac:47:f5:
b5:91:cc:b8:bd:48:55:e5:78:56:58:7d:fb:ef:2f:
20:65:38:db:f2:e2:f7:4b:58:11:15:9e:16:a8:a7:
03:67:7d:12:c4:5e:7d:fb:8f:a5:74:7b:f3:c9:0c:
d0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:03:D1:1B:AD:1A:68:A1:4F:C3:2C:4A:FC:C2:A0:B4:16:7C:71:83
X509v3 Authority Key Identifier:
keyid:A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:52:cd:7f:4b:af:5e:de:69:a7:3d:da:9c:92:9e:00:9d:47:
18:87:68:3f:ea:9a:12:aa:10:06:c4:a9:08:f6:4c:00:66:43:
6f:a5:92:14:eb:c8:3c:4a:51:b2:ef:2e:6c:b0:be:4a:2c:b4:
f5:76:d3:8c:2d:0a:dd:24:a0:ae:dd:34:8e:08:17:3a:0c:28:
0b:67:46:d8:bb:5b:eb:90:64:50:20:4e:70:12:f9:df:db:ad:
76:fb:86:50:f4:a1:5f:b0:45:46:6a:ca:b5:9c:63:86:76:12:
65:98:6f:80:32:45:8b:94:6d:9b:12:2b:18:83:00:6c:5a:f4:
e4:3d:9b:e6:7b:55:53:f3:57:bf:42:ba:65:ef:f0:59:f0:82:
88:20:c7:fb:4f:86:9c:c7:f4:0b:a6:fe:28:dc:38:ef:b5:de:
2d:e1:df:82:f9:10:15:e5:ea:e2:23:74:55:1e:4f:6b:ef:cf:
3e:fc:bd:44:74:b3:47:3b:7b:bf:de:ad:8d:4e:85:39:2c:98:
a6:26:75:c4:4e:ac:e2:a0:d3:df:92:16:19:84:36:35:1e:57:
b3:a2:a6:d7:52:68:cc:e4:0b:8e:b6:1a:a6:2e:2f:93:4f:ad:
51:a2:e2:8f:f7:ef:88:3c:4c:1b:5b:85:47:c9:c5:32:9b:f1:
4d:4c:5f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:36:53 2025 by rpki-client