Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
File: r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft (raw, json)
Hash identifier: vbhYe+vvjRJfd9wiQg9JnOghbpTB/2WZfixQjn2BoWM=
Subject key identifier: 9E:09:D8:90:81:44:E4:92:BB:0E:07:E6:8C:33:D4:25:64:96:B9:BB
Authority key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
Certificate issuer: /CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Certificate serial: 0196BA48800F2EAF096A0EFF681B05833526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
Manifest number: 1227
Signing time: Sat 10 May 2025 13:00:35 +0000
Manifest this update: Sat 10 May 2025 13:00:35 +0000
Manifest next update: Sun 11 May 2025 13:00:35 +0000
Files and hashes: 1: KgttFz6IodgLZeLta7RLneUK6Ro.roa (hash: IYP5zin82ggYoVWQmz/dnK+iP1pdsQlzD5cbI7kYfRQ=)
2: T1_HIEmvBSvtxZPEKcCF4aZsCPs.roa (hash: 0CEooqGIOmFXehL8CMLN24SE73s+yk1wsCLjJu3HBUc=)
3: r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl (hash: BHc+/rV/JtQKcYQUEOxDnil91ImTRh2ynoy0XAECxg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:80:0f:2e:af:09:6a:0e:ff:68:1b:05:83:35:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Validity
Not Before: May 10 13:00:35 2025 GMT
Not After : May 11 13:00:35 2025 GMT
Subject: CN=9e09d8908144e492bb0e07e68c33d4256496b9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b2:1b:41:de:d1:31:32:6e:f9:66:9d:e5:c0:
bc:06:30:53:8c:ae:17:17:77:b0:46:9b:26:14:41:
a8:e2:e3:34:4c:63:ba:dd:0a:17:b2:e9:80:21:0f:
36:7e:ab:cc:e0:36:6f:e4:8c:14:30:0a:97:ec:10:
9f:ed:cc:d9:48:ea:4f:93:45:1e:f3:64:29:e7:23:
8f:0f:39:c7:fd:c9:94:2c:87:b2:7b:c7:bd:57:5d:
6e:d3:24:63:cb:14:44:24:29:a8:ad:e7:da:da:1a:
8a:84:94:dd:be:9f:c1:62:4d:49:60:26:39:bf:36:
40:46:de:4e:ab:3b:46:78:03:94:d5:8c:a2:d6:41:
57:62:d5:70:8b:54:70:f9:04:42:14:55:ef:aa:c9:
57:12:11:74:a9:3f:65:ae:5d:85:e3:4c:59:f1:68:
3d:43:eb:48:9c:09:c3:8c:8c:30:6a:13:e5:92:12:
3b:b6:b4:33:df:fb:6e:08:fc:22:2e:92:f9:d5:b5:
24:a1:1b:03:09:c1:74:b5:d6:38:14:01:ec:b6:c7:
3d:d2:71:17:c6:2a:d1:9e:69:76:1c:82:20:64:1b:
10:cb:3a:e6:fd:f0:04:e9:ea:13:78:9f:f3:54:a1:
67:c1:fa:13:fc:61:d4:d9:39:40:88:80:34:11:8a:
9b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:09:D8:90:81:44:E4:92:BB:0E:07:E6:8C:33:D4:25:64:96:B9:BB
X509v3 Authority Key Identifier:
keyid:AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d1:60:68:33:88:73:68:70:18:ae:a6:92:01:68:3c:e6:2d:
2a:f7:69:a4:87:8f:1d:4a:6d:4b:3b:97:e9:98:6d:ad:20:03:
2a:d7:db:09:76:07:7e:29:7f:9e:42:3b:4d:71:90:a4:79:df:
22:61:1b:59:00:b8:13:6a:20:7b:ef:95:dd:6d:af:0c:64:6f:
5e:95:94:2c:b4:48:32:35:91:50:e6:c4:e3:17:0b:86:4e:a3:
19:32:37:31:c5:4e:dc:d2:38:d9:8a:6b:29:f5:78:fb:df:2a:
f1:7f:01:13:00:47:d5:76:54:c8:e7:11:6d:8f:96:d3:36:ef:
b2:a2:e5:8b:2a:c1:0e:16:08:5d:d0:64:74:4a:98:f4:2e:34:
9a:84:60:04:02:52:0e:a1:93:25:00:ed:2a:9a:87:5c:54:d9:
6a:c6:8d:b1:0f:46:c0:0a:49:07:4c:d7:d1:5c:a5:2b:2f:79:
97:93:3e:b2:3c:76:0a:87:f8:c8:a9:25:ff:a2:b3:a0:4f:5b:
a8:25:ec:78:f1:fd:b8:21:f3:63:27:80:0d:20:2d:61:9f:aa:
a7:d0:ea:ea:4b:67:c6:7e:47:d0:b1:d4:f1:3e:cd:52:9e:8f:
be:bb:9b:e4:81:bb:21:37:76:d8:1f:7f:79:69:af:de:45:a9:
eb:a2:cc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:58:09 2025 by rpki-client