Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
File: qipYxpehRJl2sNEdbxJgJeFAicY.mft (raw, json)
Hash identifier: iH/4W+OVKb9t7fd69KTjmk6Qbxpwo0trB3lizRhsefo=
Subject key identifier: A9:AE:EC:DA:E0:7E:02:15:70:A8:23:E5:D6:3A:38:78:CD:3A:8D:A6
Authority key identifier: AA:2A:58:C6:97:A1:44:99:76:B0:D1:1D:6F:12:60:25:E1:40:89:C6
Certificate issuer: /CN=aa2a58c697a1449976b0d11d6f126025e14089c6
Certificate serial: 01968EF00DFA3F8A45D6D3E9F5B2FCA824F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
Manifest number: 151B
Signing time: Fri 02 May 2025 03:00:18 +0000
Manifest this update: Fri 02 May 2025 03:00:18 +0000
Manifest next update: Sat 03 May 2025 03:00:18 +0000
Files and hashes: 1: VAOvYC0rpjyTuLuRBfTKmUOuh7I.roa (hash: 0vjmq1kF1TMQbQcMXUeFVD45hSzNPAtogdVXVCWqxwQ=)
2: iBm_nleUbu7zG2yhTM8e6MdS9CM.roa (hash: 6E9IJHdRNDgzTSIdwSFE5QhmL7tpMyjTB0okAPytvXs=)
3: qipYxpehRJl2sNEdbxJgJeFAicY.crl (hash: 12TksxyM5y30bDc3kYVpBdgeAKvAmo8ujvAG9jyteCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:f0:0d:fa:3f:8a:45:d6:d3:e9:f5:b2:fc:a8:24:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa2a58c697a1449976b0d11d6f126025e14089c6
Validity
Not Before: May 2 03:00:18 2025 GMT
Not After : May 3 03:00:18 2025 GMT
Subject: CN=a9aeecdae07e021570a823e5d63a3878cd3a8da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:f0:e1:43:fa:e6:fa:f6:77:95:3e:9f:85:
95:1c:ab:ff:f0:a5:3d:c3:fa:ae:72:81:58:43:13:
84:b2:50:56:bd:1e:44:54:b3:22:6d:c1:7a:69:67:
91:6d:89:00:81:96:cd:2f:0d:f8:af:00:10:55:7b:
9a:0d:a5:94:da:64:c6:cc:e1:f2:51:9b:cc:09:32:
31:e3:cf:64:44:0d:c6:40:9c:7a:8a:5b:f7:c1:ba:
73:f6:55:93:fd:d2:f7:40:4c:3f:f6:b8:4d:46:cd:
0e:2c:47:ce:15:80:79:1b:ec:92:22:2d:8c:a0:70:
1f:a0:2d:16:4e:8b:3a:69:37:4f:00:33:02:1c:de:
f2:11:b7:af:3c:85:90:85:c6:7d:9c:61:9c:52:f4:
af:b0:f8:96:1e:d1:37:3d:8c:10:50:9d:4d:23:b3:
4c:29:a2:ed:d3:28:ac:07:df:b1:54:dc:58:ab:83:
bf:4b:94:50:9f:03:00:77:29:cd:ed:4c:c3:e3:4e:
57:a4:b6:f7:29:c4:7a:ee:7f:d3:5c:13:4b:9d:95:
df:7a:8d:d5:d5:11:5e:4b:60:c0:3f:ff:7e:c9:13:
ef:b8:6b:f9:10:a6:b6:3f:5b:ec:39:1e:a3:f5:20:
f0:f1:1c:65:3f:7c:60:3c:0b:2c:33:c1:d7:59:f6:
47:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AE:EC:DA:E0:7E:02:15:70:A8:23:E5:D6:3A:38:78:CD:3A:8D:A6
X509v3 Authority Key Identifier:
keyid:AA:2A:58:C6:97:A1:44:99:76:B0:D1:1D:6F:12:60:25:E1:40:89:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b2:cf:47:5d:85:4e:16:20:fd:11:0e:03:72:09:ba:49:ee:
2c:a1:62:8a:53:21:b4:ce:6b:68:14:fe:b1:5f:58:39:4f:cc:
d9:77:b2:7a:c9:f6:80:a5:71:3d:ee:c6:96:2d:6c:52:cd:9e:
21:f4:a9:b7:41:89:ef:7d:fe:6b:f2:e8:64:27:c9:db:fa:ca:
c4:1a:94:f2:f1:31:53:b9:62:8f:e1:21:84:78:0c:a5:5c:8f:
3c:58:cb:17:c5:91:b7:cc:ef:9f:02:28:b5:fa:a0:a1:73:3d:
ec:59:b5:14:b7:cc:d0:2b:cf:0c:51:7d:90:ba:06:e3:38:ea:
ea:78:f9:83:1e:ab:d6:04:23:a9:06:f1:85:93:0f:8d:ef:9a:
65:9c:15:78:54:cd:61:55:9c:cf:f6:a8:9b:e2:ad:34:4d:34:
0f:7a:f0:7c:74:18:d3:2a:f6:37:c9:25:ec:c6:e6:84:a9:8c:
9b:2d:f6:d6:76:99:e0:16:ed:2d:37:8e:f0:00:da:0d:4d:f0:
96:49:68:45:0e:e0:78:6f:fa:fd:7a:90:48:84:1e:83:a1:09:
7b:38:77:a9:0a:90:13:9e:21:41:10:cb:ac:a4:d1:96:50:82:
30:37:c1:5a:0f:7b:03:83:e8:c8:82:3e:e9:82:a9:24:d6:b7:
bc:7e:41:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:07:35 2025 by rpki-client