Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
File: qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft (raw, json)
Hash identifier: qiO69XYmdpcIcF5y8tXurHa7UqkCNf4gQ2QUMXxQEYE=
Subject key identifier: 98:83:90:BB:E7:DF:01:EC:85:2E:62:34:92:2C:5D:D4:B3:FD:CD:80
Authority key identifier: A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97
Certificate issuer: /CN=a953f1b8e2965fd0387810a2f62cf714816d1497
Certificate serial: 0196A72F5D65E10B986A474C6D1B66B7D849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
Manifest number: 2B
Signing time: Tue 06 May 2025 20:00:21 +0000
Manifest this update: Tue 06 May 2025 20:00:21 +0000
Manifest next update: Wed 07 May 2025 20:00:21 +0000
Files and hashes: 1: 9WCFSNeq3GtWGYrTEMgi1QZ4iF8.roa (hash: i8Np1BwcEIXM1Wv7P+uy0k4NCLXiOZxbaT5Q37bgBvA=)
2: YRj1iGRVMCy4RNf6mBvaYvGJnIA.roa (hash: Jm8MJr8XSRnuve3Kq6+Wn+2PsgepRbJEnsM8Cooldhs=)
3: qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl (hash: eGZSxy0P7OoR/Zy/p4dXJWW8EBKIeVzHQtt9HBFsBMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 20:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:2f:5d:65:e1:0b:98:6a:47:4c:6d:1b:66:b7:d8:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a953f1b8e2965fd0387810a2f62cf714816d1497
Validity
Not Before: May 6 20:00:21 2025 GMT
Not After : May 7 20:00:21 2025 GMT
Subject: CN=988390bbe7df01ec852e6234922c5dd4b3fdcd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ad:14:56:1d:41:18:b8:2a:0b:34:62:a4:b3:
5a:6e:5f:d9:94:60:5c:a8:9e:c3:4b:d2:b3:c7:d9:
99:56:eb:34:8c:35:5e:0f:e3:7d:cb:06:c6:45:bb:
92:7f:c2:ce:84:87:99:cb:8c:31:56:9c:1d:ea:d8:
09:69:8b:33:33:01:b1:08:b2:fc:7c:2f:e6:be:2b:
9f:15:fe:52:ee:99:94:9d:c4:1f:b8:c6:77:c8:c7:
7f:31:27:f7:16:37:93:8b:bf:af:0d:ea:9c:f3:cf:
9e:c7:dd:56:38:c7:26:6c:85:8c:d4:70:21:b3:97:
a2:1f:3c:53:88:6e:da:ad:a1:7e:fb:1c:77:d1:fc:
d0:25:d2:b8:3c:c7:18:15:a1:99:72:44:97:db:fe:
02:0e:b8:66:24:6e:1b:30:cd:c9:03:b1:29:d2:1d:
d4:0b:ed:65:99:3a:1e:42:ab:1f:6e:19:39:86:cf:
94:c4:be:83:ea:d8:fd:71:9d:41:5b:45:33:d2:07:
70:76:d8:60:10:51:6c:03:15:27:9e:08:4c:45:c2:
d8:85:91:09:c4:16:6e:1d:df:c9:74:6d:76:3b:36:
9a:af:07:23:dc:c1:63:74:72:9f:2f:06:81:48:65:
4b:ae:dd:28:4a:03:1e:27:1b:41:12:f8:df:6d:0c:
5f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:83:90:BB:E7:DF:01:EC:85:2E:62:34:92:2C:5D:D4:B3:FD:CD:80
X509v3 Authority Key Identifier:
keyid:A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:59:7b:1d:6f:a4:90:13:92:aa:e6:11:b6:28:d7:27:78:f3:
d4:29:46:f2:b5:51:80:db:a2:b9:dc:51:d8:c3:50:7c:33:f1:
94:93:9e:ae:5b:de:7c:7c:48:53:fe:0b:00:fb:44:71:95:86:
c5:51:ef:5c:4d:f5:22:a5:44:98:f6:f8:df:eb:51:38:55:30:
b6:ba:dc:79:76:50:f1:47:9a:c9:2d:4b:c0:23:87:a6:2a:80:
aa:49:ac:a7:98:cc:d6:6b:85:94:4c:80:9d:91:92:25:83:5e:
44:c4:60:13:bb:cc:f4:cf:76:c8:61:15:6e:57:bc:8f:d9:f4:
fd:d7:80:4e:61:ee:aa:3f:c5:d9:a6:ef:86:01:37:9c:a2:6f:
82:3d:62:22:41:02:70:43:93:a3:ce:8f:66:eb:e5:04:82:72:
83:96:d2:38:62:40:68:b1:e8:f1:5f:a5:cd:d3:ae:7c:5d:12:
36:be:21:f7:6a:40:7e:e9:27:ba:08:44:85:9d:60:23:c8:a0:
3c:bf:3c:71:f3:cc:57:a6:84:1d:43:81:c4:bf:11:4b:86:da:
c6:84:e2:c3:0e:d4:b1:58:ae:ce:8f:21:41:de:c1:1a:ba:a9:
fa:92:a1:47:7e:e4:8a:c8:80:2c:b1:5b:0d:11:9a:cc:85:0f:
5c:ee:fd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 04:11:18 2025 by rpki-client