Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
File: qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft (raw, json)
Hash identifier: qov80V4/QxA9BfTP9bTI39AJYl9Jg0TvOIhWFkhFivQ=
Subject key identifier: 33:FE:62:AD:0A:89:65:C3:8E:72:18:E1:2E:63:57:F7:98:64:62:82
Authority key identifier: AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
Certificate issuer: /CN=aa8551e851e69db165c6c632af45f21715512939
Certificate serial: 0196BF380930B0D6C133FD73D992072C9DE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
Manifest number: 1304
Signing time: Sun 11 May 2025 12:00:42 +0000
Manifest this update: Sun 11 May 2025 12:00:42 +0000
Manifest next update: Mon 12 May 2025 12:00:42 +0000
Files and hashes: 1: 1-3qrdz_tzhFoK7Ucjl6tCL0s2OM.roa (hash: kxTjIhZmXXDDNlqbd3Q2+gkjPCT2RJ+wWhOvQVmko/I=)
2: CvzVIxPE_Xl1M87JmAYQt0uyDD8.roa (hash: 2wAD/UrmgnStcRFk04oSlNoJEw3MlH57DosRki5ZylE=)
3: qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl (hash: 1xv2VNAlZT2VlqCmFIWLRglTX6qB/KjMBa0i86n+gfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:38:09:30:b0:d6:c1:33:fd:73:d9:92:07:2c:9d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8551e851e69db165c6c632af45f21715512939
Validity
Not Before: May 11 12:00:42 2025 GMT
Not After : May 12 12:00:42 2025 GMT
Subject: CN=33fe62ad0a8965c38e7218e12e6357f798646282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2b:13:2f:c3:f3:69:3a:c1:52:2c:b4:77:76:
50:95:5a:94:09:76:77:e1:a5:7c:f9:48:4d:fe:08:
8e:11:12:2e:02:38:df:4a:a3:88:b5:37:3b:24:ca:
b3:fe:c7:8b:10:36:57:80:6f:a5:10:c0:77:4b:7c:
55:6c:06:9d:4a:83:13:b0:d5:0f:b9:fb:77:79:f9:
f6:28:04:f8:30:fa:e9:6c:5d:3f:98:31:af:47:f0:
8b:1a:ef:77:70:6d:82:29:9b:5b:11:5c:4d:81:39:
92:68:05:f7:e7:ee:e2:01:bb:c5:d4:d0:26:cb:19:
cf:4f:52:3c:89:1f:ed:0d:72:b1:bb:bb:b0:a6:e7:
3b:c4:6d:b8:c8:c7:d9:57:31:61:b1:58:6c:c8:de:
18:82:1b:ab:8e:fa:29:e3:cb:ac:60:b6:d4:61:2b:
f3:c0:fb:de:50:dc:61:dd:af:5c:19:03:02:6b:06:
84:2b:c4:90:50:45:85:d4:d7:9a:12:4c:7d:3f:f7:
1c:e7:56:c7:53:c5:d5:48:6c:eb:ea:16:1a:f3:f2:
df:b6:ba:d1:b2:22:c1:0b:8e:6f:8c:63:88:4f:19:
31:1f:8b:b6:92:49:28:e8:31:15:3b:58:88:b2:53:
f6:73:b4:17:0d:c1:fa:56:36:9c:e6:d4:1d:94:0a:
1a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FE:62:AD:0A:89:65:C3:8E:72:18:E1:2E:63:57:F7:98:64:62:82
X509v3 Authority Key Identifier:
keyid:AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:18:7b:ff:a7:93:dc:5f:a0:26:05:7a:aa:f7:81:07:cf:a3:
a6:7f:3a:3d:37:32:4c:2f:d2:12:d8:10:92:3d:ef:8f:20:e9:
26:cc:8a:23:2d:10:2a:57:23:5a:a2:09:be:81:1c:d9:a2:49:
62:d2:13:8c:8e:31:62:fa:de:25:09:67:77:6c:59:1d:fe:dd:
a0:dd:c0:2c:47:64:df:a9:48:b2:f5:a8:7c:03:75:01:2b:f7:
d6:6e:a2:14:b9:7f:17:16:a2:7f:67:63:6f:fd:5e:bd:be:87:
52:2a:9a:51:c6:de:b8:c1:1c:1b:51:44:f1:3d:84:89:a5:9f:
de:5d:6d:c8:5c:62:a4:2e:52:54:2b:b5:14:3f:8e:14:b4:ea:
90:f8:63:93:26:62:5f:b3:17:f9:83:44:8c:e5:ae:ae:05:1a:
b7:66:85:33:86:40:30:49:f4:11:e0:fb:a2:42:c9:13:4f:12:
0e:95:54:0a:2b:d7:49:69:3c:01:0e:af:3d:60:30:da:dc:b9:
e5:8c:ce:d0:8c:13:68:17:f1:32:5c:80:4f:84:7e:a2:d4:5a:
fc:68:e0:b2:73:3a:cd:df:57:2e:be:e4:62:fd:07:59:d5:b5:
28:25:81:ea:03:bc:ee:4e:d6:d6:fb:e8:f5:d7:c6:a9:e5:fa:
5a:04:ef:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:36:50 2025 by rpki-client