Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
File: Q8FllZZq-wus8deTfyRdagUiIaM.mft (raw, json)
Hash identifier: zeruEwKCbhzLKY7hXNOj27u48ylBZPGYhIsL2AMf2ao=
Subject key identifier: 0B:28:42:BC:1C:0F:27:0E:E6:E7:3C:30:77:FF:AB:0C:38:E2:C7:AB
Authority key identifier: 43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
Certificate issuer: /CN=43c16595966afb0bacf1d7937f245d6a052221a3
Certificate serial: 0196BE92F2F87310E0D221B20E5661F34A6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 09:00:23 +0000
Manifest this update: Sun 11 May 2025 09:00:23 +0000
Manifest next update: Mon 12 May 2025 09:00:23 +0000
Files and hashes: 1: 52v68hN6UT4PPJjjqq1uuE_KUSs.roa (hash: /ZapQrg7UEXSt0NcWwZ+kj+0zgSiaiRBd7g+qhPDHBg=)
2: 8S9ibO6esCTeLY2sD14WhmMZOvI.roa (hash: bmTNDF41Sq+c7Se/EWf8YA8iGIHNg20TI2zfC/lGrO0=)
3: Q8FllZZq-wus8deTfyRdagUiIaM.crl (hash: UHI3gDA6ygtV/n9KL22mUbQUHkRqSUUMrAAnaMwO1rY=)
4: WvCj9VbsFj7fqJOx6tk2wit_WpE.roa (hash: /cLe2CDT0v+6sDR4E14KbBpNPCZZWPI/9CgtItdZn+0=)
5: a5Civ4TQY8vU2rue9PuRjdGc5Mc.roa (hash: QP4yk7Jx/AL7wrs9Y5ybfTghTEkjk/U3Nsn5OFbBsqk=)
6: gqvKWohVcj0Z7jlOtSMQwdCwp3g.roa (hash: hvyUYeos7vf6+TZ2NgvLPFstgzyNO3xqXZO7/gB/Dow=)
7: i6WUIDE1FurqyNNZ1EYEHsIVqvc.roa (hash: n8PwD1+DrWnTVld/M9MqGCrSY8HTEouEds18pHnIKJc=)
8: ih3tlDmlbrDwbuabWdJCxXWHffo.roa (hash: 80OP5bzoyzQkUOxJ3u7VzQr4QzoK9uZZaNU7fzcue8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:92:f2:f8:73:10:e0:d2:21:b2:0e:56:61:f3:4a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c16595966afb0bacf1d7937f245d6a052221a3
Validity
Not Before: May 11 09:00:23 2025 GMT
Not After : May 12 09:00:23 2025 GMT
Subject: CN=0b2842bc1c0f270ee6e73c3077ffab0c38e2c7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:b1:d3:13:d3:4c:2f:1c:45:89:f3:6d:a7:5c:
1b:27:e3:15:9a:e3:b3:66:ec:d0:2a:6c:aa:34:f9:
dd:b9:b0:2b:99:c9:f7:78:9a:2f:19:03:67:51:87:
07:38:0e:98:4b:80:dc:5b:52:30:3a:3a:af:08:dd:
b5:d2:5f:68:76:5f:a1:2b:c6:75:67:48:f7:95:5d:
e4:89:d0:7d:58:1e:c9:e3:bd:c8:d3:09:da:59:0b:
0e:4f:e5:fc:89:1b:38:9a:6e:e0:89:d9:c3:4a:93:
b0:d8:b0:fc:7f:d2:73:e8:a8:9d:3b:f3:7f:78:06:
2f:08:d3:d1:2b:9c:ed:28:b4:eb:14:4a:b6:9d:cd:
21:44:10:73:30:2c:6d:4d:a8:8a:3d:c5:20:3e:20:
90:09:cc:25:25:56:a0:6b:47:29:77:8a:6c:e8:a7:
a9:0f:aa:bc:1a:f8:5d:db:cd:8f:84:7e:fd:6c:c8:
cd:68:95:c0:40:3d:ef:88:b8:93:8c:8b:7e:c1:fc:
2b:ea:16:9b:9a:e4:bb:29:05:e8:e8:01:ac:47:79:
cf:b1:75:1b:e9:db:8e:ca:3c:3e:d3:85:d2:fe:c1:
74:e5:d1:0d:1e:97:08:02:2c:70:a8:a6:3f:a8:2e:
23:a2:86:c4:20:00:5b:27:61:2e:62:70:28:fd:74:
0b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:28:42:BC:1C:0F:27:0E:E6:E7:3C:30:77:FF:AB:0C:38:E2:C7:AB
X509v3 Authority Key Identifier:
keyid:43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ab:50:59:78:f3:d2:0f:4f:53:8c:11:25:2c:ab:28:2e:f2:
e4:bc:1c:05:eb:b4:56:19:4e:1c:d2:a6:dd:2a:9c:fb:24:f5:
6c:72:20:d1:d1:6a:69:a4:3c:69:ac:cc:91:a7:79:db:95:5a:
2c:3c:62:d9:0f:07:a6:bd:70:9e:d8:36:cd:84:ba:83:ff:ea:
89:f4:91:b9:6c:c2:b9:86:ab:e3:7c:d8:70:aa:d0:40:d8:c3:
c9:09:fc:5a:2c:ad:6d:59:ac:79:f6:d9:85:ef:82:a2:0f:81:
b9:54:ee:03:5e:b5:34:4e:a8:84:fc:cf:a9:5c:a1:32:55:d2:
a5:b5:93:b2:2a:d4:7b:87:bc:ce:4c:2a:fb:be:0c:4b:eb:ca:
79:60:c8:53:7f:96:20:da:c8:92:21:45:e5:76:f7:a7:bd:04:
f6:0b:06:a1:80:14:b2:18:c9:70:1b:dd:6b:2c:2a:ca:1b:9f:
c3:83:ac:b7:39:8c:b9:ee:29:5a:96:ae:8e:8d:b1:f6:d3:da:
a1:72:4c:77:9c:1a:0d:43:23:ad:2e:84:f2:df:80:bd:e7:3e:
2a:18:04:1b:33:d6:03:12:cf:e9:34:a0:73:ce:65:2d:bc:a6:
d1:a7:d7:0f:c2:35:ab:65:27:af:bd:36:5d:ed:a5:58:0f:b0:
93:5c:41:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:59:16 2025 by rpki-client