Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
File: _qJ-2VhOB8dA_utA17nlfMrF6VA.mft (raw, json)
Hash identifier: MyWBc+KdG1vKLr/NIo1aJcs16zJorZ6vzCns3KqQ0wg=
Subject key identifier: 23:CF:E3:54:31:6C:54:0B:CD:4D:42:54:E3:C8:A0:0A:94:59:B5:A2
Authority key identifier: FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50
Certificate issuer: /CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
Certificate serial: 0196895BEF7B047828019E5EB20433D1B80E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
Manifest number: 0F9B
Signing time: Thu 01 May 2025 01:00:25 +0000
Manifest this update: Thu 01 May 2025 01:00:25 +0000
Manifest next update: Fri 02 May 2025 01:00:25 +0000
Files and hashes: 1: 8Ua36sQPiROOdvji9D_u-a0zjio.roa (hash: D8ltqCdiAwJv/weW61AlTvYiDIAQY9oit7+M2ExP4Bs=)
2: _qJ-2VhOB8dA_utA17nlfMrF6VA.crl (hash: OW9OoMwQMVrHmUpCMT8SJc0Nox+SXPzD4Tk5uGH4AF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:5b:ef:7b:04:78:28:01:9e:5e:b2:04:33:d1:b8:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
Validity
Not Before: May 1 01:00:25 2025 GMT
Not After : May 2 01:00:25 2025 GMT
Subject: CN=23cfe354316c540bcd4d4254e3c8a00a9459b5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:44:dd:02:76:76:a1:f3:f9:6b:d6:9b:25:
7f:d1:cc:9d:e2:b7:b7:32:f4:b4:3d:6b:7e:83:ec:
71:cf:a1:94:46:6d:e4:63:41:74:ce:07:06:59:c6:
50:39:82:22:db:0a:c3:7a:c5:88:36:ed:a1:2e:28:
27:68:76:f5:34:97:a5:08:f8:80:02:a8:b2:0e:be:
86:10:08:4b:0a:cf:80:b5:b9:8b:53:1e:7e:55:c7:
69:99:bd:23:18:e6:31:fc:b5:45:62:b2:1f:6e:5c:
ec:cf:d4:6b:a9:4c:5f:02:4a:89:6c:9b:7f:63:86:
7a:06:2c:12:83:c2:80:fe:f3:0d:de:36:10:bf:52:
81:1d:d5:27:32:c1:92:5f:28:59:2d:97:06:cf:4c:
14:7b:3f:90:49:f6:28:e4:bf:8c:20:4b:8e:e2:98:
e7:3c:f3:36:01:12:b0:82:8e:c2:3f:df:fe:e5:a5:
53:4f:46:71:11:43:01:64:f7:80:81:6c:b3:b4:b6:
33:22:47:9e:33:1b:ca:3a:20:6a:6d:31:02:e9:84:
07:63:f1:b5:6c:2a:63:c0:af:59:ca:cb:28:2f:ad:
22:c6:3e:b5:fb:3c:87:36:4d:68:ba:c0:20:86:c1:
3f:65:c5:d9:30:56:fe:66:33:3a:1d:fa:b0:8f:5d:
44:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CF:E3:54:31:6C:54:0B:CD:4D:42:54:E3:C8:A0:0A:94:59:B5:A2
X509v3 Authority Key Identifier:
keyid:FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ff:c1:aa:8c:ba:d7:11:4b:2c:4b:49:a5:04:00:8c:07:68:
3a:43:44:7a:bc:a4:e4:1f:e0:c2:93:6e:29:7d:6c:8a:25:aa:
7c:a5:51:d1:a9:10:be:a4:40:ab:39:dc:a2:7e:b6:c0:45:b2:
be:4e:71:95:73:d9:d7:01:da:79:12:98:ab:d2:b9:2c:bd:fa:
ca:35:9e:14:c4:a3:ea:2a:47:38:f3:7f:22:4b:b2:3a:17:ad:
38:39:53:38:64:6f:25:e3:a7:b8:9e:b8:99:03:8c:b2:cd:93:
85:d1:87:ec:28:7c:1d:cc:2c:13:ad:c8:7f:5f:86:67:2e:66:
20:b8:ef:66:0e:7a:f9:be:67:5d:0d:61:bb:05:92:e9:92:97:
f1:18:cb:93:2b:b3:a6:84:0e:d3:68:fa:5a:5f:91:52:30:d5:
78:ae:a8:14:15:b3:18:2a:54:89:72:9c:8c:0a:26:c0:3a:ad:
75:e7:09:01:65:5d:3b:3c:8e:d6:fd:80:74:03:bb:b6:fb:9e:
06:fa:ff:48:f9:e7:32:e6:19:d8:b7:e4:7d:40:49:da:9c:17:
0a:ff:49:70:53:70:32:e0:5b:27:05:eb:2d:68:db:8d:bb:01:
40:1d:8b:b9:46:aa:6e:12:99:ec:cf:e5:5d:21:6d:c8:fd:86:
06:de:da:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:28:12 2025 by rpki-client