Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
File: qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft (raw, json)
Hash identifier: 5tIMkmLkdGe3a7rh1+Q1A14M38IOmAaPS1og/Olk7Es=
Subject key identifier: 1E:F2:C0:EE:44:0E:67:4C:62:15:82:89:60:4B:71:E3:F6:55:28:09
Authority key identifier: A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
Certificate issuer: /CN=a9480cf18fd7859df9ad997940013a99b8dee374
Certificate serial: 01969295FF2E7237F3C094ACB308F6F98B12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
Manifest number: 151C
Signing time: Fri 02 May 2025 20:00:25 +0000
Manifest this update: Fri 02 May 2025 20:00:25 +0000
Manifest next update: Sat 03 May 2025 20:00:25 +0000
Files and hashes: 1: 1-498Z7vh8fq99O9xScVcy6k-waA.roa (hash: 5X65ydohKF6qHxzYtE3Ac9naZbToLy0QuSQ9mwUuJtg=)
2: YCaC2D8L5OtL6F6domigXArqF2c.roa (hash: 3VcxChRnU4HThrx+KUbxRb/2EVyI8+silVMvgGd2Xn0=)
3: qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl (hash: eiZUShftslhjbG2IrjuoxCttgiRWSUBdhilWj6g7Dms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:92:95:ff:2e:72:37:f3:c0:94:ac:b3:08:f6:f9:8b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9480cf18fd7859df9ad997940013a99b8dee374
Validity
Not Before: May 2 20:00:25 2025 GMT
Not After : May 3 20:00:25 2025 GMT
Subject: CN=1ef2c0ee440e674c62158289604b71e3f6552809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:76:c7:0c:61:38:a2:93:02:09:57:2b:aa:68:
45:20:82:41:93:3e:89:a7:91:4c:cc:4b:4b:23:0b:
b0:1c:ff:43:f1:8b:7e:73:6d:d1:41:00:5c:90:5e:
b5:01:5e:b3:d8:a2:62:a6:f4:f8:9e:3e:20:4f:9a:
2b:c2:50:c5:3b:59:ce:ef:59:b3:90:48:1a:fb:f5:
f5:2c:76:d8:2c:01:8b:c1:ba:7e:c3:6c:af:09:eb:
79:a1:2e:21:91:70:66:5f:74:76:77:e0:98:ec:a2:
76:22:5d:53:21:c7:cb:d8:c0:06:f4:54:c5:a1:b5:
4e:ba:01:34:06:2d:49:3f:59:02:e6:66:90:22:47:
c4:3c:0e:f9:bd:88:e0:cd:1d:13:49:1b:12:d4:56:
8b:71:75:28:98:f2:21:03:f1:80:f1:3b:0f:2f:a3:
e8:8b:51:e9:c5:8f:9e:9f:45:be:a8:27:0a:66:02:
45:3b:14:00:a6:b2:21:d1:94:7d:77:12:51:cd:39:
02:93:04:fe:fe:5e:c5:f4:a7:9c:81:d0:f1:60:b9:
3b:37:8d:09:d5:29:cb:c4:f1:c4:c5:76:b6:fc:f7:
de:af:b8:82:6a:82:b9:33:00:fe:c9:2e:cb:c3:3d:
fd:41:11:d3:d4:96:58:c2:ff:78:9a:e6:85:2c:08:
68:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F2:C0:EE:44:0E:67:4C:62:15:82:89:60:4B:71:E3:F6:55:28:09
X509v3 Authority Key Identifier:
keyid:A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:25:cb:91:34:5f:64:c2:82:2b:d9:d7:cf:28:56:a5:c3:87:
e9:36:2a:87:da:77:4d:1a:79:10:9e:71:fd:da:db:35:3e:cc:
0d:db:2c:d1:fe:ff:7e:4a:3e:1a:d1:31:ce:b6:dc:14:00:0a:
76:f1:15:c2:e3:02:81:12:cd:97:1d:a7:b1:b0:8b:5f:e5:71:
29:7f:83:96:06:3b:dd:3c:21:fd:b1:bb:e4:fd:ab:e1:b8:58:
f5:c7:cc:89:cd:f0:04:1c:20:52:18:04:64:14:b0:c3:76:e9:
9b:07:bf:ec:f2:3e:aa:c5:45:5c:a7:7e:83:17:f3:d3:1d:99:
14:15:0f:a8:1d:f7:6d:59:f4:60:de:13:e4:aa:87:9f:5d:c1:
64:cc:98:3b:3b:83:70:ed:99:79:cf:1f:e3:02:1d:1f:1d:80:
97:75:4a:61:dd:ee:be:a4:6a:91:ca:46:fc:55:4d:b4:77:07:
5a:e6:3f:09:54:1c:2f:26:49:6a:14:b4:2f:e4:3e:7b:5f:c3:
25:9a:30:22:48:30:fe:80:95:9d:82:d4:17:ae:af:a3:c4:f3:
ef:04:b5:06:f9:b7:14:a7:8f:37:52:7d:1d:88:f9:4c:22:57:
2e:4d:11:44:87:69:4e:c3:fe:32:23:2a:b5:77:67:6e:db:0a:
da:e1:e8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 02:36:34 2025 by rpki-client