Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
File: qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft (raw, json)
Hash identifier: jWPte72Gxvx+mumxUhDt6tc7BUBI5PsehJBoTh797G8=
Subject key identifier: 66:7A:BC:46:97:9D:B2:57:E0:83:1F:CA:86:98:11:AC:8D:FC:EC:10
Authority key identifier: AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58
Certificate issuer: /CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58
Certificate serial: 0196B9A35730C8A4A7AB924240CD55D0F3D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 10:00:11 +0000
Manifest this update: Sat 10 May 2025 10:00:11 +0000
Manifest next update: Sun 11 May 2025 10:00:11 +0000
Files and hashes: 1: nEGj30N7Wbasb6AnvF-74ldwKOw.roa (hash: 4FClR6vcMY2SCJnOebSa9NEF0JcRgbJiRCF7Wp1Q7zQ=)
2: qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl (hash: FuhV4X62O3gmxhiY1dKdMWf+89hxkEyswxeDIFLxjzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a3:57:30:c8:a4:a7:ab:92:42:40:cd:55:d0:f3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58
Validity
Not Before: May 10 10:00:11 2025 GMT
Not After : May 11 10:00:11 2025 GMT
Subject: CN=667abc46979db257e0831fca869811ac8dfcec10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e9:cc:a4:5c:6a:fe:3c:98:28:c7:17:f0:ed:
54:3d:b5:a7:39:7c:2c:cf:8c:09:de:b6:78:70:e4:
22:00:c1:76:23:ba:db:18:5a:4d:b0:ad:ba:f1:ad:
92:61:66:aa:4d:46:1c:25:26:04:06:79:90:b5:06:
92:4e:9b:4d:40:23:95:2d:57:b8:10:cf:0a:2d:10:
11:12:b9:cb:4f:88:fb:01:3c:ed:1e:e5:99:86:10:
0f:9c:a4:14:f5:32:2b:ba:a8:91:47:75:fd:92:31:
c3:6e:4f:aa:f6:2b:52:57:4d:e8:92:d4:0a:28:fe:
a6:2e:32:56:9e:75:4e:f7:db:99:0f:f6:c8:ad:2b:
bd:2c:29:7d:75:84:b9:47:8c:10:ec:86:87:02:47:
9f:d0:0a:92:7c:5d:ea:67:55:38:b2:21:26:9a:9e:
0c:cc:7b:d0:45:8a:fc:4d:04:89:c9:da:90:d5:83:
79:1b:28:48:83:9b:74:7e:e8:49:28:a9:c9:f3:4c:
92:31:d2:df:c7:27:28:7a:11:f4:3b:6b:ac:df:9a:
4c:f2:26:cc:14:a0:80:5c:04:ed:6d:23:52:ca:3c:
5b:ed:0d:8c:58:17:88:02:23:0f:10:e8:c3:15:b0:
01:52:88:e8:fb:80:28:95:bc:b1:df:f8:9b:2a:69:
03:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7A:BC:46:97:9D:B2:57:E0:83:1F:CA:86:98:11:AC:8D:FC:EC:10
X509v3 Authority Key Identifier:
keyid:AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:26:90:dd:cb:b3:b9:1a:cd:52:71:84:7b:11:7d:f8:ba:3b:
12:c0:7a:47:80:be:ed:10:93:8a:98:65:e4:8e:04:21:24:2a:
68:ec:93:b3:f1:b7:c4:be:7d:3e:8f:eb:d6:89:f1:de:b7:0d:
44:24:39:d7:43:dd:8b:0a:0a:02:29:bb:ca:a0:0e:d8:49:9e:
e7:70:e7:19:f3:68:a2:4f:50:16:35:29:33:12:09:7e:9d:e5:
0a:a1:8b:04:f6:b4:33:5b:33:f4:52:3e:cb:52:8f:f0:3f:97:
72:32:ed:aa:be:de:fb:7f:f8:0e:b5:d8:65:7a:d0:94:ed:ee:
f0:59:24:0f:72:82:c7:2b:3b:f3:67:e8:fb:f4:d9:34:8f:44:
12:b0:a3:70:d8:12:03:c3:f1:c8:73:ee:37:ce:bc:75:a6:07:
fa:d1:e3:3b:70:b4:04:26:98:fb:b8:2e:51:d6:cf:ff:2a:93:
62:43:da:06:5d:8c:41:03:be:60:f8:7a:ff:59:62:a5:e7:e3:
35:b1:c3:94:5d:4f:b5:fc:a9:16:8e:55:48:7c:f7:3d:f6:21:
c8:91:99:f5:57:d9:6b:b8:fc:78:6e:54:e3:60:2e:6f:e0:00:
89:27:7c:eb:60:94:08:3b:4e:5c:b4:df:30:df:83:2b:db:43:
05:f7:99:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:53:00 2025 by rpki-client