Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
File: qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft (raw, json)
Hash identifier: pKyGagau6JiOr17Hrdkb091XMAnkznr3NNZzy3armJ0=
Subject key identifier: 5E:AA:FF:82:27:EB:2C:22:82:53:DF:23:6C:51:E0:99:F7:5A:CD:88
Authority key identifier: A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
Certificate issuer: /CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Certificate serial: 019680C6BEF25B00B5C885840B555525E0A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
Manifest number: 0A54
Signing time: Tue 29 Apr 2025 09:00:30 +0000
Manifest this update: Tue 29 Apr 2025 09:00:30 +0000
Manifest next update: Wed 30 Apr 2025 09:00:30 +0000
Files and hashes: 1: eZOZdw0xvypBF51rN4RfpY5h6vA.roa (hash: Rrqkszl7rnzrAJTcRtFLjvZXJPc9ZovjcSYFWUvutzY=)
2: hefvQQC5HBlbQ-EPV5xNwJ9mr8s.roa (hash: Ud9jnh2NMlpw3d8NsGfrdGK8oljkEFrFbqnJTHG6eJE=)
3: qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl (hash: lF/LfV2m0Qzg09QagUITa5RcbG+/wiQBe7sBKB++dtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:c6:be:f2:5b:00:b5:c8:85:84:0b:55:55:25:e0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Validity
Not Before: Apr 29 09:00:30 2025 GMT
Not After : Apr 30 09:00:30 2025 GMT
Subject: CN=5eaaff8227eb2c228253df236c51e099f75acd88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7f:76:a1:6e:02:98:1e:e4:db:9c:8f:1c:99:
76:5f:3b:32:b3:cb:29:ab:8a:45:db:7b:de:a6:27:
35:7c:81:5a:09:9d:8d:98:87:33:b1:3d:b9:16:f0:
f2:25:ab:b1:44:3b:b6:36:45:b7:5a:8d:2d:ca:be:
fe:ac:89:46:8b:59:c1:5b:81:15:e9:de:fb:25:e8:
bc:e0:ac:bf:ea:7d:08:16:8e:75:ab:d8:d4:9f:0a:
7c:6b:9f:2d:77:e5:c1:f7:1a:0e:9f:38:22:37:0e:
40:47:be:79:85:54:2f:26:2d:ff:62:75:e0:63:38:
7f:9a:41:50:76:70:cd:cf:0c:6b:b9:9a:de:39:dd:
a6:2f:ae:e4:b7:19:fc:be:07:97:d3:a4:b2:93:0f:
6c:a4:c1:a6:e7:bb:df:d2:c1:b0:5f:a1:b0:f4:06:
39:96:99:07:a5:84:21:dd:14:b4:57:10:4d:2b:4c:
9e:42:73:f7:7d:99:61:77:74:f8:79:27:2d:ea:11:
5a:d2:bf:60:23:39:a0:e9:29:1b:23:c8:4c:38:07:
f4:ca:4f:e3:a7:d8:14:43:43:be:0d:08:bf:e1:64:
49:3f:b7:b8:66:b4:33:49:3a:3b:c0:4b:c3:f1:86:
26:01:7e:53:90:46:7b:9b:32:40:80:22:42:d6:cf:
65:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AA:FF:82:27:EB:2C:22:82:53:DF:23:6C:51:E0:99:F7:5A:CD:88
X509v3 Authority Key Identifier:
keyid:A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:13:35:93:f8:f8:3f:29:72:40:93:ae:47:85:2f:70:09:2d:
82:cb:0c:12:1f:d9:1c:14:1d:78:62:8a:af:ea:02:1c:42:80:
c6:93:a6:c4:02:1d:27:f7:e2:ec:14:19:d8:5d:8f:74:cc:11:
21:23:f6:fd:62:51:a0:28:47:95:17:2e:50:71:58:fa:05:62:
40:5c:e5:40:26:dc:53:d4:33:d5:bc:93:2e:c2:2a:fa:f9:8f:
ec:4d:5f:24:44:67:d7:16:08:b2:7c:42:1f:31:61:84:0f:e4:
b0:3d:a0:f1:9a:85:5c:09:c5:c7:dd:1e:1f:e0:26:bc:5e:af:
4f:3d:a1:44:8b:44:ba:fb:73:bf:c9:f3:b8:b7:29:28:b5:47:
4c:b4:99:94:1b:b0:55:89:9c:a5:6c:fd:5a:b9:20:a5:9d:f0:
58:9a:49:a3:e6:28:18:55:61:fa:b9:af:ab:52:0a:3a:1e:98:
11:f3:32:a6:be:cb:ea:f4:c9:10:75:86:29:6a:48:6c:b3:09:
ba:75:6f:87:b5:f6:8b:56:7e:c9:74:9a:be:55:46:8f:f4:f7:
35:37:cf:de:55:3f:9f:77:4f:7a:5a:cb:86:64:c7:18:85:36:
fc:d2:c2:16:6d:1f:fd:f3:fd:61:a6:dd:be:ba:b6:9f:f6:32:
0c:cb:c9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:14:40 2025 by rpki-client