Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft
File: qqMUWS716ou-hNBkslYXH-KvyD4.mft (raw, json)
Hash identifier: Su7naD+XOS8jhAXOnir6mJF6Ob4oXuzR2b35nR6DYDM=
Subject key identifier: FF:EB:CD:67:40:EE:AD:65:CB:B1:39:71:C1:74:4A:75:7B:D9:B1:B7
Authority key identifier: AA:A3:14:59:2E:F5:EA:8B:BE:84:D0:64:B2:56:17:1F:E2:AF:C8:3E
Certificate issuer: /CN=aaa314592ef5ea8bbe84d064b256171fe2afc83e
Certificate serial: 0196BFDC8482E5AC2F6EAEE2F9B2026CC53E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft
Manifest number: 09B7
Signing time: Sun 11 May 2025 15:00:22 +0000
Manifest this update: Sun 11 May 2025 15:00:22 +0000
Manifest next update: Mon 12 May 2025 15:00:22 +0000
Files and hashes: 1: qqMUWS716ou-hNBkslYXH-KvyD4.crl (hash: kx+v4EPI7nOGlRSqqrTDeXzi7vNfbIiF1koR/eMO82Q=)
2: svg34J6rFMVB3i_8SEjkmyJCwjg.roa (hash: sxr7df0i+WFpR1Zcb5aW78WjZKAtxDkC7tuYAw5Z5pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:84:82:e5:ac:2f:6e:ae:e2:f9:b2:02:6c:c5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa314592ef5ea8bbe84d064b256171fe2afc83e
Validity
Not Before: May 11 15:00:22 2025 GMT
Not After : May 12 15:00:22 2025 GMT
Subject: CN=ffebcd6740eead65cbb13971c1744a757bd9b1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:da:22:99:40:f4:94:a1:dc:63:09:70:4f:da:
4b:bd:76:52:3b:37:9c:8c:d1:1d:11:c7:cc:9f:b0:
fb:94:25:9f:3a:57:af:b7:9f:dc:bd:21:3e:f7:14:
70:7d:7c:01:45:4f:ea:a3:fe:e2:de:2d:71:80:f7:
36:5a:41:72:37:73:b1:6b:d5:9c:d9:38:e6:5a:a1:
4c:0e:83:d1:71:3e:8c:c4:d5:92:80:44:03:19:93:
14:d1:d5:97:6a:ea:67:c7:8c:b7:53:8b:ce:76:28:
16:bb:65:3a:79:92:a1:b3:cc:63:43:c0:5f:eb:ed:
57:44:cd:da:e9:1f:17:06:0f:e9:53:95:42:4e:fb:
6d:88:7e:9e:c0:bd:01:c6:9c:82:5a:09:19:1a:54:
71:5b:19:b2:36:88:f9:6c:65:10:19:02:e3:0d:a3:
65:a7:de:e7:38:cb:53:31:ef:1d:11:91:45:13:90:
d5:b4:e4:f3:5e:e8:6d:71:b1:60:8a:46:d6:dc:a5:
eb:66:03:14:a2:86:ac:08:cd:da:94:45:5f:17:67:
55:24:db:77:82:91:c3:2b:45:48:44:f8:ea:c7:c9:
f5:a0:3b:b8:3e:c2:fe:fc:99:06:e7:4a:71:dc:04:
1f:c3:af:f7:f2:0a:94:83:82:09:b1:a1:8b:2f:8c:
8a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EB:CD:67:40:EE:AD:65:CB:B1:39:71:C1:74:4A:75:7B:D9:B1:B7
X509v3 Authority Key Identifier:
keyid:AA:A3:14:59:2E:F5:EA:8B:BE:84:D0:64:B2:56:17:1F:E2:AF:C8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b7:94:f9:5f:c7:39:8f:3b:1a:ef:61:48:99:34:4f:6a:a1:
4b:a4:69:6e:29:51:13:a3:d1:b4:c1:d7:cd:fd:36:f7:10:b8:
fa:b2:69:1a:df:9c:19:4d:50:60:fd:23:bd:83:79:63:88:f2:
15:c5:10:03:ce:29:23:c1:a5:ae:83:fc:b8:95:03:26:8b:20:
a7:ef:d6:2e:8b:a4:c3:1c:cc:26:59:aa:af:da:d4:02:5c:97:
dd:d1:57:49:5f:84:b5:c5:01:b5:0e:0a:49:5d:91:a9:ad:67:
9b:f3:1f:e6:e6:42:59:ff:7d:f1:53:cb:1f:18:2f:29:11:fb:
91:2b:d0:5d:2a:47:35:c0:ef:56:f6:d0:25:1b:ae:8f:27:20:
bc:cd:d4:e5:11:c3:5b:da:bc:40:14:58:b4:5f:9e:3c:c8:8c:
2f:c3:81:c6:c2:ed:c0:b4:0d:eb:30:1f:be:7e:44:d5:fa:1b:
e4:a9:19:d8:53:76:94:3d:27:fa:16:0e:21:9a:a1:42:68:76:
bb:76:b7:44:3e:0e:6c:57:75:77:9e:bf:91:23:bf:bf:27:a5:
e4:ff:fc:37:1c:bb:04:eb:e0:d3:4f:18:07:8b:80:f7:17:fc:
80:69:9d:19:55:38:7c:bb:33:28:89:d3:17:33:fa:01:35:4d:
1e:57:76:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:08:59 2025 by rpki-client