
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
File: QWbAb_SeBTSAniNABbqlzKfhRqg.mft (raw, json)
Hash identifier: iKWrh7LjFAWEniyWWhyP5VA1PUT9s7/zMmTm7aUmZoQ=
Subject key identifier: D5:00:7B:EF:02:F7:B8:41:69:78:8D:79:4C:FC:15:89:D4:E1:C0:77
Authority key identifier: 41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
Certificate issuer: /CN=4166c06ff49e0534809e234005baa5cca7e146a8
Certificate serial: 0196C3B9797711C07999D49844CE19E71282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
Manifest number: 47
Signing time: Mon 12 May 2025 09:00:34 +0000
Manifest this update: Mon 12 May 2025 09:00:34 +0000
Manifest next update: Tue 13 May 2025 09:00:34 +0000
Files and hashes: 1: 9W9gYghW6_iCN3HlIGpaoOJHZhk.roa (hash: /VOahTPt9Fh6RgLRa78P8pgoK/6N4p3sHujeTUCmYBc=)
2: QWbAb_SeBTSAniNABbqlzKfhRqg.crl (hash: jrLdeEaLYGgloZ8GlyeSIpkL7x7gvlhtqpHYM8MfthU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:79:77:11:c0:79:99:d4:98:44:ce:19:e7:12:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4166c06ff49e0534809e234005baa5cca7e146a8
Validity
Not Before: May 12 09:00:34 2025 GMT
Not After : May 13 09:00:34 2025 GMT
Subject: CN=d5007bef02f7b84169788d794cfc1589d4e1c077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3c:69:bb:3e:52:3f:1b:c9:da:5b:71:57:83:
61:5a:e5:a1:22:c6:ea:22:f5:de:11:44:9c:69:36:
45:0b:54:67:30:f1:e1:41:c4:cd:3b:57:48:8b:66:
7c:d1:61:e9:23:ac:72:30:7d:c7:30:44:46:a4:e9:
bb:df:80:cd:dd:a7:a3:32:41:07:17:92:fa:aa:dc:
d6:5f:86:26:2c:36:67:88:ea:99:4e:b5:d5:47:25:
1e:64:17:20:70:44:f9:dd:0c:20:4d:06:02:b7:e4:
db:0f:fb:46:29:2b:2d:12:dd:5a:42:df:ab:c9:11:
b3:a1:fd:ee:a6:1a:f0:f0:24:e0:79:b0:c7:07:7a:
ba:42:b5:66:e3:14:fe:40:3d:a9:21:8f:33:19:cd:
5a:43:a8:7e:aa:a7:b3:b2:eb:94:4d:9e:b1:36:29:
d6:70:c6:d3:3e:4f:cd:4d:ec:cb:6f:ab:d1:1d:2f:
81:16:da:b7:d3:de:b3:7a:fd:d9:1b:37:40:b9:a9:
6b:a6:d3:82:6b:ec:5f:e0:d3:49:d9:78:e0:4a:b8:
3b:02:40:f8:0e:87:09:cc:bd:9d:1b:bd:91:64:7d:
f4:48:be:f6:fd:70:9c:91:b2:85:55:be:7a:95:46:
9a:92:c4:30:04:5b:be:c0:a3:37:0e:ac:e5:5c:dc:
84:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:00:7B:EF:02:F7:B8:41:69:78:8D:79:4C:FC:15:89:D4:E1:C0:77
X509v3 Authority Key Identifier:
keyid:41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:fe:ae:d2:03:e0:1d:b3:40:17:f5:9c:bd:70:98:cd:05:1a:
34:d1:1a:03:13:c6:ad:00:31:f1:09:e0:bc:1a:1a:c0:56:54:
3e:f8:72:13:5d:43:a9:69:09:69:b5:ca:67:d4:5c:29:a9:30:
e8:93:e1:09:60:dc:68:a7:1a:8a:57:31:fe:3b:fe:32:44:8c:
b7:cc:77:07:b5:3d:99:25:a6:58:39:7e:53:42:86:eb:df:3e:
e5:b2:7f:5a:20:ed:d2:6a:08:3b:3e:de:e1:26:9f:25:7c:c1:
6f:ec:5b:f1:eb:a2:2e:aa:b1:1d:15:dd:0e:17:1f:fe:4d:cd:
b8:d3:6d:3d:0f:1e:97:83:a1:ec:4e:a3:5d:cf:21:ff:13:17:
ab:73:c2:10:ef:c8:8b:d7:77:b5:f5:99:0a:00:e9:57:8c:56:
44:2b:d3:12:9b:e3:4f:c4:3a:61:d1:92:d8:3c:9f:ed:b3:f8:
2c:83:d8:0e:d1:60:f6:1e:80:55:73:ff:0e:8c:6e:e1:e0:68:
dd:64:c9:bb:9a:55:fb:e2:66:2e:bb:6b:ee:df:a8:8e:2c:4e:
5a:55:62:b4:66:eb:a7:c2:db:dc:f7:b9:52:39:45:3a:63:30:
de:d4:6f:d5:cf:57:d3:95:38:06:b4:d8:a5:ab:ad:65:8e:bd:
2f:4b:6c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:04:34 2025 by rpki-client