Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
File: qsU0mf8g8DXLixwKqbd8PX0ol2w.mft (raw, json)
Hash identifier: zZ+6emC7PPLiCDTyFdOYvsHgp+oFyD7ogz7O+o/+YBQ=
Subject key identifier: 55:1B:8E:CE:05:57:FD:55:BB:AC:FA:4E:DF:E6:AE:C3:18:A5:BA:7B
Authority key identifier: AA:C5:34:99:FF:20:F0:35:CB:8B:1C:0A:A9:B7:7C:3D:7D:28:97:6C
Certificate issuer: /CN=aac53499ff20f035cb8b1c0aa9b77c3d7d28976c
Certificate serial: 0196CE067DD6AD2379DE7EE5C366590B5780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
Manifest number: 153C
Signing time: Wed 14 May 2025 09:00:53 +0000
Manifest this update: Wed 14 May 2025 09:00:53 +0000
Manifest next update: Thu 15 May 2025 09:00:53 +0000
Files and hashes: 1: 3RChXaGg2mHXT_oEdTM0SpY6jhc.roa (hash: PV09Dkm12mpf6AJ4aFGi0VOS8JddqTI6zuA00aTTnSY=)
2: qsU0mf8g8DXLixwKqbd8PX0ol2w.crl (hash: khAw8SewGsKa5BMwnfg+/rUdH+W14fe5QJlelHzp+Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:06:7d:d6:ad:23:79:de:7e:e5:c3:66:59:0b:57:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac53499ff20f035cb8b1c0aa9b77c3d7d28976c
Validity
Not Before: May 14 09:00:53 2025 GMT
Not After : May 15 09:00:53 2025 GMT
Subject: CN=551b8ece0557fd55bbacfa4edfe6aec318a5ba7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:de:09:ab:63:f8:26:d1:e3:55:fd:9e:b3:c3:
fd:d9:dc:76:1c:04:2e:a7:5e:84:5d:66:af:f3:45:
06:79:b3:e9:52:a6:98:30:5b:b6:f3:96:40:d1:8a:
ba:c5:e7:5e:e6:24:30:f0:68:e3:52:02:65:29:d1:
29:c3:3e:59:8c:18:24:f7:ea:97:dc:f1:ad:ae:ac:
28:fc:91:12:6c:59:64:d3:26:8e:5d:fa:a4:12:02:
cd:ab:7c:ca:7f:38:c5:bb:1e:7d:7b:da:43:06:f0:
62:7c:92:b8:19:7b:20:08:4a:5b:e3:bb:69:65:f3:
37:ac:5d:31:d3:a5:81:b1:f3:e4:95:65:62:cf:1b:
f4:10:e5:7d:bc:dd:e4:e9:6e:2d:e2:70:56:9a:0d:
30:36:e2:1d:90:d9:75:89:32:10:41:e6:50:d4:4d:
5f:3e:c1:b4:2a:41:a9:bc:59:55:b1:22:b0:d4:2a:
91:20:a7:fc:76:50:a3:a9:2c:4f:f7:41:91:3c:85:
07:d2:4a:39:45:5d:66:a5:cf:c7:27:50:9f:d2:58:
fe:56:d8:0c:2e:36:d7:eb:60:ef:12:1a:88:f1:fc:
10:3d:69:80:bc:31:05:0d:ef:1b:3d:cf:d1:04:cf:
ac:57:c8:b9:7c:b2:96:fc:69:89:e9:f8:86:f1:67:
1b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1B:8E:CE:05:57:FD:55:BB:AC:FA:4E:DF:E6:AE:C3:18:A5:BA:7B
X509v3 Authority Key Identifier:
keyid:AA:C5:34:99:FF:20:F0:35:CB:8B:1C:0A:A9:B7:7C:3D:7D:28:97:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:16:58:3f:62:03:a8:20:8f:dc:a7:7f:bd:9e:ae:02:08:3c:
a5:ae:c5:ad:b1:0c:a9:5a:06:4d:a2:2e:e0:5d:1c:05:29:37:
d3:47:c2:a1:98:a7:52:0a:17:2f:2b:b8:d4:5b:bf:cf:47:a0:
e4:d8:58:ae:c6:fa:7e:3c:79:8e:9c:c4:c4:8e:f3:11:22:b9:
e2:c8:ea:cc:8a:35:3f:5e:9e:3c:1c:a3:fc:d8:af:14:d8:0d:
4b:66:76:28:82:fd:87:64:cb:4a:db:84:1d:17:db:6b:24:e3:
e8:59:3f:52:d9:d0:c5:28:1d:ca:f0:28:6b:ea:1f:58:ec:be:
d1:e5:af:2d:90:77:a8:e6:3d:94:ef:ed:96:ba:40:91:57:24:
36:08:f9:52:31:81:ca:af:f2:c3:f4:77:8a:cd:11:4a:37:86:
ab:19:5c:bc:6f:66:38:01:2c:b1:b4:59:eb:48:56:11:60:d0:
3c:e8:90:36:5b:52:0e:5f:a8:f4:05:df:12:ef:3d:b7:77:56:
ea:4b:0f:fc:14:fb:35:c0:29:4f:4e:02:d1:ff:0e:60:94:f2:
22:ac:f8:90:58:62:58:29:3f:1f:20:37:13:38:82:36:8f:22:
cb:3c:c1:b4:65:dd:bf:87:ad:ec:97:cc:8e:a4:e1:90:13:d1:
ea:45:67:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:24:40 2025 by rpki-client