Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
File: qexXvIRk_sLpobCY_840whqvnKY.mft (raw, json)
Hash identifier: K33O3OQ7A4MZO881v6zw/Y7C0dBwSkqISLG6Nnb3U70=
Subject key identifier: 18:98:D7:07:38:5B:3B:62:92:91:73:DB:FA:F3:D7:6C:16:36:97:0F
Authority key identifier: A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6
Certificate issuer: /CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
Certificate serial: 0196A842EF89FC35A00136FA3179BDD3BA72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
Manifest number: 1531
Signing time: Wed 07 May 2025 01:01:21 +0000
Manifest this update: Wed 07 May 2025 01:01:21 +0000
Manifest next update: Thu 08 May 2025 01:01:21 +0000
Files and hashes: 1: 1-CZEw8pGGdh9Gwph40yHsdoq1ag.roa (hash: C4R2UwFpzsqxbaKGdNIAuHg0NhGWKQyDYz9JMjta9y4=)
2: KkLe_YT5Uk0GdABl6GPnDWFGMNQ.roa (hash: aAELh0L1Pt+xus/0OHPywPbhavPNQTpi8tpROW9r5vw=)
3: bvkEOSa8BWLrsJXoOS6vPdUb-3o.roa (hash: avVdlCWpdgw57lZLBjVHwn93ctSM7J2JECKH0ZE6DSs=)
4: qexXvIRk_sLpobCY_840whqvnKY.crl (hash: Nb0i1A3bw5jZuZ/C5e3L8dXkVi8Maw/DyMyeykcvco0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:42:ef:89:fc:35:a0:01:36:fa:31:79:bd:d3:ba:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
Validity
Not Before: May 7 01:01:21 2025 GMT
Not After : May 8 01:01:21 2025 GMT
Subject: CN=1898d707385b3b62929173dbfaf3d76c1636970f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:70:bb:a6:cd:1c:4d:3d:7f:ca:9b:6b:c4:07:
64:bd:cf:0c:12:4c:dd:f6:d5:11:58:15:24:d4:db:
0c:11:0e:aa:85:33:50:74:9e:4e:31:5d:77:d7:99:
7f:3b:63:67:b1:df:d9:1a:2f:23:92:dc:de:eb:63:
ca:12:1a:a9:8c:d5:d5:f9:50:f8:e2:ec:bf:6e:0b:
2d:1f:7f:62:76:b7:cc:fd:1f:8a:c4:a7:08:be:1e:
1b:fd:e0:ba:e1:58:4d:c0:86:79:4e:41:22:e0:82:
9b:38:ce:3b:e7:bc:77:fa:7e:f7:9d:9f:bf:c2:98:
d6:89:e5:95:27:ac:f2:d9:34:7b:0a:57:62:53:11:
b0:cd:45:00:fa:60:94:04:74:99:2c:39:04:59:58:
91:40:74:68:cb:66:10:0a:2c:21:72:74:a9:22:4d:
74:d3:ff:46:d9:6d:d7:43:15:2b:f3:97:9a:24:bc:
1b:16:02:05:ca:75:8f:cd:ce:c3:33:db:cc:6b:7f:
5b:a4:80:2e:ef:df:d8:cd:f1:eb:37:dd:48:85:94:
8f:40:3e:e5:89:f0:2e:e3:3c:39:7b:a1:8e:aa:77:
06:a2:2c:f3:95:77:52:e5:57:f2:17:3e:a8:9e:cf:
a8:55:d8:9d:d7:47:8a:aa:b8:0f:99:b7:70:48:28:
78:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:98:D7:07:38:5B:3B:62:92:91:73:DB:FA:F3:D7:6C:16:36:97:0F
X509v3 Authority Key Identifier:
keyid:A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d8:26:54:4a:9a:1d:d5:30:fe:9c:92:b2:07:2e:ca:65:0c:
73:21:85:7f:9b:d7:19:56:db:b7:88:49:cf:c4:2a:8e:3e:28:
52:24:49:4b:49:b1:99:29:02:6d:f7:65:0f:89:a7:ee:cb:1d:
c9:17:e7:4e:6d:7d:1c:53:77:f1:14:b6:cf:0b:4a:6e:a5:0b:
62:9e:c1:52:d1:6f:80:4b:f2:01:9f:2c:f3:9a:a9:1a:e3:ba:
ab:98:2d:1d:75:99:e1:6f:3c:35:46:a9:dd:e1:55:da:c7:61:
f4:29:64:7d:25:10:af:d6:cb:5d:53:21:6f:42:e9:c5:3d:18:
3d:dc:f7:d1:15:8e:c4:d7:fb:47:96:07:57:d8:66:ab:db:79:
cc:be:cd:2e:62:33:32:f4:61:b1:d6:e3:8c:f0:29:32:00:e4:
66:9a:c2:95:19:b0:75:75:c7:3a:54:81:34:80:b4:0e:c3:b6:
27:2f:e3:fc:12:55:2f:a2:c9:3b:cd:b0:ff:ac:1e:4c:19:d9:
fd:63:01:f3:fd:75:a0:5c:69:e5:1b:32:95:d2:72:55:d9:fb:
f9:27:ff:e6:3b:8e:62:cc:64:6f:59:11:80:02:17:0e:f5:a2:
e1:06:1a:ba:5f:d0:e9:75:80:f3:8e:a0:8a:25:93:64:2f:3f:
37:cf:0d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 05:08:03 2025 by rpki-client