Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
File: p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft (raw, json)
Hash identifier: Pnx68yd44SA2USWL1S1d20MR8S0CYgMMUD5gWgppXxs=
Subject key identifier: F9:C3:CF:4D:06:88:BB:CA:8B:F2:51:64:F5:17:C4:B3:2B:2E:DC:28
Authority key identifier: A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10
Certificate issuer: /CN=a76a90e716530f15f7399b7ac3e0d2939a21a210
Certificate serial: 0196A9F9806D1E697CF3FBC6B2E4DEB1906B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
Manifest number: 1529
Signing time: Wed 07 May 2025 09:00:22 +0000
Manifest this update: Wed 07 May 2025 09:00:22 +0000
Manifest next update: Thu 08 May 2025 09:00:22 +0000
Files and hashes: 1: I9i0WWS-frfVjqHawC8I642O_Mk.roa (hash: itGdqF9tI2l3tL7Dy0ty9ZBwR6g1Row8wxamV2kVAqE=)
2: p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl (hash: Sp2jWT27xsjlP3T3PDFiN4Swu/1ZyggAbWHTOHj389U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 09:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:f9:80:6d:1e:69:7c:f3:fb:c6:b2:e4:de:b1:90:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76a90e716530f15f7399b7ac3e0d2939a21a210
Validity
Not Before: May 7 09:00:22 2025 GMT
Not After : May 8 09:00:22 2025 GMT
Subject: CN=f9c3cf4d0688bbca8bf25164f517c4b32b2edc28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:70:a2:b9:41:25:88:44:30:c5:7c:81:0d:97:
da:87:8c:ea:97:0d:98:01:81:b8:f9:1b:02:ae:c0:
36:f4:09:32:23:be:c1:5d:a6:8e:be:23:76:8c:d8:
ae:57:d6:c7:cd:7c:3d:d4:c9:8d:04:ee:6c:d5:90:
2f:04:41:a1:8f:b2:c8:70:98:28:2b:de:8c:7d:22:
4b:f8:9d:0e:44:3e:31:9d:31:be:c7:e0:a4:d7:b4:
53:bf:88:b5:96:2d:8e:a5:d0:e0:5b:1d:97:cb:0f:
25:c6:a1:3c:8a:36:78:0c:70:9e:61:c5:2c:96:20:
ac:32:14:2b:8d:85:22:5a:75:38:97:1c:31:81:19:
ea:c2:68:0f:90:e5:9c:3b:3e:39:af:4c:0d:71:f0:
a2:5c:05:6b:dd:89:cc:d8:9e:94:33:a8:70:52:8d:
cc:5c:05:80:c3:e6:91:c3:32:58:1a:73:bf:ca:e9:
28:be:1f:e0:ce:93:26:83:61:1c:88:ab:78:00:29:
f4:73:e5:ee:e7:45:01:a3:ad:4c:ba:17:e9:b5:19:
a0:be:40:66:01:cf:f0:6a:89:17:4d:8e:47:32:c8:
74:fe:f6:01:63:8d:93:ee:b8:39:09:a2:7e:ef:a3:
48:c7:1e:b2:95:44:d3:f0:4b:32:c7:34:9a:4a:c1:
ad:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C3:CF:4D:06:88:BB:CA:8B:F2:51:64:F5:17:C4:B3:2B:2E:DC:28
X509v3 Authority Key Identifier:
keyid:A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:8c:01:dc:14:4a:1f:01:06:4f:03:fc:5c:7c:78:a6:10:aa:
4f:d8:ce:af:46:bc:43:02:20:87:23:cb:64:be:e2:c4:47:45:
ef:0e:69:72:38:ba:49:5f:25:46:11:5d:0e:26:0e:60:cc:c1:
1c:83:9d:94:a4:99:6a:2a:68:ee:20:cb:9b:fc:1b:30:e5:a1:
a3:b5:a0:ed:6a:46:02:c9:ce:27:dd:d2:14:7c:92:a6:cc:03:
e7:58:ab:30:28:b7:7f:b1:73:24:e1:cd:3a:78:a0:ca:2b:91:
27:c5:a8:9a:fc:b4:47:e3:39:ae:5d:25:13:f2:e3:88:fe:0f:
36:e1:fc:83:94:f1:db:eb:09:e5:06:1e:a5:37:9e:15:f3:7e:
37:63:67:9e:3b:8d:aa:75:89:44:09:e7:46:56:c6:fd:75:d7:
63:46:23:90:a2:f9:6d:d7:a8:3d:c7:33:01:ca:70:d7:2c:51:
55:ef:3f:b4:09:46:15:e0:8f:d0:c5:49:2f:51:4a:83:94:33:
4c:c1:1d:5f:16:f0:75:eb:2e:d1:7b:b5:9a:93:2e:15:47:f2:
ee:86:c3:6e:29:dd:f1:d1:31:d1:1d:46:20:8d:9d:66:2a:07:
e7:78:2b:9c:f5:8d:34:ab:ea:c9:79:91:c5:33:51:85:8c:c4:
98:13:32:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 17:59:12 2025 by rpki-client