Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
File: rqAyAc2mqK295P6ARuxl-WrGqWw.mft (raw, json)
Hash identifier: 81Pdu3d9eSdrxrNSaTB0r8G+CnI6+vbKdlvh3lZcrjw=
Subject key identifier: 54:27:E5:77:A0:08:CD:86:AF:C6:E1:59:5D:35:43:56:96:B5:10:0A
Authority key identifier: AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
Certificate issuer: /CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Certificate serial: 0196BCA4A71D97D132D47E2B00C8724B6AF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
Manifest number: 8A
Signing time: Sun 11 May 2025 00:00:29 +0000
Manifest this update: Sun 11 May 2025 00:00:29 +0000
Manifest next update: Mon 12 May 2025 00:00:29 +0000
Files and hashes: 1: OHSgHk7806-Y3EiMMODqh70dnpA.roa (hash: dwELo2G8zKa9A3mOV9vawf+jeFFyKXxpSg3LwUytDM8=)
2: ZfKmgCC5shqdiJ4oG4WQU2IlAJs.roa (hash: xPdeleCRUgq2S3wQBazj5FbP5YRWDoq9gRuAfQMqJJU=)
3: rqAyAc2mqK295P6ARuxl-WrGqWw.crl (hash: y61huAc0nw7nSXDJLkXFA/8eNsuJLSQAlsJIbmTzL+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:a7:1d:97:d1:32:d4:7e:2b:00:c8:72:4b:6a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Validity
Not Before: May 11 00:00:29 2025 GMT
Not After : May 12 00:00:29 2025 GMT
Subject: CN=5427e577a008cd86afc6e1595d35435696b5100a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:43:a6:1e:61:a5:1e:e0:c1:ba:f9:d5:90:7b:
81:bd:c7:13:3b:1b:bf:27:63:eb:4c:aa:e1:7c:3e:
83:dd:cf:65:34:16:a3:a3:98:54:d5:3e:2f:2f:9d:
4a:2b:6f:da:06:9a:45:33:5c:12:7d:8a:74:49:e1:
37:24:3b:51:7d:27:9a:50:46:06:5e:f4:3e:6b:47:
68:1c:b7:98:3a:50:c3:e9:91:4a:4a:62:ac:9b:ce:
f3:40:51:6f:e8:4f:74:75:1a:99:3e:e0:f5:38:13:
8a:66:b0:75:57:ab:1e:0a:09:ff:d9:42:35:3d:70:
e3:8e:13:8c:62:12:35:97:82:69:a9:ea:b5:06:3a:
91:51:3e:01:5a:35:0d:e6:d2:5a:65:07:cf:a9:6c:
59:c7:cf:f5:ef:22:16:59:d5:9c:08:87:85:1c:9c:
0a:b7:95:b1:cd:d6:0f:c7:a1:43:89:21:c2:7e:78:
de:1f:ce:fe:65:1e:fb:01:26:4a:e6:f7:77:5c:80:
1b:4c:e8:b1:0f:a2:36:5b:d0:e1:47:e5:96:91:0e:
93:54:1c:0f:4d:b3:7e:02:5f:4e:c8:89:75:eb:88:
52:a8:56:aa:92:2c:0d:01:ec:d2:f4:c6:13:a8:07:
cd:97:e3:3e:2e:e0:f6:5e:28:09:b9:2d:d9:61:d8:
54:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:27:E5:77:A0:08:CD:86:AF:C6:E1:59:5D:35:43:56:96:B5:10:0A
X509v3 Authority Key Identifier:
keyid:AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:67:71:4e:79:41:86:b6:91:fa:24:1d:93:c5:73:7f:a8:b9:
ef:6d:76:87:4d:31:7d:90:62:08:cb:29:e7:80:4a:95:aa:e8:
4b:bb:64:a1:d6:ff:8b:47:5c:e7:7b:fc:c0:43:4e:87:a6:11:
52:10:33:58:79:07:ad:1e:35:11:06:4b:ad:d6:b4:e7:ef:79:
45:3f:ed:1d:dd:97:7f:45:f1:f2:57:7a:8a:c5:57:01:24:65:
de:97:89:d3:5d:f9:d4:99:d2:b8:aa:f4:14:a6:24:27:6e:93:
08:ea:b6:2e:c7:83:74:66:9b:e0:dd:39:e1:9e:1c:da:89:ea:
d5:2d:d1:b5:c3:ba:66:1a:b1:cd:79:7b:d0:05:a8:6b:85:c9:
32:3b:bb:58:94:24:7d:93:42:28:8d:03:c1:39:9a:73:87:de:
6d:05:22:9e:af:cc:00:87:71:2f:7e:b4:74:48:8a:b8:aa:5f:
65:61:9b:9b:0c:b0:85:fd:84:94:0d:68:f1:bd:0d:7e:5d:71:
45:91:0b:db:82:bd:7c:43:f0:aa:08:61:f6:c5:fc:07:c5:d2:
28:75:eb:5a:fd:c2:49:45:00:dd:d3:50:c3:5a:f7:19:43:43:
cf:e2:38:7f:40:a5:f4:00:8e:03:36:95:40:2c:49:1c:3b:5b:
c5:c7:0a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:33:14 2025 by rpki-client