Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft
File: qiEQS093IiTRGFaiTt-UZqhE0mw.mft (raw, json)
Hash identifier: DYFd4ucvQZxRiq4CZRcqurY5Rie5cI0sWTgz/GtHKPM=
Subject key identifier: A5:80:1E:A9:F4:CC:C2:F7:8D:AC:D1:0C:79:05:CA:38:06:F9:B9:2E
Authority key identifier: AA:21:10:4B:4F:77:22:24:D1:18:56:A2:4E:DF:94:66:A8:44:D2:6C
Certificate issuer: /CN=aa21104b4f772224d11856a24edf9466a844d26c
Certificate serial: 0196C79614F9DFF30CB8AA696F1EF3012178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qiEQS093IiTRGFaiTt-UZqhE0mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft
Manifest number: 0933
Signing time: Tue 13 May 2025 03:00:23 +0000
Manifest this update: Tue 13 May 2025 03:00:23 +0000
Manifest next update: Wed 14 May 2025 03:00:23 +0000
Files and hashes: 1: C9Uc2-MMZLc56ntn-MTlSYOC9E8.roa (hash: 7Vks3Vs+iWpgcZieiS4e05rACvsjBFcyY3uhYDWshE0=)
2: qiEQS093IiTRGFaiTt-UZqhE0mw.crl (hash: Y50SeujnADviKmmeAlCyzCsC4DymqcbXEy3BK7wAceU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qiEQS093IiTRGFaiTt-UZqhE0mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:96:14:f9:df:f3:0c:b8:aa:69:6f:1e:f3:01:21:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa21104b4f772224d11856a24edf9466a844d26c
Validity
Not Before: May 13 03:00:23 2025 GMT
Not After : May 14 03:00:23 2025 GMT
Subject: CN=a5801ea9f4ccc2f78dacd10c7905ca3806f9b92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f1:a5:d5:54:57:69:83:60:0b:71:17:a0:b1:
f2:9f:e6:19:ec:c8:5f:5d:28:cf:c9:e5:dc:03:85:
c9:03:85:9b:2a:85:aa:dc:dc:ed:83:ac:0d:f7:1e:
98:03:6b:c4:cd:44:c7:ff:95:d5:b7:e7:c0:d4:0f:
c6:9a:82:6a:e7:e1:43:08:ac:de:db:74:52:01:3a:
1d:ce:41:ee:8a:fd:cf:aa:82:86:4d:2e:68:3a:48:
ca:66:d8:e9:a5:d3:67:fb:30:9e:f8:c8:69:5d:6c:
e5:4d:8c:56:2d:97:b8:18:1e:be:c2:37:44:dc:aa:
74:6b:47:ba:86:e2:37:02:92:36:b6:97:0d:cb:80:
42:ad:37:24:bc:de:19:57:c1:0d:56:37:7b:dc:66:
2f:9f:ad:d5:d3:30:fe:af:b9:7b:78:d0:e6:f0:8c:
9e:5d:26:eb:eb:5d:e8:7f:13:a6:cc:25:89:c9:0f:
91:a3:78:d5:85:b6:df:1d:c0:f2:6e:86:a4:4e:84:
af:a8:5c:6b:08:33:33:51:16:0a:dd:f7:45:eb:95:
70:34:4e:c7:88:68:b6:8f:07:be:6f:d1:25:51:25:
ef:54:de:7b:64:92:ba:a7:35:42:de:59:8d:4a:a3:
75:77:99:08:3a:88:a0:13:95:2d:6b:5d:78:b6:60:
18:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:80:1E:A9:F4:CC:C2:F7:8D:AC:D1:0C:79:05:CA:38:06:F9:B9:2E
X509v3 Authority Key Identifier:
keyid:AA:21:10:4B:4F:77:22:24:D1:18:56:A2:4E:DF:94:66:A8:44:D2:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qiEQS093IiTRGFaiTt-UZqhE0mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:50:b3:33:5e:bf:fc:41:25:1b:2b:5d:d3:3e:9d:ca:88:44:
cc:6c:af:a5:85:5d:3a:83:25:c4:b5:68:43:65:c6:4d:a5:5a:
2a:3d:2c:eb:78:42:78:6b:d4:ef:bb:ad:ba:ca:7c:80:45:33:
85:55:ff:a2:f8:7d:7c:b7:0b:3f:81:e6:52:ac:a0:5e:15:16:
87:de:02:b6:fe:b7:cd:17:4e:19:9c:e4:c6:67:a1:cf:40:62:
78:4c:1a:a1:63:33:43:73:f1:92:bb:bf:0d:ce:0a:da:f0:eb:
69:dd:eb:47:4b:4d:e5:c2:b1:70:1f:41:f4:de:c1:73:a7:42:
a5:1e:c4:95:58:2b:a0:c3:a7:4a:68:a9:2f:b2:a0:d7:bf:96:
a7:08:3a:0c:19:44:60:5f:f2:71:c6:05:7b:51:ff:42:d7:15:
7b:27:49:02:73:99:3e:f3:fd:50:f7:84:cc:11:a3:66:8e:3c:
da:87:71:83:d9:a3:d8:c8:0f:bb:83:c0:ae:2f:01:3d:3b:bd:
3b:9c:3c:a2:24:2b:b2:85:c6:ec:09:1a:e2:0f:ef:db:cc:a5:
5c:36:4c:ca:11:4a:5b:1c:2d:d4:c9:63:7a:2f:e7:f0:19:b2:
f3:ef:46:84:25:ec:8d:d4:3c:14:7f:34:a1:d9:b4:85:7b:cb:
b8:7e:27:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:12:14 2025 by rpki-client