Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft
File: qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft (raw, json)
Hash identifier: TIGuKV7p47e0p347hts1s4RFHAsgQcjE2t+7Xmyo124=
Subject key identifier: A8:9A:59:8D:FE:70:70:C6:DC:2A:01:FC:F7:5C:CA:38:D7:EC:2B:80
Authority key identifier: A8:E5:14:8B:39:9B:53:BA:52:FD:68:EA:BD:BD:F6:AD:99:CC:71:F4
Certificate issuer: /CN=a8e5148b399b53ba52fd68eabdbdf6ad99cc71f4
Certificate serial: 0196BB245945C0262D087C261F769F1AD91F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft
Manifest number: 029F
Signing time: Sat 10 May 2025 17:00:43 +0000
Manifest this update: Sat 10 May 2025 17:00:43 +0000
Manifest next update: Sun 11 May 2025 17:00:43 +0000
Files and hashes: 1: 5lkgevE67JqLPCJiuIVDQvx8C9s.roa (hash: TbV0l1n+K1FvkmmG4RWk4U+vij9oLV2Tx8NUa3IQ8as=)
2: qOUUizmbU7pS_Wjqvb32rZnMcfQ.crl (hash: 9jD29AyOLf4jGy33PDab48xf7D/B3GJ1hEO0itE1+Gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:24:59:45:c0:26:2d:08:7c:26:1f:76:9f:1a:d9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e5148b399b53ba52fd68eabdbdf6ad99cc71f4
Validity
Not Before: May 10 17:00:43 2025 GMT
Not After : May 11 17:00:43 2025 GMT
Subject: CN=a89a598dfe7070c6dc2a01fcf75cca38d7ec2b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4c:62:25:c8:2c:7b:11:ad:02:a9:d4:3f:0b:
b6:d6:52:d6:2f:66:ca:59:22:64:23:ab:48:76:07:
26:8e:e3:40:05:b2:12:80:4f:fe:22:33:7e:e6:e2:
59:f5:18:fa:37:41:19:e8:64:0e:59:ff:7a:86:fb:
a5:9b:95:99:27:64:6b:6d:97:16:72:70:ce:cc:21:
8a:8b:1d:b3:4c:ea:62:b8:4b:e5:1b:7a:38:fd:ac:
1c:39:59:ee:47:b0:3f:1a:40:f6:4c:83:69:a6:e9:
aa:55:ef:2f:2f:d0:fa:9e:33:c3:27:5d:6f:6b:3b:
58:c4:7e:ea:e4:36:43:75:7d:e7:7a:1e:98:55:09:
12:1c:42:0e:2f:49:a8:35:c8:41:18:b3:7b:cb:5a:
1e:c3:36:57:27:da:bd:38:39:15:86:85:3c:ad:e3:
c8:07:c2:fc:1a:ca:06:52:b3:4b:de:37:83:c0:9d:
0e:ac:01:77:28:c7:9f:a9:af:3d:4a:93:92:8c:2a:
06:47:e4:b1:7f:d1:ad:c2:41:3a:03:52:cf:d0:82:
b6:bb:fe:a1:91:66:fc:19:f7:f2:01:cf:37:a1:e3:
5f:62:7f:0d:09:60:87:4f:cf:82:f5:fc:fb:ea:28:
30:ad:94:77:9a:6c:96:f2:c1:90:3a:65:34:19:92:
b7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9A:59:8D:FE:70:70:C6:DC:2A:01:FC:F7:5C:CA:38:D7:EC:2B:80
X509v3 Authority Key Identifier:
keyid:A8:E5:14:8B:39:9B:53:BA:52:FD:68:EA:BD:BD:F6:AD:99:CC:71:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b2:e7:30:ab:43:19:cc:cd:a7:a6:42:ca:fa:9e:82:ba:ef:
23:04:7e:d8:f5:09:92:c3:de:57:e8:c9:dd:e3:66:fa:19:64:
73:91:0e:34:aa:c0:00:cd:94:de:c4:cc:39:84:d4:57:46:81:
b0:97:48:45:f9:0b:79:7a:b5:52:06:82:1e:53:e6:48:1b:17:
1c:25:db:63:78:6e:38:b9:bf:79:a9:4a:d3:1e:06:cb:3f:c3:
bc:d8:08:b5:42:a6:12:84:2a:29:9e:d2:7d:a3:ad:8d:de:09:
2a:fa:fb:6d:13:ce:7c:11:a2:16:c7:f0:ef:57:85:e1:6b:82:
3e:cf:02:d6:a8:74:a3:0c:18:fd:95:df:56:43:ca:21:82:c8:
2e:6d:36:ad:da:d5:d6:9c:f6:56:26:fd:8d:88:d1:2f:7b:61:
89:a3:0a:87:a7:86:ec:11:ae:a0:72:06:d2:c6:fc:d2:28:b6:
27:d9:6b:87:4b:70:d4:ef:5f:57:7f:6d:3e:d4:40:c3:b1:4b:
5a:dc:d5:78:81:c8:b1:55:bc:fe:4d:de:4c:a9:52:10:5f:dd:
f4:20:b7:9d:fc:f6:08:9a:8d:0d:dc:70:bd:fb:c1:ed:4e:73:
2c:d7:39:2c:71:90:6a:85:c1:52:33:66:fa:60:ac:d5:7d:2b:
34:5a:fe:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:46:43 2025 by rpki-client