Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
File: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft (raw, json)
Hash identifier: qXCgSmln5AyfW0gOkZ2Cp+HT2VGdY0qmOaRknqf0jN8=
Subject key identifier: B8:D3:EA:39:D4:75:B3:0F:8D:62:9B:BF:C1:10:65:E3:AF:98:CE:A5
Authority key identifier: A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
Certificate issuer: /CN=a50f21c3dc93757fc03282a835600d659f961e8e
Certificate serial: 0196C6839F6CC723B4B3E8CFDD165B795C09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
Manifest number: 0A1A
Signing time: Mon 12 May 2025 22:00:36 +0000
Manifest this update: Mon 12 May 2025 22:00:36 +0000
Manifest next update: Tue 13 May 2025 22:00:36 +0000
Files and hashes: 1: XKCgbBOF2hVHKDo78niiU6jULHg.roa (hash: QEaRFAJhUUsQeo4vGH+Fx3VQmk/EsBaPpLYF/MqkgOs=)
2: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl (hash: c60MAo7hVCrKeXZC78hw9MuqsY9N9N0qg5QJ1dMmcGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:83:9f:6c:c7:23:b4:b3:e8:cf:dd:16:5b:79:5c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a50f21c3dc93757fc03282a835600d659f961e8e
Validity
Not Before: May 12 22:00:36 2025 GMT
Not After : May 13 22:00:36 2025 GMT
Subject: CN=b8d3ea39d475b30f8d629bbfc11065e3af98cea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4b:c0:a1:5f:22:88:45:5c:72:d4:d2:02:bf:
3e:16:93:63:89:ad:7c:55:8c:fb:af:b1:51:6f:3c:
c9:62:8e:27:aa:9f:9c:8a:79:69:ef:6a:52:d2:4c:
9f:d3:4d:86:44:00:c6:67:d6:c0:c8:d6:e5:d5:aa:
1f:92:70:cd:ca:ae:33:da:71:6f:5e:e3:ea:d2:ec:
f1:09:57:c4:b8:21:cd:f8:79:28:aa:cc:8b:fe:ec:
ab:07:12:a2:1a:38:86:d2:29:ac:5c:22:15:fe:44:
0b:5c:ab:00:87:fc:0e:77:53:ec:84:e4:e4:cc:de:
40:93:70:39:21:ba:13:bb:22:b2:9f:83:7d:ee:8b:
10:6a:dc:4e:a1:7d:c1:7b:07:e4:eb:3f:99:59:e0:
44:34:14:88:4d:57:4d:1a:69:4a:4c:5d:62:2c:7f:
cc:fd:8e:d4:0c:61:aa:5f:cc:20:55:41:b2:1c:da:
c7:ff:a9:00:e5:0c:03:29:2a:25:6b:24:df:14:3b:
64:e2:08:eb:2a:b3:13:59:ce:8d:02:a1:d2:7a:d1:
33:0b:1d:a2:a7:c4:59:87:51:1b:df:29:88:f9:78:
22:bc:f2:3a:d5:c9:ce:c9:fb:d2:d2:6d:1d:8e:25:
f2:a0:f7:df:cf:19:65:e6:4b:b5:54:46:66:3a:d6:
b9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D3:EA:39:D4:75:B3:0F:8D:62:9B:BF:C1:10:65:E3:AF:98:CE:A5
X509v3 Authority Key Identifier:
keyid:A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:eb:fa:68:47:5f:03:10:8e:3c:a6:2b:ce:18:e6:79:b0:e9:
d4:bd:da:36:63:51:48:83:b7:90:07:ab:58:dc:85:3c:20:15:
e1:cb:f5:da:31:ea:40:16:00:29:a4:61:c3:da:4c:ee:f9:9d:
4d:f2:81:6d:26:37:23:21:1e:0d:76:0a:e5:ac:89:7e:fe:63:
b5:fb:49:8f:58:11:99:18:14:74:aa:1f:b9:e0:6f:b7:72:2a:
97:d8:0d:53:b5:88:63:17:ae:ae:7c:88:97:bc:77:12:db:a3:
3b:f6:33:88:0d:90:44:21:f3:5e:0d:e2:c8:c6:d0:e4:09:d8:
82:6c:a6:0e:61:e3:03:65:de:ff:12:ae:88:7e:74:66:10:f0:
4b:f3:2f:2d:e9:4d:85:58:98:5e:c8:5e:71:b8:34:2e:53:3b:
a3:55:66:aa:48:44:56:10:c3:02:04:52:7b:4c:0b:30:e9:2d:
45:2f:6b:86:0f:be:a2:96:67:f3:ff:67:b6:39:31:7b:28:27:
e4:61:10:e3:3e:c8:a7:f6:7e:2b:d0:e4:3f:cf:a8:2c:24:34:
60:89:aa:c2:ac:9f:64:59:37:3b:ca:41:51:9a:ed:d2:69:17:
08:dc:0f:06:b3:15:dd:07:bc:84:60:22:66:84:56:53:b9:38:
96:a9:10:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:58:33 2025 by rpki-client