Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
File: QvGiTID9yjKWRFc65tYcny43Ttg.mft (raw, json)
Hash identifier: oTwP3JRNE3bW6xv5qm/VHFRBweuJDyO9jyVtxeVRDRw=
Subject key identifier: B6:86:A0:E4:9E:83:1F:C2:D5:76:B4:81:A3:22:9F:3A:DF:E9:24:FB
Authority key identifier: 42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
Certificate issuer: /CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Certificate serial: 0196B7EC8B06EE0325B71914CFFBD4E07465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 02:00:54 +0000
Manifest this update: Sat 10 May 2025 02:00:54 +0000
Manifest next update: Sun 11 May 2025 02:00:54 +0000
Files and hashes: 1: IAPxu4HRLcUJCMnInPlbG2uB4Mo.roa (hash: UkwEFu/9WcHNWqkhhJVrUVhhQx3PtWZnB4zT5tjJmec=)
2: QvGiTID9yjKWRFc65tYcny43Ttg.crl (hash: X1wjc9pl+tS46TvcPs83O5qIM7DqL4zwSv7rNoKVKcI=)
3: aTUWINMGKAxXyPjULlDsCzxwjNA.roa (hash: RaczMm3Wo4rB6JIQE6qKdkcTiCDtnDTo1726sQtpVeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:ec:8b:06:ee:03:25:b7:19:14:cf:fb:d4:e0:74:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Validity
Not Before: May 10 02:00:54 2025 GMT
Not After : May 11 02:00:54 2025 GMT
Subject: CN=b686a0e49e831fc2d576b481a3229f3adfe924fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1a:6c:9b:52:4b:e8:04:6b:56:2c:29:7c:8e:
87:fb:7c:90:c3:f9:50:2c:0b:6c:1d:81:b2:77:01:
d1:3a:8e:2e:73:51:cb:61:02:28:4b:02:d5:c0:8e:
79:41:36:12:64:e4:ed:88:9e:de:3a:4f:bd:60:dd:
b0:6d:a0:ef:55:6a:d2:b3:0f:71:ad:a0:6d:72:74:
35:b9:36:47:98:69:eb:58:c8:e3:e4:08:47:0d:53:
78:d4:a3:85:18:53:ee:b9:88:3e:f7:c9:51:78:e0:
2a:4f:f0:3b:49:9d:29:d1:f7:7d:3c:ac:af:f4:0f:
bc:1e:6c:03:be:9a:18:74:d3:94:5d:04:07:51:6b:
76:ce:91:4c:f3:8d:99:c4:ea:55:c5:cd:5e:3c:24:
99:24:f2:8c:da:27:14:b5:49:21:75:20:db:bf:6a:
2c:55:e1:f3:ec:27:69:36:50:a3:d4:e7:e1:3c:ee:
19:c9:c5:54:17:1f:d8:80:08:93:bf:c6:94:ac:ca:
90:6a:75:30:dc:bf:34:ab:1a:9f:06:05:59:f2:d3:
53:31:fa:59:a2:d1:dd:3f:0b:b4:98:04:e1:10:86:
e1:b7:58:36:ee:e7:2b:18:8d:24:19:93:4f:68:5c:
c9:17:41:d2:c4:e7:e0:82:0e:c4:9a:1c:2c:a1:30:
7f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:86:A0:E4:9E:83:1F:C2:D5:76:B4:81:A3:22:9F:3A:DF:E9:24:FB
X509v3 Authority Key Identifier:
keyid:42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f0:88:29:06:87:c0:26:ad:35:6c:12:04:ad:bc:43:e5:05:f0:
e0:2d:cf:29:ff:33:54:07:ac:fb:48:db:d2:cd:d8:60:ee:e8:
e9:a9:db:66:ff:d7:32:ce:f3:7d:43:9e:a5:51:86:08:09:e8:
40:82:30:b6:f5:82:73:d5:4e:1f:58:96:46:e6:0b:9e:01:49:
eb:c3:25:e0:5f:5d:90:85:64:74:fa:f6:e6:4c:63:8f:fd:01:
cc:2f:57:06:8d:ec:e2:0f:51:74:80:53:c9:9f:c4:d3:2f:4c:
08:4a:48:0e:b7:53:d5:0d:5c:7c:a1:78:fd:95:71:ee:0b:d5:
5a:ae:4f:7f:77:34:b7:fb:00:b1:b7:46:38:5c:2a:e5:cf:16:
79:e2:ac:cf:b9:2c:14:c2:b7:0b:c2:51:b1:02:51:bd:6a:6c:
1e:ca:0f:99:de:54:06:73:50:5c:6b:3d:a5:1b:09:d2:af:16:
b0:3c:57:3b:d8:7a:25:90:70:c2:cb:33:ae:6e:40:3b:c3:19:
8a:d2:c7:93:4d:d7:a7:fa:31:5a:ba:af:09:d7:19:56:c1:1d:
9f:51:84:70:0b:22:07:7f:6e:57:09:08:54:ea:ab:29:1a:96:
cb:73:db:6a:95:43:0b:d5:c3:9f:46:cf:ff:3b:21:7d:86:59:
27:c7:60:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:04:58 2025 by rpki-client