Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
File: qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft (raw, json)
Hash identifier: 3SUcLwYvFGyN9pwRHag7rEMdGdgkHPHcry4q/8jrxJs=
Subject key identifier: 13:DF:A1:F0:45:60:1A:09:9A:3B:A8:70:98:E4:8E:D2:12:54:B1:8C
Authority key identifier: AB:06:90:58:B4:D3:67:61:2B:E4:80:73:72:B5:E5:93:E0:34:77:66
Certificate issuer: /CN=ab069058b4d367612be4807372b5e593e0347766
Certificate serial: 0196A76673450EA4D3CC32F257452A51D95F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
Manifest number: 152A
Signing time: Tue 06 May 2025 21:00:31 +0000
Manifest this update: Tue 06 May 2025 21:00:31 +0000
Manifest next update: Wed 07 May 2025 21:00:31 +0000
Files and hashes: 1: Ttl-1h1-V-nLfHGl50XIPqBaOuw.roa (hash: 4ysW7rFsdP6sSTiTROvgg5H3SFvIB36uqjjGielYpHo=)
2: qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl (hash: rGPDk2D5gaS4YUCwNHiXxPLolTxvziGmDCTQyDwsba4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:66:73:45:0e:a4:d3:cc:32:f2:57:45:2a:51:d9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab069058b4d367612be4807372b5e593e0347766
Validity
Not Before: May 6 21:00:31 2025 GMT
Not After : May 7 21:00:31 2025 GMT
Subject: CN=13dfa1f045601a099a3ba87098e48ed21254b18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:89:07:ba:1e:4b:29:71:d1:1d:fb:fc:ea:44:
54:8c:cf:6e:c8:53:15:bd:65:da:de:74:5a:e4:05:
f9:75:8e:e9:e4:87:9c:35:a7:83:cf:bd:1a:c1:ce:
7f:08:c6:37:e3:b7:a9:fe:ee:bf:3f:3c:6c:f8:59:
8e:d4:60:d8:cc:fc:97:b4:69:3a:59:aa:62:8b:77:
d2:5f:3c:d9:81:f6:b8:fc:cb:04:93:cb:a4:55:bd:
93:dd:d5:88:3d:6a:74:36:17:51:02:b2:24:c5:4e:
6d:79:f3:20:37:16:e6:2d:7a:ad:53:4d:66:3c:4f:
d3:13:f6:02:d8:9a:fa:ab:55:ff:e8:8c:d6:f2:d3:
9d:47:13:0e:b4:13:a9:9b:76:e9:a9:ba:40:7c:3d:
74:d9:7f:9a:e0:07:74:ee:da:c5:ca:b2:2a:36:41:
fa:a3:ad:f3:91:af:99:23:ad:34:09:11:32:47:10:
a8:90:3c:6b:b5:d6:7d:f9:f5:dd:76:21:5b:a9:1b:
54:6f:a3:dc:b3:12:b0:ed:57:ba:08:da:a4:89:a1:
64:75:a6:87:c6:3c:fc:8d:89:da:d4:0f:a2:cf:6d:
f5:b4:94:59:d6:6d:b0:42:1c:35:87:0a:9f:80:5f:
79:81:c1:26:47:7d:04:fd:b4:81:42:ee:ba:6f:70:
ff:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DF:A1:F0:45:60:1A:09:9A:3B:A8:70:98:E4:8E:D2:12:54:B1:8C
X509v3 Authority Key Identifier:
keyid:AB:06:90:58:B4:D3:67:61:2B:E4:80:73:72:B5:E5:93:E0:34:77:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:0d:01:ba:07:32:07:6e:ab:c7:63:3d:87:6b:ce:61:c4:9b:
ae:69:d9:ef:9b:2e:d4:c3:01:0b:be:9c:84:b1:75:0d:a7:16:
93:2f:78:1f:72:df:54:67:d3:88:2a:91:ad:93:b3:d1:5d:d7:
f4:3d:93:10:7e:6b:99:55:e6:a4:22:41:e6:5e:06:42:ca:bc:
52:7e:ad:e5:58:ef:03:d5:81:bc:40:0d:64:eb:c7:77:09:91:
02:72:fe:13:53:fc:bd:38:20:1f:b0:ae:e5:da:6a:b6:3d:9a:
b2:08:36:de:e8:c3:d6:9c:c0:fa:44:05:9c:e2:67:40:1a:69:
12:84:de:c1:b5:0c:19:08:6f:8d:af:a4:37:ea:ba:61:66:28:
7f:d7:13:f8:c5:eb:87:17:17:0b:f5:55:08:6d:e2:37:9b:43:
82:99:5f:1d:81:06:fb:95:50:c1:e1:69:36:60:c5:90:0b:cd:
d3:7f:e6:36:b1:54:68:5b:fb:0e:3e:2f:5f:87:14:0a:19:2b:
ed:41:cb:ec:a9:d2:03:d5:ad:21:f4:a2:81:75:2c:2b:5e:e1:
15:f5:29:d6:25:99:40:5a:c7:86:f5:e8:97:24:8c:b9:b1:85:
c1:e8:85:7f:0c:46:1c:b2:86:cd:49:27:1e:45:d2:8f:a3:29:
4c:1b:f3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 23:23:44 2025 by rpki-client