Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
File: qJbB4UyG5u9bFnJPcRdnbschSVc.mft (raw, json)
Hash identifier: GdDO7WukkDr5qSAOksBTOnrGhMcEgbZ1DJHDxHSe+Ig=
Subject key identifier: 81:AD:E0:03:FC:BE:4E:42:E7:1C:31:30:1D:A1:F5:B9:6F:37:F1:6E
Authority key identifier: A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57
Certificate issuer: /CN=a896c1e14c86e6ef5b16724f7117676ec7214957
Certificate serial: 0196C3F06A6CE2DB06BE9E69419912A2DF65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
Manifest number: 153A
Signing time: Mon 12 May 2025 10:00:35 +0000
Manifest this update: Mon 12 May 2025 10:00:35 +0000
Manifest next update: Tue 13 May 2025 10:00:35 +0000
Files and hashes: 1: nHAl3SgY4EfLu7utGVmeJZcr1_s.roa (hash: lrIHVcXwhi/Eq6CWKi+Aq4ByD1FHp2btPHqZK4Ez+BE=)
2: qJbB4UyG5u9bFnJPcRdnbschSVc.crl (hash: NrOHglV1vcR7xM7UDuRdv0xTYk7XUPP7/K/tH9zjk1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:6a:6c:e2:db:06:be:9e:69:41:99:12:a2:df:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a896c1e14c86e6ef5b16724f7117676ec7214957
Validity
Not Before: May 12 10:00:35 2025 GMT
Not After : May 13 10:00:35 2025 GMT
Subject: CN=81ade003fcbe4e42e71c31301da1f5b96f37f16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:52:82:37:a7:54:62:f9:89:04:3b:6a:0c:ad:
ff:33:94:ee:25:78:ad:2d:ae:90:11:ee:d0:57:fb:
01:57:f0:8a:ab:4b:02:09:a2:b9:31:96:35:64:f3:
17:c0:a2:5b:48:c9:1e:62:3f:42:aa:2e:d7:10:81:
71:1b:4b:85:1a:ba:e6:90:bf:f8:95:b0:84:bd:eb:
0a:a9:84:d5:8d:ea:5c:13:4e:41:bb:d4:bc:82:46:
ab:45:8f:e3:f6:c3:eb:0b:1c:26:08:a6:4a:ce:9f:
27:39:51:08:69:66:e2:ff:6a:92:d9:b1:72:13:bb:
2f:e6:6e:5a:cd:d5:36:c8:32:d2:8b:46:b4:54:eb:
16:64:aa:9a:8b:c8:fe:78:19:a7:96:52:36:ff:c1:
dc:ee:8b:ff:e6:59:33:2a:2f:44:de:45:06:b1:c8:
1b:2e:8e:85:3a:ac:f8:75:db:76:5e:c9:f7:2b:1e:
a2:c1:f8:66:ef:a0:89:22:f8:66:3e:3c:c0:88:42:
9b:1a:0a:20:a6:27:58:21:c2:67:44:37:24:2a:88:
d3:24:87:1a:39:04:60:1a:25:12:25:4e:8b:e3:3b:
ce:54:23:e7:07:c4:d4:10:0a:21:db:a1:d4:59:76:
f0:4c:e7:c1:69:d4:37:a8:d6:6e:e3:f3:5d:22:b2:
e3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AD:E0:03:FC:BE:4E:42:E7:1C:31:30:1D:A1:F5:B9:6F:37:F1:6E
X509v3 Authority Key Identifier:
keyid:A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:99:7b:10:80:74:86:bd:e6:5d:0e:22:0e:a7:51:b8:e0:bc:
5e:73:ee:3d:44:c9:c1:f1:fa:c7:6b:c6:95:d5:44:5e:22:e0:
1e:70:e0:b4:02:d8:77:7b:32:4d:9b:76:23:ec:50:73:a7:bf:
e8:78:d2:60:69:e4:d5:99:ea:89:cb:88:fd:4a:b1:8f:a5:c5:
96:cc:38:54:11:9a:0d:ea:f7:c2:79:2b:15:c1:98:29:3c:ea:
8b:ed:52:3f:8c:6b:b7:b3:ae:8d:d1:c9:82:b5:c7:2d:09:52:
f3:59:0b:16:a3:ad:6f:6e:ae:6a:df:96:fd:6d:93:f9:0e:a5:
85:1e:5c:25:cd:e3:9d:d2:44:9e:7d:35:db:0e:ff:02:2a:aa:
48:a1:06:ac:eb:37:2a:e1:61:14:ce:5d:02:84:03:9a:c6:68:
ac:8f:05:7a:c4:f4:59:5a:e3:d6:95:92:6f:b2:0f:48:16:a7:
77:9f:a8:ac:f9:da:36:a2:ff:7d:17:27:69:6a:1a:59:83:66:
c9:1e:be:23:ce:27:5f:a0:43:8e:c7:5c:77:7b:f2:f8:2f:a6:
6e:d7:a9:bb:94:d4:3a:dd:c7:73:75:72:31:87:35:5b:b7:15:
ed:4b:d2:5d:02:80:e0:ad:20:7a:ff:2d:97:12:83:5d:9f:48:
49:4e:bb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:21:48 2025 by rpki-client