Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
File: sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft (raw, json)
Hash identifier: bCB1Eke3TiaHm3e+2sYphkWHweLoljfPFHjcY66pEBg=
Subject key identifier: 76:F4:AC:A3:E5:09:E8:04:98:AF:9B:5D:6A:57:14:20:C3:AA:BE:70
Authority key identifier: B2:A4:8A:F3:D9:69:31:BD:90:C3:BF:D5:5F:1F:A3:04:7B:35:60:14
Certificate issuer: /CN=b2a48af3d96931bd90c3bfd55f1fa3047b356014
Certificate serial: 0196AF569AAA625C081FA30E2F415E55A816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
Manifest number: 0F5F
Signing time: Thu 08 May 2025 10:00:10 +0000
Manifest this update: Thu 08 May 2025 10:00:10 +0000
Manifest next update: Fri 09 May 2025 10:00:10 +0000
Files and hashes: 1: snSOZMPfK49AItHHPweedqu08i4.roa (hash: pOp6DYxwdd50QS7EO4q/xTqIWe4F0C/r3RXRy+6+GXo=)
2: sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl (hash: gOd5k2yFOasG6m2L4Kzcqz9QQAjO9SCaVlp07zOSy+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:56:9a:aa:62:5c:08:1f:a3:0e:2f:41:5e:55:a8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2a48af3d96931bd90c3bfd55f1fa3047b356014
Validity
Not Before: May 8 10:00:10 2025 GMT
Not After : May 9 10:00:10 2025 GMT
Subject: CN=76f4aca3e509e80498af9b5d6a571420c3aabe70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3c:55:70:9f:9d:61:75:7d:ab:34:b1:50:15:
25:f8:e6:33:b4:5f:2c:c8:0e:45:61:72:5c:e1:5c:
c7:70:fc:64:86:d7:39:cd:84:3d:79:1a:a2:ed:78:
7e:29:d0:ba:61:ab:93:a9:02:04:e9:b1:a6:fd:e0:
bf:d0:c9:a9:89:21:c7:58:e2:c4:98:7e:2d:64:da:
b4:af:89:9c:f2:d4:21:1c:4b:04:07:59:c8:a5:5d:
8f:33:d9:e9:3d:a6:3d:ba:7b:5b:0e:70:52:27:ca:
fa:95:1b:61:d0:e2:b4:b1:9e:f5:81:30:a2:35:0d:
13:d9:37:77:29:7f:65:c4:33:23:5a:e9:1c:67:9d:
70:f3:de:bb:d4:29:69:cf:02:93:ff:a9:08:74:93:
26:6b:06:b3:b0:fb:e8:96:4c:e8:72:f5:56:f6:2d:
4e:b6:6e:32:bd:35:08:ba:82:df:7f:10:1c:b1:4e:
bd:70:70:0a:82:66:f2:ef:84:d6:3c:1c:2b:4c:d4:
d6:82:12:00:82:7e:c7:fe:4f:78:e2:2c:42:5e:fd:
0a:64:1b:fd:dd:9c:ee:a3:9d:20:d7:e5:fb:eb:01:
8a:f8:dd:66:3e:96:a2:77:f6:87:96:40:4b:41:ab:
b7:55:b7:e6:1b:8c:ec:ac:41:4d:d1:41:94:c6:89:
be:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F4:AC:A3:E5:09:E8:04:98:AF:9B:5D:6A:57:14:20:C3:AA:BE:70
X509v3 Authority Key Identifier:
keyid:B2:A4:8A:F3:D9:69:31:BD:90:C3:BF:D5:5F:1F:A3:04:7B:35:60:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:7a:3d:5b:90:66:5f:71:54:23:96:17:b0:c8:45:9f:cd:ea:
0d:a5:5c:da:80:42:ba:ce:89:95:69:28:d9:63:cb:54:fb:0a:
43:b2:fe:b7:48:6e:38:a4:1a:b2:58:b4:1e:e3:84:ce:8f:b3:
5f:5f:0a:08:a5:d4:ae:13:34:4c:a6:6b:df:b0:db:3d:5b:67:
42:d0:5d:87:e2:b9:c4:dd:9e:09:ea:ef:1d:ee:4d:2f:48:32:
37:d7:68:b6:08:01:0d:67:36:f5:bd:d6:16:3b:39:d3:49:39:
cd:ed:bb:6e:6f:54:fe:de:49:9e:6a:36:dc:d2:d4:2d:a0:1d:
20:3c:3e:ce:d5:cc:67:16:c1:a2:e9:47:cb:2d:d1:c3:4b:17:
90:8b:12:65:96:1d:47:c5:68:7a:0a:53:eb:0c:26:c4:8b:81:
17:dc:ec:2b:5b:5b:14:4c:5c:64:5d:2f:b6:5e:d1:74:05:c6:
a6:1f:46:4b:0e:1c:40:3e:0f:9b:3f:03:91:c0:94:87:3a:e8:
e1:66:c4:58:e4:a3:80:74:f6:60:3e:eb:28:dd:6e:68:90:28:
3f:36:06:54:97:bd:77:31:08:7f:6f:a0:24:75:27:af:38:fd:
e2:5b:2b:c1:7d:13:64:50:a6:91:a5:08:ce:ee:89:ae:e9:9a:
b9:b7:27:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 17:21:30 2025 by rpki-client