Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
File: qEOOrPTQZOh6drtGLTtLLMOFikw.mft (raw, json)
Hash identifier: 68/F52w9IchhewytQnEwGshYfNkeR+GZQci4YfoJeLY=
Subject key identifier: BA:D1:4F:A6:4F:DC:E8:1E:E4:E1:12:FE:39:BB:87:4C:E5:67:65:2F
Authority key identifier: A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
Certificate issuer: /CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Certificate serial: 0196BBC8D7F3B2AAE45130CC7FB31285FC41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
Manifest number: 0CAE
Signing time: Sat 10 May 2025 20:00:23 +0000
Manifest this update: Sat 10 May 2025 20:00:23 +0000
Manifest next update: Sun 11 May 2025 20:00:23 +0000
Files and hashes: 1: 1VL4lYJptkpi6ZtVoZgmoJ6ksn0.roa (hash: f1kBG9NlxREDPNdWOkJs8Cv0Ij2AV1IHOO/Hc9KsOpQ=)
2: eWIsK00nv-TBVtwDZCA3scOHg9s.roa (hash: y147gGaB8bkjz0BvOSbEDQ7Eu45dIgspzGe/6ZKyCR0=)
3: qEOOrPTQZOh6drtGLTtLLMOFikw.crl (hash: 4bBEe67bBvdhoK+2YbfaHlkeXFn4/BTV5eaBOzCs8qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:c8:d7:f3:b2:aa:e4:51:30:cc:7f:b3:12:85:fc:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Validity
Not Before: May 10 20:00:23 2025 GMT
Not After : May 11 20:00:23 2025 GMT
Subject: CN=bad14fa64fdce81ee4e112fe39bb874ce567652f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:15:32:23:de:24:6c:64:f9:68:d2:b7:31:3c:
44:5d:1b:7f:6b:90:e0:10:c5:e6:93:fd:f1:81:fb:
ae:54:85:76:f5:50:c3:1d:9e:c3:66:43:06:c6:4a:
5f:89:89:38:10:9c:35:56:56:80:92:8b:01:3b:41:
54:3e:ce:25:29:3c:49:2e:4c:bc:1f:04:15:ff:3f:
4b:c5:71:f7:8d:b0:c4:59:20:8a:cb:48:49:e6:2a:
25:4b:9f:98:ed:0f:93:45:13:91:27:49:b5:fb:cd:
e2:63:8b:6e:36:5d:56:b4:75:83:17:4b:e8:da:8b:
54:6b:18:ac:c5:49:73:07:f4:26:99:d3:00:53:92:
28:6d:e7:a4:18:26:47:dd:41:51:33:82:4c:96:d3:
ff:b1:79:80:c8:12:73:a9:fc:46:61:34:a4:5f:a7:
6a:25:52:61:d1:b8:9f:6b:d5:7e:3c:aa:5c:bb:24:
d5:75:7e:4e:07:28:80:aa:f9:05:6e:b0:23:13:f7:
ec:55:92:12:92:7c:23:e8:00:bb:57:b5:5c:d9:e4:
57:f9:ab:14:34:1e:4d:d6:35:a5:58:ab:38:c5:27:
e7:0f:bb:fe:57:11:02:a6:8c:30:14:22:bb:48:bf:
a2:9c:92:13:aa:21:f6:90:2b:6d:9c:19:dc:7f:c6:
7a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D1:4F:A6:4F:DC:E8:1E:E4:E1:12:FE:39:BB:87:4C:E5:67:65:2F
X509v3 Authority Key Identifier:
keyid:A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c7:01:b4:67:21:f1:11:46:9e:77:30:f5:72:08:87:6c:16:
18:61:46:fe:7a:45:dc:f8:67:97:26:f5:4c:a5:e6:11:32:3c:
68:9a:88:96:64:38:03:26:4c:18:30:2a:77:25:74:b4:49:e7:
22:a6:e3:76:8f:42:26:cb:a9:52:9f:84:a2:69:db:ab:bc:08:
a7:0d:53:e3:b0:b4:dc:a0:45:e1:37:72:3a:fe:52:e3:e1:a1:
10:3d:02:9a:1a:24:61:b8:e5:df:95:8f:1d:90:eb:9b:1f:68:
75:08:51:8c:b8:dc:87:be:8a:82:ca:c1:5f:a3:b1:aa:c1:a9:
6a:75:00:2d:19:a7:dc:c9:d8:84:4e:29:43:9c:66:a8:66:f2:
ed:05:fd:21:cc:98:6e:fe:d3:2f:34:2c:12:a7:b1:08:cf:67:
00:06:67:9a:f7:6c:fb:de:45:b6:72:aa:57:47:9c:18:19:43:
54:ae:de:82:7b:f3:cb:2b:0f:8a:0c:0c:f6:c1:52:06:aa:46:
13:4b:66:3e:0e:34:a8:25:a7:38:d1:db:3f:cd:8f:97:ea:4d:
19:67:1b:82:df:eb:42:d1:a3:e0:a3:ff:52:e8:9d:ee:19:c8:
7e:53:e0:1d:63:71:4e:99:40:26:20:0e:0f:a9:0b:d6:c5:24:
19:13:42:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:56:20 2025 by rpki-client