Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
File: qx0OfoGLr5p6-5hmEkKSphqvuMo.mft (raw, json)
Hash identifier: UoGRUgzqyoYDlotMZiaL4+s0I4GqD3/G7fhWaWWlHpg=
Subject key identifier: 0C:6E:33:23:CC:F6:23:89:43:65:17:49:7C:93:0A:1A:8B:03:FC:F0
Authority key identifier: AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
Certificate issuer: /CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Certificate serial: 0196B5FE0C50D3F6299D1E21D6F1C1DEA144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
Manifest number: 1535
Signing time: Fri 09 May 2025 17:00:47 +0000
Manifest this update: Fri 09 May 2025 17:00:47 +0000
Manifest next update: Sat 10 May 2025 17:00:47 +0000
Files and hashes: 1: 3rk6DTXzfhXnDvH7YjIIV0HcXhY.roa (hash: 8yMBicvXGg6+UMP8iKzu3+exUVvDmdmba1/S47z8Uyk=)
2: qx0OfoGLr5p6-5hmEkKSphqvuMo.crl (hash: NscSB1F1edM4IssF365Vyrn+KRj0+HTLsEOHBWRuG3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:fe:0c:50:d3:f6:29:9d:1e:21:d6:f1:c1:de:a1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Validity
Not Before: May 9 17:00:47 2025 GMT
Not After : May 10 17:00:47 2025 GMT
Subject: CN=0c6e3323ccf62389436517497c930a1a8b03fcf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e8:a5:23:50:20:2a:c0:35:88:a3:18:77:03:
69:b4:3a:ad:20:5a:25:81:62:17:5a:2d:8a:02:f8:
51:13:4f:c5:3f:5d:3f:dc:46:6f:cb:7f:3f:cb:4b:
57:ba:5d:3a:9b:5e:cd:0c:23:ad:52:9b:3a:e6:9e:
3b:83:57:52:2a:4d:da:8a:3a:13:53:c2:06:bb:24:
99:d1:a2:88:98:a8:e0:92:79:10:0c:5e:47:e0:a3:
cf:16:a1:a9:a8:fd:3b:0d:5d:a4:2e:4a:b5:2a:6a:
a8:4d:9a:3b:bd:43:95:95:0f:6c:61:6a:56:3f:82:
cd:56:01:57:9c:8c:cb:6e:89:f0:f3:1a:44:48:f2:
4c:47:58:fd:cd:a4:b4:48:55:26:5b:f1:21:70:b7:
4c:08:68:0b:39:a7:f8:cc:b5:a4:c3:3e:ca:b7:4d:
a2:cd:99:17:87:33:7e:77:20:6b:71:7a:75:71:1c:
c8:d6:d4:e3:1e:b7:00:75:dd:9d:ee:b4:2c:84:00:
ff:f0:63:31:98:87:56:0f:55:ce:ec:ca:2b:5d:21:
ee:81:ee:3d:dd:d9:db:34:61:14:5c:a1:ba:f8:3c:
e5:40:21:de:39:57:9c:d7:a3:47:81:e4:a2:8b:34:
37:e9:28:b1:27:28:50:43:61:a6:34:c2:63:2e:50:
73:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6E:33:23:CC:F6:23:89:43:65:17:49:7C:93:0A:1A:8B:03:FC:F0
X509v3 Authority Key Identifier:
keyid:AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:7b:73:7c:2f:97:12:14:fc:55:ac:cd:7e:e8:44:6a:8e:10:
b5:0a:16:63:db:9e:63:8a:b4:eb:a0:31:99:4d:92:14:ea:5a:
a7:83:66:f2:0c:64:54:eb:29:b4:43:35:8c:dd:01:13:58:22:
a1:48:c8:65:7c:5d:e1:72:e0:36:a7:e5:01:ab:04:01:21:9b:
8c:68:7c:92:a5:e6:b2:c6:c1:31:1b:1a:25:20:92:f9:b3:8c:
ed:80:86:15:ed:fa:9b:74:33:d8:39:81:ec:9b:7d:39:77:c8:
d0:f9:73:15:27:32:9c:98:99:40:4a:91:40:11:a1:9f:30:92:
66:c2:f3:7c:8c:c5:df:30:4d:03:1b:cd:ef:ad:ae:84:6d:d0:
8f:07:b1:88:e4:70:b0:85:41:d8:84:cd:e8:e8:04:58:80:5f:
70:ce:cb:1e:fa:c5:e3:96:63:8e:1f:a9:09:f5:fd:fe:97:b2:
45:ee:b0:45:e8:dd:1f:dd:a2:e9:c2:19:24:73:fa:6e:e4:e2:
b9:bf:50:83:c4:8a:6a:43:56:76:78:9d:5d:97:27:ea:d4:18:
c6:58:0d:0c:23:1e:dd:d6:23:b8:9d:a7:21:4b:8f:f3:47:90:
56:52:95:b3:7a:74:30:ff:cb:6a:23:58:3a:9f:21:7a:de:b8:
81:46:38:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:25:43 2025 by rpki-client