Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
File: Qj2TBU8GPPiikYYXNfkAWauewWk.mft (raw, json)
Hash identifier: t50om3r80MT55pWgqIJYZkBTIG0QUxh2BwQnc9/EACc=
Subject key identifier: 7E:89:70:69:67:6D:11:70:8F:67:D3:1B:2B:DF:F3:F3:05:93:E7:57
Authority key identifier: 42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
Certificate issuer: /CN=423d93054f063cf8a291861735f90059ab9ec169
Certificate serial: 0196BD80506360C5207514E65D152F3676E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
Manifest number: 1539
Signing time: Sun 11 May 2025 04:00:25 +0000
Manifest this update: Sun 11 May 2025 04:00:25 +0000
Manifest next update: Mon 12 May 2025 04:00:25 +0000
Files and hashes: 1: Fxqjt6X76bxQBXWwSZ7TE0DXZ4E.roa (hash: 1w4Y/QhTTxCziVVyNTfr4p7dQVzXdB6YpDvNxykMieU=)
2: Khu0iUVuTs8ZYAwuEt_S3XCnJdE.roa (hash: 0AzGfOb5OfWgiAbeRL3c+g44yXgjZKIdXOkCd1IWoeo=)
3: MwggIWb8xKY_Gmyt-jhjyCB3Knk.roa (hash: 2e03nmncmnuNRXI/WbH4mmPniZO75Z2kJ+MSZTXtduk=)
4: Qj2TBU8GPPiikYYXNfkAWauewWk.crl (hash: SMbWJ9ay8KKdIWoPUWe1KiGdWpLKwuxct+ZQTjyq1/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:50:63:60:c5:20:75:14:e6:5d:15:2f:36:76:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423d93054f063cf8a291861735f90059ab9ec169
Validity
Not Before: May 11 04:00:25 2025 GMT
Not After : May 12 04:00:25 2025 GMT
Subject: CN=7e897069676d11708f67d31b2bdff3f30593e757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:18:f9:a8:28:c5:4c:b9:0f:be:2b:f9:54:
06:f3:5a:6b:ad:40:4a:26:90:ba:62:e6:85:82:e5:
9e:a3:1d:2c:e2:bd:49:3e:25:39:e5:22:2d:98:68:
64:51:b6:af:06:15:26:3c:4e:5b:ac:de:90:75:d8:
74:cb:03:98:8b:ad:04:25:b6:57:7e:bf:35:35:ed:
4c:69:e5:33:81:68:91:ee:cc:ec:23:42:ad:98:63:
68:0d:d3:f0:b7:84:7f:97:82:97:d4:3e:7b:f0:9b:
d9:e3:7d:01:c4:8b:2d:9b:f4:04:22:b8:fd:0c:7e:
27:1f:27:d7:f6:f3:ed:2a:86:90:9c:58:27:fc:1d:
6b:63:e6:5c:de:ad:d5:18:c5:24:2f:1b:df:96:c9:
5e:dc:af:a7:e4:24:91:52:2f:b9:ef:ae:c1:eb:a2:
a4:46:42:9b:99:50:78:87:73:15:93:e0:32:3f:76:
44:68:49:07:31:bc:ba:27:df:57:14:7e:8b:44:96:
3a:74:71:74:35:55:3a:93:3d:d0:96:d3:b3:29:00:
0b:2f:59:2e:5d:37:40:db:23:04:5a:50:61:36:9c:
2d:35:a1:a6:25:8d:5e:a4:ec:76:b0:f7:a1:d7:8e:
e2:9f:94:e9:e7:61:e1:a4:54:d1:78:53:a1:18:74:
6e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:89:70:69:67:6D:11:70:8F:67:D3:1B:2B:DF:F3:F3:05:93:E7:57
X509v3 Authority Key Identifier:
keyid:42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:50:a0:72:68:d8:0e:b3:ac:dd:7c:b3:dd:a1:d1:ef:8d:e4:
32:3c:15:72:04:60:70:c6:06:a9:77:59:67:a6:6e:90:8e:13:
5b:4b:1b:63:c6:81:47:71:7d:e2:80:6b:33:d9:22:e2:7c:dd:
37:3a:21:26:36:01:91:e0:ee:98:d2:d7:40:e3:d9:6c:fe:2b:
d3:ae:8f:f5:db:44:49:0a:8e:b5:1f:35:ac:7a:90:9c:83:ec:
f5:ef:f8:e4:7e:b0:58:83:c8:b0:f8:a7:99:bd:ba:ea:60:c2:
33:10:8f:47:b8:09:3a:34:18:e6:1b:52:fb:12:69:d2:42:b0:
d4:b6:a7:7b:c1:21:ef:47:93:b1:c8:19:36:07:60:37:71:3c:
e4:37:1a:03:58:c8:7f:64:8b:b7:16:e7:11:a3:d4:a5:c8:06:
db:85:8c:77:ca:8d:de:e5:1d:4a:0f:2c:74:b1:f9:47:6b:02:
dd:8a:7d:70:03:c7:30:75:9f:5e:d0:43:06:53:f6:1f:54:e3:
7e:8d:14:c2:54:17:31:46:59:e0:c0:dc:40:46:aa:82:8e:28:
8f:2c:e7:6f:29:db:7c:3d:83:3c:0c:6b:21:83:42:d3:5a:8f:
9b:02:81:5c:2b:56:af:16:fe:f9:be:ee:c3:c7:a2:df:6e:32:
d3:c5:61:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:13:13 2025 by rpki-client