Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
File: qagVvnVH64cOtfZB0w_mljdByOA.mft (raw, json)
Hash identifier: IiK7/g9oHV/ngRjKDIG11oSscoXch/uQujnzr7KXNvY=
Subject key identifier: 02:6F:A5:44:3F:01:C0:D1:3A:86:1B:86:01:0C:0F:54:C0:02:D5:15
Authority key identifier: A9:A8:15:BE:75:47:EB:87:0E:B5:F6:41:D3:0F:E6:96:37:41:C8:E0
Certificate issuer: /CN=a9a815be7547eb870eb5f641d30fe6963741c8e0
Certificate serial: 0196C38293B85A5485A922C251F33406BF2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
Manifest number: 1536
Signing time: Mon 12 May 2025 08:00:36 +0000
Manifest this update: Mon 12 May 2025 08:00:36 +0000
Manifest next update: Tue 13 May 2025 08:00:36 +0000
Files and hashes: 1: 2q99xK6_Y55DJ8twtidPEpKbMLI.roa (hash: 6B+AlnTFnPjLyFTrr9nsccgH4b2Zg0KTuMdqT3nd8bQ=)
2: CpAGaYd2l8fGo8vqA9rEzSn2JUw.roa (hash: PZfZ1+zaF0Gne48BiqHvjg73fyl9yH1GS45Ddth2ZI4=)
3: qagVvnVH64cOtfZB0w_mljdByOA.crl (hash: Uy9m65AgoQN5LHESSeNHxo1YRDgPo6l39HUkgD2erhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:82:93:b8:5a:54:85:a9:22:c2:51:f3:34:06:bf:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a815be7547eb870eb5f641d30fe6963741c8e0
Validity
Not Before: May 12 08:00:36 2025 GMT
Not After : May 13 08:00:36 2025 GMT
Subject: CN=026fa5443f01c0d13a861b86010c0f54c002d515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e8:3c:71:4c:a0:d8:39:00:b8:29:17:4e:3c:
18:b8:76:6b:09:52:bb:3b:66:6f:e3:46:5e:34:97:
95:1c:82:26:ab:b5:9d:95:c4:94:eb:bd:2e:b3:39:
74:99:55:35:89:23:01:b2:2c:47:1a:fa:59:08:f2:
bc:13:18:50:ad:0d:57:82:45:85:40:bf:63:81:a1:
7b:77:bb:43:42:3a:0a:d0:19:15:67:04:a9:96:00:
76:43:c0:37:94:32:38:54:62:f5:6f:ba:7c:d2:16:
39:a5:7f:59:13:ec:eb:91:a6:53:62:0a:f4:10:11:
27:73:d9:6c:d5:f4:1a:09:7a:8b:27:32:15:a1:bf:
73:b8:9a:8e:e5:72:ce:37:02:71:2d:8f:15:3f:b8:
9c:ae:a9:4f:2c:90:7e:25:ae:c9:7e:b2:0c:69:6a:
0d:44:62:4f:81:1a:20:f6:18:80:84:74:a8:39:5f:
ef:db:5a:8e:aa:49:bb:9a:76:55:b3:0f:3c:68:33:
ca:67:63:b5:a7:07:fe:3c:a1:76:01:90:fe:0c:b1:
46:56:40:21:4b:e9:76:12:fe:ed:49:5f:29:59:b4:
cc:04:ad:03:6d:33:97:16:2d:d7:8e:c3:91:3f:14:
cb:c9:36:e7:9f:96:af:94:03:92:42:3c:c4:d6:94:
1d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6F:A5:44:3F:01:C0:D1:3A:86:1B:86:01:0C:0F:54:C0:02:D5:15
X509v3 Authority Key Identifier:
keyid:A9:A8:15:BE:75:47:EB:87:0E:B5:F6:41:D3:0F:E6:96:37:41:C8:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:6b:3a:71:22:f4:13:9a:ce:b1:f8:58:6e:6c:23:af:af:c5:
66:08:a6:90:1e:7a:e4:96:f9:ef:c3:75:2a:4d:79:0f:c7:1e:
50:fb:96:cf:b0:1a:a1:93:a1:b6:8c:cb:16:4d:1f:80:9c:b8:
50:d9:49:fb:39:ad:66:6c:4d:e7:82:27:e6:77:9a:63:db:d9:
e9:0e:34:42:ac:67:6d:28:0d:57:39:34:32:7e:3b:6e:08:ac:
70:35:db:06:fb:0d:c0:41:26:02:d1:9f:64:2a:4c:b8:28:0d:
d9:55:66:7e:22:b5:c2:69:51:f9:83:ac:56:83:db:c3:9e:96:
62:46:d5:66:21:65:3d:ea:3a:7d:f5:7e:72:e4:b3:7b:71:3f:
11:aa:51:4b:4b:e3:fa:2f:19:05:1d:71:be:ce:c2:fc:5c:e0:
ba:10:98:27:fa:30:47:8b:e1:18:67:b7:5b:de:5f:96:81:ce:
8d:76:52:8d:e1:87:d5:36:9b:ef:03:57:ea:c8:25:b5:f5:bd:
75:cb:99:74:2d:6c:83:08:60:25:41:ef:72:79:7c:f4:77:d3:
b1:df:ce:9a:9d:04:7e:3f:27:af:2c:25:28:de:96:28:d9:58:
63:51:ef:01:3e:66:e9:7a:ca:13:f1:ea:fe:bf:fd:c2:6f:dd:
4b:ac:f1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:09:55 2025 by rpki-client