Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft
File: qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft (raw, json)
Hash identifier: KwDlTFmWRV6v+1+/mGQIRe7ZUAhT4kSEk40IA2A+Fqk=
Subject key identifier: 0F:24:1B:0A:B5:F0:9E:B5:7E:F3:8A:29:A7:75:F0:0B:96:25:09:B9
Authority key identifier: A8:20:F4:34:5C:0E:E4:D9:D7:FC:6D:69:BE:FB:F4:55:BE:C9:87:42
Certificate issuer: /CN=a820f4345c0ee4d9d7fc6d69befbf455bec98742
Certificate serial: 0196B6A2C700D5C2467FAC3AF52087CE6C78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft
Manifest number: 05FF
Signing time: Fri 09 May 2025 20:00:43 +0000
Manifest this update: Fri 09 May 2025 20:00:43 +0000
Manifest next update: Sat 10 May 2025 20:00:43 +0000
Files and hashes: 1: qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.crl (hash: hGGGu/Is+oJKsPhYzkOs/9DGfA0RmwStxs0eoXUkMqs=)
2: vJJQ7dMyrgz7V87aem8R5eRT1tU.roa (hash: YVuwtpk4uTSArI127axgnPV75XcPEeuaWjYEyG0FBxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:a2:c7:00:d5:c2:46:7f:ac:3a:f5:20:87:ce:6c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a820f4345c0ee4d9d7fc6d69befbf455bec98742
Validity
Not Before: May 9 20:00:43 2025 GMT
Not After : May 10 20:00:43 2025 GMT
Subject: CN=0f241b0ab5f09eb57ef38a29a775f00b962509b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2f:99:04:60:b6:c3:bc:50:ca:07:47:eb:82:
f9:0c:dd:1e:a6:68:8e:64:a6:3b:dc:d2:a7:b2:b4:
6d:72:56:0c:91:4d:29:3e:22:96:b1:b4:da:5a:b0:
5d:cc:d5:56:7e:9b:86:fa:50:db:7b:a0:35:a3:fa:
61:f7:e1:53:75:3d:63:5b:87:94:46:49:76:62:42:
30:b9:55:f4:74:9c:44:6c:2b:29:63:84:5c:ce:51:
a4:44:e4:99:54:8a:66:1b:3e:27:5d:f0:86:f3:de:
bc:57:fe:03:ce:87:da:3c:f0:e0:03:41:98:60:0e:
69:a8:9a:69:2f:ee:c1:13:15:1d:1e:0c:6c:6c:89:
ae:98:6a:2f:67:eb:c9:44:93:69:b4:5e:ff:07:4d:
71:0f:3c:e8:a4:ff:ac:73:82:2e:d1:ce:b0:e1:f8:
de:8a:47:01:5f:86:41:1d:7b:d8:62:84:e2:2f:57:
c5:72:e8:42:74:91:b5:9c:48:e1:cb:e1:6c:ba:d8:
62:28:24:77:97:aa:b2:74:c0:8c:14:57:73:3c:ed:
76:8e:a8:ba:6f:e0:41:79:f9:6e:3e:88:51:ec:ac:
4f:e1:b1:b9:92:cd:80:87:22:85:da:d8:07:63:0f:
c0:48:3a:6d:b0:1e:44:f5:86:c4:2b:ff:2c:04:9b:
16:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:24:1B:0A:B5:F0:9E:B5:7E:F3:8A:29:A7:75:F0:0B:96:25:09:B9
X509v3 Authority Key Identifier:
keyid:A8:20:F4:34:5C:0E:E4:D9:D7:FC:6D:69:BE:FB:F4:55:BE:C9:87:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:57:c1:2d:d9:b3:b6:f8:06:22:e2:eb:5f:49:93:7a:f5:35:
e6:3e:27:35:84:8b:f7:c8:71:3d:72:79:cb:5f:f0:d0:31:95:
a7:3d:a2:0f:c0:ec:93:ad:84:46:b9:78:03:4d:e5:86:33:bd:
67:c3:52:08:6c:04:e6:6e:1f:2e:ab:6f:e8:4e:6d:78:e7:50:
32:d8:03:f3:3c:fc:74:75:86:97:89:e1:df:61:dd:de:84:b2:
9e:d9:27:8e:2d:f7:26:b1:aa:9f:58:a0:c9:75:30:32:15:27:
e2:ec:5a:10:8f:e7:2d:2e:e9:8b:92:96:86:c4:11:9e:3a:c9:
b8:82:72:3c:ca:61:19:66:c9:83:b3:59:9d:df:3f:81:03:4e:
a7:7d:38:cd:e5:d8:48:8c:9d:c0:87:2c:db:5b:19:88:d3:5f:
81:c7:1d:86:21:e1:51:13:0e:fb:fb:45:cc:6b:47:2e:18:d6:
1f:47:23:b9:3e:30:9f:e7:32:75:ee:32:17:94:d9:6f:f9:d2:
c6:73:9b:d9:41:5e:4b:05:68:98:3c:01:4d:83:92:41:d0:01:
c3:0d:9c:3f:a9:48:32:bc:06:77:2d:a3:3c:d5:d4:78:03:47:
fb:54:c2:63:cb:02:4b:ef:f6:98:2e:0e:ef:f6:9a:78:0e:f9:
1b:de:bb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:55:45 2025 by rpki-client