Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
File: qC-5s0GMRYzbxs_WhFFL4krQw8k.mft (raw, json)
Hash identifier: zP+u579vVL+CKF9UVR2dGUdFyO3utivDf3eVWL9GTPc=
Subject key identifier: 00:AB:79:40:BD:49:A2:EB:F8:29:D7:1D:EB:2D:4D:99:94:65:16:1B
Authority key identifier: A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
Certificate issuer: /CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Certificate serial: 0196C45E23B26F1B916760146B977D94C79E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
Manifest number: 146C
Signing time: Mon 12 May 2025 12:00:25 +0000
Manifest this update: Mon 12 May 2025 12:00:25 +0000
Manifest next update: Tue 13 May 2025 12:00:25 +0000
Files and hashes: 1: 4KqmJoEVUd9bhY-ntnaMTkNmA44.roa (hash: LLo6nOWCS1mxlNIUMzouZjN4HwCv7i5lI/hb4nBjcBQ=)
2: Jw4aASdhNdVI-FplW-882cj74Fw.roa (hash: ewm0/xps8d7RUrK5yQyWODWIjZ5yxmU6C2dpLRlFoTs=)
3: qC-5s0GMRYzbxs_WhFFL4krQw8k.crl (hash: Byk5mOeHp5ogmIXnk663leQo2UQ5C2yunmAcWZiP+iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:5e:23:b2:6f:1b:91:67:60:14:6b:97:7d:94:c7:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Validity
Not Before: May 12 12:00:25 2025 GMT
Not After : May 13 12:00:25 2025 GMT
Subject: CN=00ab7940bd49a2ebf829d71deb2d4d999465161b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a8:46:28:b4:22:79:b8:1a:2d:76:80:e3:a4:
c2:55:cc:91:b4:a7:29:b3:76:ae:a5:a9:58:c9:4e:
a6:f5:0c:13:b7:9c:78:53:5f:5d:50:6e:d4:04:42:
b0:cc:4f:42:1b:bb:1b:de:be:a1:8d:f3:ae:ed:32:
ea:c0:df:08:b0:3a:46:62:4b:23:cc:08:1c:fc:a5:
91:63:f2:06:33:0a:59:18:96:66:04:13:40:cb:59:
84:65:32:52:7f:3c:24:e7:86:54:3c:46:e5:d0:77:
92:45:5b:96:b4:5c:60:c4:f4:ba:0c:da:b6:af:46:
d8:bf:66:ef:2f:20:79:14:51:f6:a7:27:c7:49:fc:
1c:74:e7:9a:4d:50:72:71:e9:e7:ef:3c:2e:f9:e7:
e4:79:63:f8:d9:3b:9b:76:d1:e6:fd:11:46:f7:af:
4c:d7:89:49:fb:bd:d8:08:52:0d:5e:e5:61:af:74:
92:30:2d:d2:fe:7a:4c:7a:3b:69:1b:3c:65:a4:05:
51:8f:8f:0d:3e:9f:b8:a0:29:96:9f:e7:c6:b2:0c:
46:c9:e8:98:9e:7b:69:eb:8d:7e:6c:4a:1f:10:02:
dc:6a:40:db:ef:2b:d1:4b:f2:ad:7b:80:ea:55:ef:
8d:34:6a:0d:8e:f0:41:95:3e:3f:0d:22:c0:46:13:
c0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AB:79:40:BD:49:A2:EB:F8:29:D7:1D:EB:2D:4D:99:94:65:16:1B
X509v3 Authority Key Identifier:
keyid:A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:99:33:ac:15:da:11:b4:34:08:2b:80:1d:c8:6f:3a:d3:c3:
08:0d:48:4e:47:8a:3c:1a:77:87:a9:26:69:10:c8:37:14:a0:
bf:c4:f0:5b:5f:c0:06:ca:77:0a:4c:09:b5:b8:ae:8e:e7:22:
3e:9c:49:ee:c9:92:c8:4d:cc:9f:db:db:b7:f2:2b:94:b3:d9:
2e:af:13:52:b4:59:e1:67:76:9a:90:4d:8e:ff:91:93:a4:fa:
6c:e3:d9:eb:9c:38:ab:e0:f4:f4:8c:bc:a3:a1:70:47:18:53:
b6:06:ea:89:84:b9:10:fd:fc:07:ed:ba:53:2e:07:43:5d:0a:
37:39:46:b5:71:52:48:71:ce:01:73:25:70:87:5a:39:de:a8:
51:6a:d2:9f:45:4f:ef:95:7d:eb:45:fb:08:61:b4:32:5f:4b:
00:cd:59:07:26:b5:2a:18:27:27:bd:89:e1:59:20:3c:14:e5:
c2:6c:37:a0:3d:d5:c1:76:35:e0:3a:58:51:19:61:03:fe:83:
a6:84:4f:3a:3e:34:8b:a8:ab:91:80:d1:14:9d:b3:d6:9f:0d:
d2:75:6f:60:29:b7:74:fa:db:b2:43:9a:51:d0:cc:97:15:0a:
93:7b:ca:6e:c7:e4:a9:67:71:73:61:3f:f4:39:2e:22:12:c0:
e4:9b:24:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:55:30 2025 by rpki-client