Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
File: qDBcblgpStDtUWL6hCnaUWVlOTA.mft (raw, json)
Hash identifier: /VsXs+mOMBwOuuTR3gOGiaKtoF8msI4J0W/CSkBC6rY=
Subject key identifier: A9:FE:57:ED:1A:D8:E0:27:BF:8F:F6:25:81:CB:4C:CA:28:83:31:E2
Authority key identifier: A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
Certificate issuer: /CN=a8305c6e58294ad0ed5162fa8429da5165653930
Certificate serial: 0196A0BFAB9B56DFBCC1EC1D1C1D8F231A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
Manifest number: 1528
Signing time: Mon 05 May 2025 14:00:37 +0000
Manifest this update: Mon 05 May 2025 14:00:37 +0000
Manifest next update: Tue 06 May 2025 14:00:37 +0000
Files and hashes: 1: K1hHLihKHxHk06eTdbGXntsm7n0.roa (hash: L22VRHHVigykudQA1GmcYoeypbh6Yu5VUYyqOcGQaXE=)
2: qDBcblgpStDtUWL6hCnaUWVlOTA.crl (hash: LrAB5PS/HoHnolnx/uOlWwQrTHj/tl4bjpr/TjGJH/k=)
3: wPNMxy1HP_1cYFy7utzNj0qnsDA.roa (hash: yEdNFFWb7AqdqiQvhXrarz8nG5eHA1sOBjlHc/SL+pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:bf:ab:9b:56:df:bc:c1:ec:1d:1c:1d:8f:23:1a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8305c6e58294ad0ed5162fa8429da5165653930
Validity
Not Before: May 5 14:00:37 2025 GMT
Not After : May 6 14:00:37 2025 GMT
Subject: CN=a9fe57ed1ad8e027bf8ff62581cb4cca288331e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c7:27:21:c3:e2:78:c0:2e:44:41:7e:f5:c6:
ca:9d:74:4e:6b:83:b8:ef:da:a7:02:25:70:7e:6b:
4d:eb:3b:71:80:fc:3d:7c:f1:84:d0:ed:04:38:86:
41:96:41:db:87:d9:3a:cc:5d:7d:87:08:d9:94:2a:
47:be:33:4f:bc:cc:f2:5a:21:27:5a:ee:91:df:22:
e8:0f:b8:f3:48:b3:11:c0:12:e5:13:bd:3d:e0:ef:
6d:6a:dc:13:98:63:86:0c:2e:18:e2:c9:d8:d9:3f:
b1:04:63:aa:92:92:94:10:ea:db:3e:41:1c:4f:0d:
ce:e7:1f:3b:18:79:9d:3a:33:90:5d:af:b9:61:e1:
dd:1b:0d:33:45:cc:42:31:03:59:48:9c:1b:82:da:
2a:74:51:37:41:4a:eb:42:fe:00:09:29:7e:31:89:
dd:4d:a4:47:fb:a6:3b:ba:4e:ea:29:76:ec:73:df:
8e:e9:ee:f1:dd:1a:3e:cd:a6:32:d6:d3:93:f3:40:
d8:91:e4:f2:b8:f0:28:4e:7a:74:77:ef:26:f7:10:
ca:f4:25:21:0b:19:2e:5d:09:c7:27:4e:33:03:66:
e2:68:d5:f5:a2:52:c6:80:f8:1d:30:13:df:03:5e:
53:bb:5e:88:c3:5d:91:61:a0:38:45:6b:a8:c4:f2:
a8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FE:57:ED:1A:D8:E0:27:BF:8F:F6:25:81:CB:4C:CA:28:83:31:E2
X509v3 Authority Key Identifier:
keyid:A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:64:f5:c5:bb:cc:95:86:29:2b:e3:6a:d8:c4:8e:17:13:34:
65:0d:24:b4:7d:e4:cb:90:12:9c:31:48:44:90:36:8b:38:0b:
b1:27:2b:c5:00:b9:1b:46:57:0e:4e:f9:f4:9f:25:23:7d:ca:
9d:75:61:db:8b:03:d1:5d:ee:84:62:f4:9b:2f:5d:95:ad:ce:
8b:3a:22:0c:0e:a3:84:53:dc:2a:d8:2e:07:55:1b:4f:2e:a5:
c3:cc:2f:a5:67:c4:60:91:67:69:d6:82:14:62:7e:8a:6f:e8:
5c:30:33:b4:9a:ff:64:6e:f3:20:3a:fe:ab:09:9c:ea:9e:ed:
61:b9:74:78:74:61:76:dc:07:bd:97:56:39:05:a6:a8:d8:04:
38:9b:27:fb:8f:fd:a6:bf:75:16:65:29:8b:0f:cc:cc:98:6f:
6b:f9:33:eb:bc:14:ec:79:07:93:fc:a1:2f:4f:a3:f4:b6:3c:
89:7e:14:fc:fc:c0:51:3c:26:ce:31:fe:ff:22:e5:f0:92:96:
43:87:62:f9:35:1d:3b:45:65:7e:0c:18:8a:9f:5d:bf:b5:43:
3d:61:23:04:b5:82:30:bb:6f:02:6e:08:4e:12:91:5f:98:bb:
3e:1a:4f:28:f0:73:1c:b5:f7:b2:91:2d:23:ae:5a:73:c3:42:
d3:38:b8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:22:05 2025 by rpki-client