Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
File: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft (raw, json)
Hash identifier: mAONo28+4bYHbZoXvWp4mEEQEQPl8Pm2svg5yZvvsck=
Subject key identifier: FF:9B:78:7E:DA:F8:07:EE:33:5B:C7:6A:02:81:00:6B:CD:03:20:40
Authority key identifier: A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74
Certificate issuer: /CN=a93616365693fb6502cb4d687bb66747b1a2fd74
Certificate serial: 01969DF58B992918976F1BB0CFE0698F458E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
Manifest number: 1001
Signing time: Mon 05 May 2025 01:00:37 +0000
Manifest this update: Mon 05 May 2025 01:00:37 +0000
Manifest next update: Tue 06 May 2025 01:00:37 +0000
Files and hashes: 1: dvh6dEQn3L0Lue4PHisFZ5z30t4.roa (hash: YZ3UChYkMOxFSMlqaHDcH6csBlA5vkgT+POe5BlyoUo=)
2: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl (hash: eSPozBu6b30wqstFeQWnqbpSCc37K8nhCe82zKvSJqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f5:8b:99:29:18:97:6f:1b:b0:cf:e0:69:8f:45:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93616365693fb6502cb4d687bb66747b1a2fd74
Validity
Not Before: May 5 01:00:37 2025 GMT
Not After : May 6 01:00:37 2025 GMT
Subject: CN=ff9b787edaf807ee335bc76a0281006bcd032040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f8:06:78:1d:35:95:48:7d:17:b2:bb:7a:22:
bb:38:0b:62:ff:dc:ec:e1:14:70:75:47:86:71:1b:
fc:3d:17:aa:32:7a:f1:34:d6:f1:ac:c8:57:ec:d6:
8c:77:40:96:4d:a1:50:24:e9:1c:c8:f5:9a:30:21:
ac:de:11:45:74:05:b5:cc:df:3f:0d:6e:26:a7:2a:
ee:9f:21:57:46:48:00:73:f9:4c:1a:7f:0e:d7:ba:
1c:b0:21:a5:fc:6b:29:2d:a1:b9:78:b2:bf:87:96:
01:16:07:d1:f4:e2:e5:3d:9d:c9:14:ee:2b:2a:c6:
50:9e:b9:70:ca:32:cd:1d:98:ed:ef:fc:8f:a6:6c:
73:aa:1a:77:03:5e:0c:04:4f:32:eb:bd:4d:2d:b1:
bb:c1:2d:af:fe:9c:17:eb:47:fe:50:46:56:b7:7b:
c6:81:0b:60:7d:c3:ab:52:84:55:99:35:4f:0b:1e:
1d:6d:9b:77:7b:b5:c2:61:ab:e4:b6:9a:b3:2d:77:
a5:36:4c:51:8d:bd:6f:d4:11:1c:aa:f2:62:96:08:
f9:79:f6:70:55:5a:55:59:ea:96:cb:bb:07:ad:fa:
23:12:ad:c6:5a:f5:5a:2e:a7:ce:2a:78:df:31:b5:
27:d4:f6:3a:fe:6e:b2:df:1a:4f:de:38:67:02:3f:
87:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9B:78:7E:DA:F8:07:EE:33:5B:C7:6A:02:81:00:6B:CD:03:20:40
X509v3 Authority Key Identifier:
keyid:A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:6c:c1:5c:78:e0:d1:dc:0d:f3:9d:1b:5d:c4:1c:e7:79:cc:
b2:d9:f0:56:bd:ec:ec:29:d2:46:c6:28:8a:1e:20:d2:0f:05:
c3:f9:55:7a:a6:ec:84:15:3c:09:96:74:c9:ab:51:9b:5a:09:
e3:d2:71:23:b7:dd:77:ee:be:6e:1e:ad:2f:4b:db:30:88:0f:
5f:cf:46:de:51:1e:ec:a4:34:aa:dd:ac:6d:cb:5b:1e:5b:e1:
cc:08:30:6c:90:2e:6c:d9:d8:05:ae:49:04:11:75:e0:6e:13:
06:80:99:28:f9:b1:69:dd:a6:f7:02:65:3b:3d:ce:03:1a:ed:
ee:57:7c:92:14:99:db:93:0f:5f:83:10:67:05:4a:50:d7:f2:
cd:18:f2:53:06:e0:e4:02:53:93:7d:83:f8:bc:55:a2:7d:fa:
b6:25:ce:70:c4:6f:06:92:95:96:93:49:53:f8:f4:a9:b1:d1:
e9:95:a4:99:53:6f:df:c6:24:6a:1e:ef:be:15:dc:b1:32:3b:
83:e3:a8:17:55:f8:7d:56:2d:46:32:22:c3:25:39:59:c0:33:
14:b8:19:3c:8f:0a:77:9b:a3:07:a8:40:02:37:17:ad:f2:93:
1f:67:bf:dd:8d:6c:f5:bb:73:2b:fe:65:9b:97:52:db:27:e3:
03:c6:9e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:03:16 2025 by rpki-client