Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
File: qoXp2iInNFwYq9fnUnL4HCmzDRs.mft (raw, json)
Hash identifier: fk0bYbqtNqVegxPPFfxCCtFjTW/swdbVKJyqooG+Vwo=
Subject key identifier: DD:87:5E:0A:65:A0:FB:40:15:7B:1C:70:C7:1B:9A:D7:4A:E7:56:1B
Authority key identifier: AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
Certificate issuer: /CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Certificate serial: 0196C34C0C8554BE669D0906C339821BBC75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
Manifest number: 14C9
Signing time: Mon 12 May 2025 07:01:03 +0000
Manifest this update: Mon 12 May 2025 07:01:03 +0000
Manifest next update: Tue 13 May 2025 07:01:03 +0000
Files and hashes: 1: lVJpe260qGX3e6stTFn772vx8lk.roa (hash: yoxYAKlvQPYmMi4Wc+00BZ6o5xl5cSxpwL5SfaGUG28=)
2: qoXp2iInNFwYq9fnUnL4HCmzDRs.crl (hash: ZglbxJZ0/yNrO0IX/hPWH3jGWudElEkLIoNiM3Ls0uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4c:0c:85:54:be:66:9d:09:06:c3:39:82:1b:bc:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Validity
Not Before: May 12 07:01:03 2025 GMT
Not After : May 13 07:01:03 2025 GMT
Subject: CN=dd875e0a65a0fb40157b1c70c71b9ad74ae7561b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7d:bd:c8:6e:3d:f3:d6:76:06:a9:41:da:21:
19:0d:7c:9d:a0:b3:9c:75:db:81:05:7d:06:77:ec:
c8:69:37:bf:6b:94:16:4d:37:61:a6:92:9f:c2:18:
ea:64:be:56:e9:34:21:f3:cb:07:3a:41:26:d8:70:
85:e2:70:78:2b:1f:5b:7b:dc:5c:14:46:21:43:2a:
6e:b0:43:ab:4b:3f:1a:1d:da:9a:a0:f3:f1:e5:0b:
29:58:e3:bf:f2:61:9e:af:3c:e9:9e:9f:c8:dc:f8:
aa:4d:0e:26:4f:67:73:aa:f5:fb:ec:49:54:1b:10:
6c:f3:bc:15:ff:ea:21:5d:f5:57:44:fa:81:83:00:
7a:0f:b3:28:46:52:45:da:56:49:16:51:d2:47:d8:
6f:4b:7c:55:46:d3:ea:80:e2:8b:8c:45:49:6b:58:
06:67:47:0b:1b:3a:4c:ed:f0:fb:0e:bd:4f:7f:25:
d2:4b:4a:84:35:cb:07:3e:cd:b8:32:8f:67:45:41:
29:48:be:0b:93:db:80:76:a5:2c:d6:53:a4:4a:4d:
76:2a:1a:ad:a1:76:89:82:1f:5e:08:f8:8e:bf:18:
e2:8f:da:d9:3e:3a:9e:33:3e:97:2e:2b:41:c4:fb:
9f:f9:bd:90:22:3b:e2:ed:60:3f:02:d6:22:6b:aa:
a2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:87:5E:0A:65:A0:FB:40:15:7B:1C:70:C7:1B:9A:D7:4A:E7:56:1B
X509v3 Authority Key Identifier:
keyid:AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c1:9d:8d:f2:90:4f:78:de:ef:9f:ca:56:04:5a:bd:77:b7:
59:1b:20:e5:e4:9d:32:98:3f:86:e5:e1:bd:f2:ef:ea:db:1b:
1c:9f:65:d0:45:8a:58:0d:1e:17:2a:cb:3b:83:bf:f6:d8:10:
b2:8f:d4:53:a3:bd:dc:e8:dc:6e:99:a6:bd:a8:2b:b7:b6:bc:
f1:18:9b:d3:44:7c:c3:50:55:41:65:d8:8f:d7:65:1d:1d:60:
7b:ed:1d:a1:44:0b:73:c9:8f:df:91:7c:e8:8e:fd:b3:cb:cc:
9d:dc:da:d9:95:1d:43:f9:af:e2:e2:aa:22:73:b6:a0:b1:e0:
a0:21:9e:9f:fd:e0:95:25:24:2b:e6:c5:1f:fa:02:7c:b0:e3:
84:43:e5:6c:90:2c:43:02:78:51:1b:5c:c2:e7:65:0e:2b:6a:
d4:5e:7d:5a:75:f3:58:d9:bc:2b:59:6d:3b:c8:d2:45:a6:b6:
52:05:09:e4:60:83:46:35:96:52:8c:de:db:77:af:a6:b2:81:
ff:e1:c9:6f:70:de:c5:16:2a:f0:b5:f2:a2:89:6c:6b:f5:b9:
11:af:1b:e0:d8:14:13:62:b4:c0:eb:f8:f9:c0:c6:47:c0:0b:
0f:0d:15:f2:a4:e7:38:40:23:c9:aa:fd:c4:35:82:5c:c1:a9:
22:3e:17:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:11:00 2025 by rpki-client