Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
File: Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft (raw, json)
Hash identifier: oShp/jm1o0MymK9Eu2hL/IAYOv63e6mWglDSWWUKX4o=
Subject key identifier: A0:31:01:28:BD:07:37:E3:BF:26:68:39:5C:72:C0:3B:F6:83:5A:96
Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
Certificate issuer: /CN=428df99824ce67b0cb5f87fc46599e13adea5702
Certificate serial: 0196BE5C404CDE92CC10BC4ED2EA31C5E802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 08:00:38 +0000
Manifest this update: Sun 11 May 2025 08:00:38 +0000
Manifest next update: Mon 12 May 2025 08:00:38 +0000
Files and hashes: 1: Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl (hash: l3yNiFRjc7nhhEhJM8j9fxXAXd94xgtZTdpCarS6ELA=)
2: raYuD2-oWYFkHeIeR6LIUYgtbtM.roa (hash: JU+hidsjRHQowQdjLtlmSpodi1Pd90fMaRJU/QLsDsg=)
3: zY-mc8ottsO0mlX2DbncV_JVaGI.roa (hash: IXtxsfxn422nBKB3kQxte4GM01lfDRPi2WPTNL4v8HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:40:4c:de:92:cc:10:bc:4e:d2:ea:31:c5:e8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702
Validity
Not Before: May 11 08:00:38 2025 GMT
Not After : May 12 08:00:38 2025 GMT
Subject: CN=a0310128bd0737e3bf2668395c72c03bf6835a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ab:b9:e4:73:0c:53:c9:d9:ec:10:df:3e:e6:
31:ac:f1:4e:b1:e8:35:53:aa:d9:a0:60:e5:69:c2:
af:31:30:aa:e0:13:eb:ea:32:fa:ce:f2:c8:f4:a7:
ab:b7:9c:98:ef:02:ae:95:77:7a:1b:df:56:4c:ea:
91:8e:1c:55:c1:f6:32:cf:8e:58:d4:ee:2c:52:75:
b5:b0:55:ef:18:48:e7:0a:54:e4:5a:c5:81:de:f7:
29:a2:41:79:91:74:b9:b1:bf:da:d9:4c:07:80:58:
ba:e1:d7:99:2c:da:aa:4a:c9:e6:ad:9b:b7:69:9e:
73:d2:ab:82:41:fa:86:24:95:16:67:d9:7b:26:03:
4e:6b:2e:4e:78:98:f3:59:2f:0c:49:d9:77:9f:90:
9b:3f:df:fb:f8:c5:78:34:b8:a3:70:53:10:c4:7a:
66:88:0d:f3:8b:24:c7:46:fe:65:df:ad:85:fb:16:
0c:a4:e4:bc:2a:b7:24:25:f7:43:3c:e2:25:1e:5d:
2c:ff:40:7c:61:30:a6:bd:73:4a:82:9c:6b:ba:64:
36:36:22:c3:61:80:31:bc:79:f6:05:21:a7:6f:7e:
7b:f8:64:3d:14:e1:dc:4c:e5:c9:db:10:3e:af:e0:
c9:b0:40:1e:5f:b9:9e:08:5f:71:ac:78:05:42:08:
0c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:31:01:28:BD:07:37:E3:BF:26:68:39:5C:72:C0:3B:F6:83:5A:96
X509v3 Authority Key Identifier:
keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c6:f6:9a:79:e6:d8:33:19:60:ff:32:7d:da:a6:9c:a1:96:
2d:3e:9e:de:93:e5:f3:41:46:17:ef:2d:b0:af:a3:24:cc:eb:
27:fd:cc:8b:78:f9:e9:aa:ed:16:6e:7c:99:c6:74:72:ea:af:
08:f3:30:d2:81:d0:ef:7d:6b:0d:10:ac:cd:da:8e:fc:72:d8:
62:05:88:f7:2a:64:4b:ed:a5:28:e6:be:36:a3:bb:a3:e2:36:
1e:e2:ac:dd:5f:75:d3:a5:09:53:bb:88:b5:cc:d9:ad:2b:39:
df:78:a8:ac:3c:47:06:ee:24:82:fe:f9:fc:d5:71:61:25:ea:
2b:4c:d5:9a:cf:c1:b2:da:6a:3a:9e:33:de:ab:ea:88:10:34:
95:d8:29:ba:d1:ff:2d:45:85:99:d5:7f:12:c6:8d:98:9a:ea:
2d:71:64:41:f4:a0:db:d5:20:0e:77:58:9f:a8:ba:06:9d:cf:
32:bc:93:5f:ef:f5:23:2b:16:86:d9:a0:f2:5f:a5:8c:14:f2:
81:db:6b:ab:d7:f3:c4:ad:35:96:43:09:40:63:81:2a:dd:cb:
dc:66:5b:81:76:32:89:ca:e3:c8:3d:14:89:97:93:e6:71:4c:
8c:37:67:51:58:45:de:09:c7:3b:cd:bb:e5:00:82:09:65:5a:
14:e1:6b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:54:21 2025 by rpki-client