Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
File: qQ35UgJATbHy5A7D3n7sON1qn-4.mft (raw, json)
Hash identifier: HunmSxyfX0OPEMVtve7zPi03HWxYezPbrfdSX/0uqck=
Subject key identifier: 7D:4C:4D:2C:0B:EC:FA:9B:1D:F6:BC:C7:AD:81:72:3D:EF:F3:18:E0
Authority key identifier: A9:0D:F9:52:02:40:4D:B1:F2:E4:0E:C3:DE:7E:EC:38:DD:6A:9F:EE
Certificate issuer: /CN=a90df95202404db1f2e40ec3de7eec38dd6a9fee
Certificate serial: 0196D1074BE5F1D7ED20D00E3D0695FE5E8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
Manifest number: D3
Signing time: Wed 14 May 2025 23:00:38 +0000
Manifest this update: Wed 14 May 2025 23:00:38 +0000
Manifest next update: Thu 15 May 2025 23:00:38 +0000
Files and hashes: 1: qQ35UgJATbHy5A7D3n7sON1qn-4.crl (hash: lOP885yIub69JC4C+XlaCmIPURwcmQfs+imnphUbvpY=)
2: xDaTSU1r08U3icbYzh9eT36EBN4.roa (hash: AXlgpTaBb24aHDSoXt8sy77THaBujLte6mCP+q3Zt1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:07:4b:e5:f1:d7:ed:20:d0:0e:3d:06:95:fe:5e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90df95202404db1f2e40ec3de7eec38dd6a9fee
Validity
Not Before: May 14 23:00:38 2025 GMT
Not After : May 15 23:00:38 2025 GMT
Subject: CN=7d4c4d2c0becfa9b1df6bcc7ad81723deff318e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:46:4c:0b:38:e8:75:ef:a1:f7:5f:78:c2:13:
c2:80:1e:e0:4a:de:3b:98:d7:35:c4:89:de:80:a7:
55:dc:2c:36:fd:d6:10:5b:e2:26:9d:5a:18:eb:88:
c2:bf:02:be:fa:fc:bd:47:54:c1:49:33:04:89:6a:
50:61:a2:92:8e:3a:97:05:cd:61:68:02:13:b9:e6:
8d:d7:02:79:dd:f0:47:73:46:53:ba:4d:4f:47:ad:
a1:33:1c:d5:e8:a7:ce:30:63:31:0b:98:26:7f:c4:
3c:3e:8c:62:56:19:de:70:95:e4:d1:0d:4a:e8:6c:
be:f8:76:6a:ab:65:a8:01:90:9f:47:ba:da:ef:e8:
89:a4:e8:8f:a2:31:cf:53:ca:eb:b2:51:4d:39:29:
0a:de:02:a6:a9:76:2d:7e:22:2d:bb:97:be:bf:2b:
58:36:f2:be:f5:a8:fc:25:cc:65:83:0b:5d:b0:50:
2c:95:13:4d:44:3e:aa:b7:77:3b:f3:1e:fa:30:5c:
f4:72:c7:c0:bf:d8:77:f1:93:cd:e6:9e:65:86:75:
cf:a8:dd:f4:20:c2:c4:71:3c:c4:37:06:b1:81:53:
a4:ab:ac:d6:44:c4:af:70:5d:27:dd:77:48:41:00:
8b:7a:58:15:c1:8c:4c:fb:3d:6a:19:83:e3:b2:f7:
26:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4C:4D:2C:0B:EC:FA:9B:1D:F6:BC:C7:AD:81:72:3D:EF:F3:18:E0
X509v3 Authority Key Identifier:
keyid:A9:0D:F9:52:02:40:4D:B1:F2:E4:0E:C3:DE:7E:EC:38:DD:6A:9F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:74:78:0e:ef:be:96:92:26:85:e4:b6:9f:83:7e:ca:99:fb:
53:e2:f0:1d:07:90:6a:fe:d9:cf:da:b8:e0:f9:39:05:25:5f:
d7:c4:48:69:d0:d1:34:ab:c4:b7:40:58:15:42:b4:b3:62:8e:
61:4f:75:ab:2c:70:a0:0e:8c:51:b4:89:59:dd:33:de:3f:60:
2a:8a:98:f4:a0:75:3a:55:81:b2:8d:dd:33:29:29:f3:59:c1:
7e:ba:3d:43:0b:58:69:13:e1:1c:24:42:c0:4b:d3:c6:98:c9:
f1:58:d7:57:6c:44:42:fb:1d:70:d7:bd:f2:f3:1f:91:30:38:
40:2f:ed:36:fe:1e:5f:b3:ee:eb:75:2e:36:81:55:dc:28:4c:
7b:31:c7:bb:53:6c:ce:aa:04:a7:f2:77:43:46:b3:a4:6a:b2:
47:cb:82:75:0e:ce:34:d0:9f:4a:a4:02:47:a3:32:28:26:5e:
78:46:fc:b6:8f:0e:dd:4a:ab:9d:c1:b7:96:5f:84:94:1e:6d:
24:17:ff:8e:37:b7:b9:e2:51:f7:7d:9c:b7:bd:23:c7:c3:71:
58:3f:7f:51:53:4c:1f:11:88:69:2c:03:2d:06:29:f5:04:51:
f6:dd:2d:cc:68:4a:14:01:03:ca:86:d3:93:9c:01:d3:39:6d:
1b:b8:d4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:06:47 2025 by rpki-client