Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
File: qfL96iY7efzhE4kFKwzZQJlcbf4.mft (raw, json)
Hash identifier: ryfYR8zH0uVOa8/fn7zjCrAbo9mcSbtXYR26K+XPTz0=
Subject key identifier: CA:25:84:F0:E1:57:CB:6D:AB:FA:AD:AE:4C:45:05:B9:0D:5B:34:15
Authority key identifier: A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
Certificate issuer: /CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Certificate serial: 0196C83B0FB8E5905CAAE47F96751387B225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
Manifest number: 0BC7
Signing time: Tue 13 May 2025 06:00:35 +0000
Manifest this update: Tue 13 May 2025 06:00:35 +0000
Manifest next update: Wed 14 May 2025 06:00:35 +0000
Files and hashes: 1: LkgrvRMkyor3Sl-mJe0dukFEQiw.roa (hash: f/Dqc2xTcB53OeZM5QyPDCr0/e3CXOFI6hD2Qj8d+a0=)
2: PIFbvqZsTCVITsXCVJp94hRSd40.roa (hash: cQLvhNHJgfoGCqvXulMMhioH9SATxRMjiGUXlSo7XxA=)
3: X5Pbij4rIL8Dq4Js8EvH7j1Wj7k.roa (hash: JTczwWTBd9G1q76W/pHd7YHIV9ZzN4VCk+pl3uv/6uM=)
4: qfL96iY7efzhE4kFKwzZQJlcbf4.crl (hash: e9cam7mNypBx8Za9OvRzVeXJ0yj3zm8WsennoYUXN+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:3b:0f:b8:e5:90:5c:aa:e4:7f:96:75:13:87:b2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Validity
Not Before: May 13 06:00:35 2025 GMT
Not After : May 14 06:00:35 2025 GMT
Subject: CN=ca2584f0e157cb6dabfaadae4c4505b90d5b3415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b4:3e:64:34:5d:e4:67:7e:6f:db:7f:44:52:
b1:8a:ed:bc:e8:03:99:cd:77:7b:6a:d1:84:41:9d:
dd:0e:b6:a6:5b:d6:3a:4d:ca:97:bf:27:85:26:98:
66:1d:13:f0:d8:a6:54:6b:b9:4c:20:1f:a7:4f:49:
65:bb:d8:0c:80:56:e9:d1:8d:ee:13:d5:dc:7b:c2:
d2:f5:d7:03:16:d1:c6:71:38:52:ae:a5:10:32:bf:
a9:9d:2f:71:a7:01:fe:6e:79:69:a2:49:eb:e9:81:
0f:3a:3c:39:8e:f6:40:4a:01:a1:85:f1:08:e9:bb:
7a:51:25:06:e8:09:14:6b:8b:e1:db:a3:8c:aa:ca:
56:df:39:7c:28:53:35:e4:aa:c9:51:9e:ba:e5:92:
65:5d:49:2b:02:60:14:4e:1a:f0:ff:f9:d3:37:48:
71:d6:28:3a:e9:d2:08:a6:2f:7c:70:12:92:6a:df:
4e:92:93:18:c3:b6:a6:7c:a0:ac:34:6b:dc:be:2f:
04:bd:c6:b3:08:6a:bd:b1:6c:e5:0f:25:bc:ee:82:
6b:cb:d7:5f:88:b8:2e:75:12:94:1c:50:0e:d9:ff:
3e:6d:ba:8d:ab:95:8e:13:3c:b8:85:04:a5:0d:2e:
f9:72:da:15:60:95:cd:33:6b:6c:23:5c:2e:75:ee:
85:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:25:84:F0:E1:57:CB:6D:AB:FA:AD:AE:4C:45:05:B9:0D:5B:34:15
X509v3 Authority Key Identifier:
keyid:A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:09:6d:cd:2f:09:dd:09:0e:67:1a:51:ec:24:83:ea:0e:28:
ab:28:da:89:aa:45:30:70:42:b3:54:e8:0d:71:9f:7f:80:d2:
b0:fd:f9:22:1a:29:25:8e:ff:c2:19:51:f8:2b:e8:f8:24:8d:
51:59:f9:c3:ef:6d:d9:8c:c3:38:31:8b:3f:52:3a:7e:fa:c0:
2e:ea:0a:b7:5e:fb:5a:3c:ca:61:c1:e1:b3:76:7d:56:2b:ff:
6a:25:2d:3b:3a:aa:4e:dd:66:cc:30:57:e3:2b:3d:2b:65:28:
18:28:3a:88:4c:04:0c:a5:c7:05:50:51:19:7d:dd:27:77:83:
63:77:a4:be:b0:fd:d5:77:7b:18:09:4c:a8:05:b0:fe:22:9f:
e8:37:2b:f8:5b:25:a2:ee:76:3f:76:f9:dd:e4:ea:20:f2:7c:
fc:e9:ce:3f:74:e4:5f:e1:99:36:67:a8:84:cc:2d:e7:7d:e5:
a8:9d:3e:51:06:c8:25:a3:f8:68:5f:ea:10:76:b1:9d:6f:cd:
4d:45:68:85:af:d2:f1:0e:80:6e:ed:c5:69:d0:ab:23:71:07:
82:ef:9d:a5:46:0f:b7:c5:0b:81:83:ac:a1:11:94:ab:c6:3c:
b7:64:2d:fa:cf:6f:65:0d:9f:39:c9:2e:01:9b:65:99:26:1c:
dc:67:93:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:01:37 2025 by rpki-client