Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
File: qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft (raw, json)
Hash identifier: L/aymcIjlHCTNPT6d5T2yGUP9RHiCzN5nUOuaFwFLmk=
Subject key identifier: B8:CF:B3:48:24:19:8C:07:CD:A7:F0:23:C8:15:31:A1:3B:0E:39:09
Authority key identifier: A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4
Certificate issuer: /CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4
Certificate serial: 01969F767F54214CCAC883C2A5B729EF924A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
Manifest number: 0898
Signing time: Mon 05 May 2025 08:01:05 +0000
Manifest this update: Mon 05 May 2025 08:01:05 +0000
Manifest next update: Tue 06 May 2025 08:01:05 +0000
Files and hashes: 1: 6erG3SJtn2TNRyDkzUal0dRi1s8.roa (hash: zMaNZ9haJooDEzDMLzt1I2Ft1PlQQjaYiPOAhINpWfw=)
2: qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl (hash: PQOmgo4wz/Qrf7pAiqoT3nFBbQfH9ThNSkSNsjFtuB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:76:7f:54:21:4c:ca:c8:83:c2:a5:b7:29:ef:92:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4
Validity
Not Before: May 5 08:01:05 2025 GMT
Not After : May 6 08:01:05 2025 GMT
Subject: CN=b8cfb34824198c07cda7f023c81531a13b0e3909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:22:62:03:46:38:e8:7e:3b:8e:0c:f3:65:7e:
1a:6e:80:5b:f2:21:15:18:90:72:d5:39:b1:93:ac:
ef:30:28:18:80:6a:5b:09:33:ed:bf:fa:fd:69:b0:
7b:75:d3:3e:65:cf:d5:75:a8:fc:f5:9f:ff:96:51:
54:cb:8e:44:24:5e:eb:f6:a5:ca:67:dc:ca:e7:d6:
e5:6f:17:3b:46:85:f6:5c:53:c2:7a:61:c7:e8:6d:
76:e9:c6:33:07:ea:57:50:fe:e5:39:43:cf:3a:b2:
13:65:35:c5:fb:cc:58:8a:7d:e8:5f:ca:1d:b5:ab:
bc:7e:1e:15:40:e7:2b:bb:05:50:f8:2a:94:d0:f5:
7a:9b:58:83:19:bb:f9:3e:d4:ce:f8:f0:83:cc:8a:
5c:21:0c:16:cf:8d:b7:74:f0:15:fe:29:58:47:6f:
04:bb:be:76:b7:72:ff:2e:cb:dd:50:a4:2f:5b:9c:
a7:2e:2f:94:41:ca:1a:cb:50:76:c4:ca:36:39:e0:
28:3a:98:0c:75:05:73:4c:10:98:50:44:82:50:e6:
67:d6:bb:96:0c:f6:c1:74:87:00:da:6f:7d:db:85:
db:43:40:72:2b:f8:a4:35:1e:bf:81:a3:d4:8e:2d:
4c:4c:16:56:8d:83:e0:22:61:cd:ab:c0:9d:b4:03:
15:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CF:B3:48:24:19:8C:07:CD:A7:F0:23:C8:15:31:A1:3B:0E:39:09
X509v3 Authority Key Identifier:
keyid:A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:1b:6b:93:e4:d9:a2:2d:fa:cc:f6:58:56:57:49:81:f0:3b:
9e:94:20:a6:ab:80:47:cc:3f:83:58:bb:f5:be:aa:85:d2:01:
5c:65:a6:53:aa:f0:2b:49:d7:df:bd:7e:3c:11:0f:b8:ae:a0:
5c:6b:36:03:a7:f0:3c:60:97:ce:63:2a:2e:cb:b3:83:5e:c2:
8d:9d:87:e5:42:9a:79:b0:8f:7b:ec:92:03:f9:7c:cb:ab:43:
03:f4:b1:27:c3:2d:66:4b:5b:94:92:6d:41:61:51:b3:0b:a6:
dd:2c:4b:e5:46:39:eb:f4:e1:36:2e:4d:6c:cc:83:c5:06:81:
b6:8c:29:eb:f5:21:24:8a:9e:5d:f9:d5:f7:b2:30:f4:4e:42:
1e:f7:be:21:d7:14:3b:53:20:64:40:d4:ac:72:e3:72:56:c3:
8c:a6:36:b9:eb:d8:53:bf:b5:0c:33:79:9d:f0:b0:21:2b:5b:
8e:3e:c8:b8:3b:87:56:46:97:6f:0a:d3:54:0a:be:0a:fc:9e:
99:cd:5f:2c:07:5d:8e:3a:46:49:22:b2:2a:0e:55:8d:19:23:
7d:88:4d:dc:cf:e3:3e:e4:29:93:39:ea:2f:c3:f7:5d:a8:0b:
dd:c4:94:ff:c9:05:0a:6e:a3:ee:cd:69:ee:af:fa:bb:c3:59:
31:1b:d6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:10:11 2025 by rpki-client