Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
File: uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft (raw, json)
Hash identifier: AtBiDrR+0NnlzKkRygzPeCzM2upBBHuXUdDpKOr+ytk=
Subject key identifier: AA:73:00:A5:BA:93:34:20:93:9A:88:37:67:E9:30:12:33:7F:67:13
Authority key identifier: B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
Certificate issuer: /CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Certificate serial: 0196A50A26518DDC7CD8384637ABCA56E613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
Manifest number: 1528
Signing time: Tue 06 May 2025 10:00:27 +0000
Manifest this update: Tue 06 May 2025 10:00:27 +0000
Manifest next update: Wed 07 May 2025 10:00:27 +0000
Files and hashes: 1: 6KXLkC_cgd5ILMccrhh-m3RCwS8.roa (hash: Az+UEZWLV4uod4atp3pTmM4QksD0MTVrJp8g22f4T2Y=)
2: uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl (hash: gai9jVxyzLc7efNn6Bf+96hPIIakxdb8I4OdPtmmDK0=)
3: wCMVD4s-MzexAEYCNnm0u-lWVks.roa (hash: 1CzqXOjbHH5Z0NSEWz+9Qkw44w+rWwhDlrc+ZZXhbB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:0a:26:51:8d:dc:7c:d8:38:46:37:ab:ca:56:e6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Validity
Not Before: May 6 10:00:27 2025 GMT
Not After : May 7 10:00:27 2025 GMT
Subject: CN=aa7300a5ba933420939a883767e93012337f6713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1a:2e:39:73:e3:8a:33:d3:e9:fe:a3:dc:e0:
b7:ba:fc:06:86:7e:c2:99:64:f3:e0:76:d3:60:25:
c7:d1:a1:9f:a8:a0:45:8c:8e:99:54:6a:13:9f:d7:
62:f4:97:60:c6:1f:e2:b6:c9:9d:7a:39:94:e9:e5:
a5:2f:d3:a2:87:1a:71:7b:d7:0e:67:00:2c:59:83:
f9:78:6f:88:d4:db:4e:ea:f2:93:10:81:a9:79:65:
33:b7:ae:f7:6f:ad:07:0d:b6:77:96:24:71:09:8e:
08:c9:4c:3a:58:7a:40:d1:2f:34:cd:f2:c5:a6:22:
e4:10:c6:58:6d:af:8e:87:06:c0:28:2d:d8:d1:a1:
56:4a:b8:9e:81:68:c4:05:81:90:b3:41:06:66:24:
4a:f8:0c:18:e9:99:c3:20:18:14:06:ee:3f:20:ca:
6e:f8:e4:e1:12:1e:c3:24:6c:52:5c:34:40:a5:20:
ff:fd:57:ed:16:1d:4d:1e:89:3b:60:fa:9a:14:a8:
cb:c4:d3:2d:5d:f0:2c:9d:cc:74:3c:57:70:04:89:
b3:6c:21:01:7a:de:b9:86:b3:9e:e5:9d:ac:cf:2a:
cc:b7:33:73:d5:fa:53:3a:aa:b6:6c:26:01:ae:d0:
8b:bd:dd:1e:70:0c:15:5f:ca:45:9f:08:8b:a9:4e:
74:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:73:00:A5:BA:93:34:20:93:9A:88:37:67:E9:30:12:33:7F:67:13
X509v3 Authority Key Identifier:
keyid:B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7b:ec:0d:d2:0d:e4:3b:5b:6e:55:b6:a8:3e:71:87:75:47:
47:b1:b5:80:f3:09:d7:f0:9c:ea:10:8e:cb:11:2a:a5:fa:ac:
9a:61:28:ee:2e:1f:fc:96:28:64:f5:65:de:8d:cb:c1:67:7c:
ca:24:b5:55:98:38:f1:de:80:22:4d:7e:33:eb:01:4c:20:4c:
3e:da:3e:28:08:4c:86:5e:e8:3e:e9:87:f7:ed:4c:81:c6:ae:
a5:1c:bc:53:55:a3:b1:26:02:61:f0:63:c7:ee:a0:96:dc:d7:
eb:9b:15:0b:05:a9:58:08:95:55:2a:21:b2:2f:a9:ca:16:1e:
f0:93:19:44:bb:44:88:ae:85:d7:80:33:a9:e3:77:c9:6b:3e:
e6:4c:b4:90:38:3f:71:59:9f:9b:e8:e5:b3:ed:32:54:1b:da:
bb:fd:d6:d2:b0:d1:e9:d6:0a:c6:6f:81:28:6c:34:a6:ca:1c:
34:c3:52:31:c3:da:24:81:77:4c:a3:dd:6a:54:d2:bb:81:b1:
a8:42:a8:07:50:b1:6b:42:47:99:c8:a1:9b:1a:e3:e6:26:28:
2f:29:c2:b0:15:54:c5:90:ae:f0:7b:d6:bf:17:3c:63:99:0e:
de:01:37:8f:bf:ad:c1:19:32:f0:a8:85:3b:5a:d7:03:0d:40:
ea:86:c7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 17:18:55 2025 by rpki-client