Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
File: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft (raw, json)
Hash identifier: wRDiP2i+PGzJyCLmhBSa3O3BfmDNH+Lctl1BRhpwtO8=
Subject key identifier: 0F:C4:EA:40:06:5D:BE:01:03:D9:E7:E7:99:5C:66:BF:DB:9F:BC:85
Authority key identifier: A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
Certificate issuer: /CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Certificate serial: 0196B9A4015328AA148973A130B6AB50A65F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 10:00:55 +0000
Manifest this update: Sat 10 May 2025 10:00:55 +0000
Manifest next update: Sun 11 May 2025 10:00:55 +0000
Files and hashes: 1: N5E83UpLjMoi8mpIjadF8EBEZHc.roa (hash: cZc2s8T64g7zUGVGUfnt3YLhqIDpL+dicIuuj0vLjiE=)
2: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl (hash: UDBonHD7sk2WVVq/pHWqeMcyMHrl+Om3xw5FDiyHLLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:01:53:28:aa:14:89:73:a1:30:b6:ab:50:a6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Validity
Not Before: May 10 10:00:55 2025 GMT
Not After : May 11 10:00:55 2025 GMT
Subject: CN=0fc4ea40065dbe0103d9e7e7995c66bfdb9fbc85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:67:3b:ed:98:de:cb:31:ac:81:7c:93:7a:
91:e7:0a:e2:12:94:4e:d2:1d:fd:16:d4:8f:0c:4e:
f9:0c:64:16:cb:cc:aa:25:79:d9:85:7c:b8:f3:2b:
7f:d8:56:55:e6:b9:cc:b5:83:1e:81:9b:84:cb:a8:
dd:a2:bd:46:c4:a4:69:47:c4:99:c9:81:61:46:d4:
6e:aa:19:d1:20:82:e9:50:29:f1:82:50:e3:87:7c:
1e:db:d9:c6:1d:21:f8:24:d4:69:53:69:4a:7e:3f:
5f:4f:f7:74:10:75:e8:60:45:5b:8d:26:f4:86:a2:
3d:05:b9:e5:e2:00:9f:e1:b5:25:97:ae:eb:74:d6:
b2:d2:7f:15:6f:96:1e:a4:11:c0:a5:fb:44:1b:6f:
ed:48:11:e0:77:1c:71:b3:15:6d:c4:c5:81:0e:c0:
7c:84:82:1a:c7:27:7a:38:19:6d:71:46:fd:63:02:
b0:ba:17:4c:16:e9:40:35:f3:9d:8f:81:8a:60:4e:
15:45:67:b0:2c:96:04:d2:eb:5a:07:eb:be:fc:5e:
02:a3:4b:cb:75:10:f8:b7:73:8a:27:27:50:e4:b6:
73:5c:0d:8b:49:8a:b8:50:b8:a6:f9:fb:83:5e:f5:
54:77:df:20:f1:3c:34:c3:f0:86:73:74:bb:0d:80:
4f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C4:EA:40:06:5D:BE:01:03:D9:E7:E7:99:5C:66:BF:DB:9F:BC:85
X509v3 Authority Key Identifier:
keyid:A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:96:3b:12:47:b2:71:e8:d9:30:5a:2c:b4:9f:2a:3c:fd:f1:
f5:53:23:0b:e4:5e:1a:62:e9:6a:f4:6f:8c:7b:3d:d3:60:c7:
67:73:74:0b:a9:68:48:e8:d1:c2:9f:b8:d8:41:4a:eb:e2:81:
9d:c3:8f:3e:d1:d7:67:d2:b9:52:54:c2:33:1c:8d:7b:c1:48:
bf:c3:31:e8:4e:81:99:4d:14:96:a4:8d:2a:ac:66:c5:1c:21:
e4:ac:dc:c0:cf:50:0e:13:7e:7f:26:8b:05:24:1c:14:9e:f0:
c9:68:26:0c:53:dc:90:e8:1d:a3:19:6c:d8:c1:57:41:92:d2:
0a:73:0c:77:44:81:69:bb:7f:49:f5:1d:2e:e0:7f:5e:3c:13:
12:21:0b:79:79:e4:ef:00:26:a3:03:99:12:4b:89:be:f0:11:
82:4f:12:c2:bb:66:6d:45:0b:4d:c2:f9:bd:82:f8:b6:9a:43:
f9:77:7b:87:bd:95:54:aa:aa:02:7c:01:b2:f5:1e:31:90:10:
89:f7:fd:93:ba:81:71:91:66:57:1a:10:5d:e7:71:3c:f1:ec:
32:5e:03:55:6f:98:15:22:45:a3:f4:52:51:ee:80:52:8c:55:
d0:a3:f3:06:6c:0e:f2:36:b3:68:be:48:bb:5a:04:6f:02:86:
fc:af:95:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:05:19 2025 by rpki-client