Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
File: qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft (raw, json)
Hash identifier: ps/zcerWiRlJG+77H3wErkJNr+8WHXNn0BIXfwNcwsE=
Subject key identifier: CD:A6:16:9F:06:1B:AC:17:BE:9E:F7:D2:8E:27:B6:5E:0D:57:37:21
Authority key identifier: A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
Certificate issuer: /CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Certificate serial: 019683FF033604EEC8A4C332AA723A1F2090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
Manifest number: 0BAB
Signing time: Wed 30 Apr 2025 00:00:49 +0000
Manifest this update: Wed 30 Apr 2025 00:00:49 +0000
Manifest next update: Thu 01 May 2025 00:00:49 +0000
Files and hashes: 1: O_hdcVHlxOZo_l-7xdIRhesWw_A.roa (hash: mfR5DtCjLIjJTqw++nVFAPPeJtIg5fCaC2S+CCvWR50=)
2: XwnrCE6pmPQ_ODmEcUdfJGretx8.roa (hash: 5lKgnXAmcufifa9qAWfP1aELwyqHVzg1TzDHW6nCY9c=)
3: qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl (hash: lt/dGOG0PW7XnilGo43pidwS5637uSmGaR5qVfSV7DU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:03:36:04:ee:c8:a4:c3:32:aa:72:3a:1f:20:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Validity
Not Before: Apr 30 00:00:49 2025 GMT
Not After : May 1 00:00:49 2025 GMT
Subject: CN=cda6169f061bac17be9ef7d28e27b65e0d573721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d1:62:44:e9:ef:75:36:3c:2b:30:74:98:25:
e9:38:f7:9d:b5:06:ea:18:b8:9e:88:f7:7a:35:fb:
62:60:75:ac:b5:89:0c:58:5f:50:35:b9:8d:d7:b1:
95:2e:c0:f2:78:79:cc:2f:f5:8f:1d:ab:b8:cf:9d:
32:8b:51:d0:c6:90:89:4e:60:04:1f:1f:14:61:df:
4d:08:8b:51:d6:9a:34:dc:f7:56:fc:0f:9f:c1:4d:
9f:b9:c9:94:e7:30:e3:2c:58:98:ab:9e:ec:9b:8c:
11:30:49:05:2d:19:30:3c:f7:e8:ea:26:d0:45:e8:
50:47:7e:e7:1a:3e:40:56:92:d7:7c:93:76:8a:82:
4e:98:57:ba:be:cd:53:c3:a7:f8:95:e0:92:98:ad:
0b:9a:87:17:37:0c:00:7e:b7:6f:7a:d9:19:02:50:
94:6f:76:63:33:02:51:cb:fe:9c:46:90:21:b3:ec:
d2:7e:b6:18:e8:63:05:2e:02:07:47:76:f4:77:a3:
6c:8e:f7:92:9b:69:d7:15:84:34:38:6b:21:a9:36:
6d:a8:39:28:07:32:40:4c:6f:d7:c5:4f:2c:cd:3a:
65:ac:36:ad:bb:b7:48:db:38:24:04:2a:a2:13:b2:
6f:45:ed:f7:08:9e:83:40:4d:f4:77:e8:0e:94:00:
62:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A6:16:9F:06:1B:AC:17:BE:9E:F7:D2:8E:27:B6:5E:0D:57:37:21
X509v3 Authority Key Identifier:
keyid:A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:cd:a2:f6:31:71:bb:72:c6:aa:80:d8:66:53:a2:47:f2:e0:
29:d6:05:93:34:f9:6c:19:e2:6d:bd:ce:93:11:c1:5f:84:c6:
5e:5a:18:49:e6:23:a8:53:40:c4:17:c2:ae:66:e5:11:e5:fd:
12:24:1c:4c:58:34:a2:c4:af:3b:68:95:ba:c2:f9:76:eb:1b:
39:fd:60:09:12:33:22:5d:a8:75:3e:8c:50:53:60:65:f8:2d:
cf:11:b6:38:eb:1c:d9:18:f9:64:48:49:81:2f:8f:80:0b:65:
38:e4:73:41:06:ff:e5:d6:d5:9e:d6:fc:e0:f6:92:db:a3:ba:
5b:44:37:31:47:ff:08:af:57:9d:a7:e2:a3:ef:0a:78:b4:24:
51:b9:a8:17:f0:75:83:b3:31:19:8e:ea:1f:7e:17:fb:58:a6:
ae:da:dc:e1:25:06:f8:00:42:6d:a1:89:1d:a8:51:b0:da:57:
9e:87:7d:4e:9c:6c:24:f6:8f:02:39:09:73:fa:05:bb:43:26:
5e:82:bf:f4:b2:70:6c:c4:c5:d1:83:c5:c9:50:4b:97:b4:cd:
7f:81:cd:f3:bc:23:17:52:0b:75:3a:0b:98:ab:40:a1:e6:8d:
67:79:10:de:99:5a:49:34:fd:f9:27:cd:17:e0:ae:06:97:a1:
ef:7e:66:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:26:16 2025 by rpki-client