Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.mft
File: qGBXhZ0WYOjYcpee5tamssQzowU.mft (raw, json)
Hash identifier: B43BZi7XpPlLddbpjnVOwaVffDALG9/Wt69hYRsklEs=
Subject key identifier: C7:C8:7A:D8:DB:A7:67:5B:DE:9B:F7:22:F4:42:DD:E5:ED:40:39:7C
Authority key identifier: A8:60:57:85:9D:16:60:E8:D8:72:97:9E:E6:D6:A6:B2:C4:33:A3:05
Certificate issuer: /CN=a86057859d1660e8d872979ee6d6a6b2c433a305
Certificate serial: 019695291F07D788A78FFCA1E7517D80165A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBXhZ0WYOjYcpee5tamssQzowU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.mft
Manifest number: 1522
Signing time: Sat 03 May 2025 08:00:22 +0000
Manifest this update: Sat 03 May 2025 08:00:22 +0000
Manifest next update: Sun 04 May 2025 08:00:22 +0000
Files and hashes: 1: PW17_Y421OHbEdWMpqGOAItDAMQ.roa (hash: L2gpot5aAwJ9/O+fD4LlOhf1tqLhMij+IcuFZyDR7dA=)
2: qGBXhZ0WYOjYcpee5tamssQzowU.crl (hash: ThUPRyix4urQksqNS50WMjP3WVgSEbkYqPGFCi/NXDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGBXhZ0WYOjYcpee5tamssQzowU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:29:1f:07:d7:88:a7:8f:fc:a1:e7:51:7d:80:16:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86057859d1660e8d872979ee6d6a6b2c433a305
Validity
Not Before: May 3 08:00:22 2025 GMT
Not After : May 4 08:00:22 2025 GMT
Subject: CN=c7c87ad8dba7675bde9bf722f442dde5ed40397c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:88:42:0e:45:a2:5b:75:97:fb:12:4a:89:2c:
d7:9b:ad:12:28:4f:42:6c:ff:cb:18:00:43:79:cf:
ec:09:7f:a6:5e:2d:d9:b8:fa:11:69:a2:6c:65:aa:
d7:f1:98:7d:0c:ca:c7:5c:ca:98:44:8b:d9:c5:8e:
c6:11:06:d2:54:b5:3c:48:14:81:cf:d0:c7:b7:f0:
18:4d:1a:c8:bc:33:c0:dc:71:ab:f2:d5:ba:f3:3a:
64:6b:9c:cf:9c:86:74:e0:36:88:53:57:be:1c:c2:
20:8f:23:69:0e:1d:06:92:50:02:56:de:6f:2a:c8:
02:0a:bd:73:db:13:d5:1a:fd:ed:7c:93:09:4e:7e:
a0:a2:07:23:98:6a:e6:1c:07:d6:21:8b:00:bb:cc:
d9:40:1c:df:34:1e:28:d7:c7:c4:f5:6d:fd:ce:52:
fe:0b:f2:4d:bf:d4:93:99:17:1c:9c:5b:cd:85:90:
b8:e5:8e:4f:ea:b8:97:79:ab:51:bf:82:40:53:e0:
58:0e:66:4f:2c:34:32:ae:5f:5e:ce:9e:a8:84:d1:
02:5a:92:36:86:88:dc:18:19:78:bc:a5:f6:11:51:
3b:8e:f6:f3:06:af:b9:d1:88:f4:8d:03:44:cf:43:
16:5a:bb:e0:f6:ab:c0:02:ad:4f:76:55:f7:24:9e:
49:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C8:7A:D8:DB:A7:67:5B:DE:9B:F7:22:F4:42:DD:E5:ED:40:39:7C
X509v3 Authority Key Identifier:
keyid:A8:60:57:85:9D:16:60:E8:D8:72:97:9E:E6:D6:A6:B2:C4:33:A3:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBXhZ0WYOjYcpee5tamssQzowU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:8b:a2:c1:db:b0:d8:21:ed:3c:83:3a:c8:56:35:bc:32:93:
d5:3f:bd:f4:cf:85:f9:f6:35:c9:09:e8:f7:4b:ea:c9:7b:e6:
7d:d1:05:37:70:63:d1:48:62:fc:0e:ac:2a:34:be:7d:90:e5:
58:e5:67:62:c3:0a:d5:d7:f4:1b:fa:d8:c9:66:61:84:63:b6:
76:1f:d4:92:4d:5e:14:66:9d:40:bf:42:0d:78:a0:55:02:b2:
46:ab:fd:7f:5c:fd:af:47:86:d1:c5:2e:be:25:7e:31:e9:77:
2a:2e:76:c8:ad:fc:62:9c:90:fc:b5:15:24:4e:12:ff:e1:e5:
3e:a8:8c:d9:1d:79:a5:48:b6:a3:e2:7d:79:bf:69:90:0b:4d:
a4:b1:d7:21:06:6a:e1:dc:cd:32:c2:78:90:b5:36:8b:17:83:
f3:41:56:c0:f7:dd:89:f7:0d:57:3a:d7:d2:81:07:d6:32:72:
08:70:77:53:e4:3a:27:ed:98:30:ee:38:57:52:be:12:07:5d:
43:f4:3e:ab:20:c7:ad:f7:87:06:c8:71:cf:ca:cd:25:57:ac:
12:62:9f:48:c6:17:5d:80:7e:ab:f3:e8:3d:f8:ff:f1:44:0b:
d2:3b:2b:31:b7:95:ce:7e:3b:7c:9e:8e:7b:89:97:23:fa:e4:
0f:67:18:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:38:30 2025 by rpki-client