Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
File: qs5nJaCg3dFoBICoN4XSzVe_arA.mft (raw, json)
Hash identifier: Qr4P8EncgZM1pDvO2XouVbBE+1VwRfUD953pfeqGYCU=
Subject key identifier: FB:FB:8F:A3:32:A1:3A:D0:47:B3:17:99:EA:88:6D:50:C8:43:99:B5
Authority key identifier: AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0
Certificate issuer: /CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
Certificate serial: 0196591485126A71724B4E78800A17B10D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
Manifest number: 093F
Signing time: Mon 21 Apr 2025 16:00:39 +0000
Manifest this update: Mon 21 Apr 2025 16:00:39 +0000
Manifest next update: Tue 22 Apr 2025 16:00:39 +0000
Files and hashes: 1: LGoIVCfyeg-EZH_cOgrdiy2TPwk.roa (hash: dGCLqqCykyXwmqrTu57eC+iNpUcOeyFsBoySlkBpsAY=)
2: f00necdCYsOtLA09vtcvA-KOmsA.roa (hash: Ln1z19NPMKA7PbsbJsMQ04rbx28+DicO/rDcVFYN3W8=)
3: qs5nJaCg3dFoBICoN4XSzVe_arA.crl (hash: q0Sr3TMa8P6nV0w64hJDCdQ+eJRvG7RnunZEd/XDIHY=)
4: tPirfcovOkq_f6ORw4qTDcBMYwM.roa (hash: YI04iLKTA2ElngcnawjReFNoZnCJvny+G11HRulhdOo=)
5: wCVsvqWRahQ-a8qZpU_P5hfC6fo.roa (hash: zXnXIwQPC/ukVsvs/CWHd4opckhB/IeyNk2RyXjvBzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:85:12:6a:71:72:4b:4e:78:80:0a:17:b1:0d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
Validity
Not Before: Apr 21 16:00:39 2025 GMT
Not After : Apr 22 16:00:39 2025 GMT
Subject: CN=fbfb8fa332a13ad047b31799ea886d50c84399b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c9:15:98:92:38:91:d0:19:98:25:c0:bf:2f:
cb:31:f7:d0:b4:14:44:5e:25:f1:8e:b5:74:fd:75:
78:15:e1:71:05:dc:81:0c:9c:bd:2a:3a:aa:10:fd:
84:30:e3:02:84:21:1d:50:7d:9a:fd:5a:76:d4:4e:
52:77:02:f8:41:38:25:84:7d:07:4e:b3:0d:be:83:
b8:03:49:e2:e7:39:41:0c:28:6c:b3:4c:93:4b:03:
95:b6:ba:77:e7:fd:56:5a:ac:7c:5e:fc:66:4f:8a:
b4:fc:ad:33:f4:14:73:3c:e2:68:83:7d:53:f4:75:
89:01:04:66:47:7c:66:8a:29:f6:c9:04:fa:06:2a:
d6:8b:44:a1:a9:fc:91:f9:a6:e7:93:91:73:69:c7:
2b:d2:91:00:a5:70:65:59:8f:10:59:da:b9:d7:6d:
24:70:ea:13:06:70:79:c9:df:99:0d:60:74:ea:74:
3b:01:9d:f8:98:c0:66:41:46:60:59:9e:93:03:51:
97:4f:01:42:8a:eb:22:70:45:e6:71:67:35:92:8a:
9d:b7:94:4b:58:7a:11:16:52:93:8a:35:85:3f:05:
78:07:20:04:0e:e3:ba:75:ea:59:eb:06:01:90:f8:
8c:2c:d6:ee:35:13:d3:49:b0:6c:0b:66:a0:7d:9e:
f1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FB:8F:A3:32:A1:3A:D0:47:B3:17:99:EA:88:6D:50:C8:43:99:B5
X509v3 Authority Key Identifier:
keyid:AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9a:d9:8b:bc:ca:44:bd:30:f8:43:07:17:d6:ac:98:29:bf:
36:ad:3a:ed:9a:f9:ed:a3:9a:c0:f6:13:07:84:a3:c3:1e:35:
15:c6:5c:76:06:33:9b:ac:41:8f:1d:a0:b5:1f:9c:3d:96:4d:
fe:72:6a:7c:b9:5b:05:75:3f:38:ed:23:b4:2a:03:79:4b:b3:
61:33:0c:55:21:4e:92:c6:fb:3e:76:b0:9a:c5:23:54:9f:7c:
a9:eb:f0:a5:9d:12:bd:da:3e:a2:85:fb:32:35:2e:1e:84:fe:
74:ef:87:eb:b9:b7:a7:9e:29:8e:0a:19:9c:c0:ab:0a:15:2e:
1b:23:d2:b1:e8:b7:80:cd:2a:61:62:8c:5f:75:4d:17:f5:0a:
84:14:5f:51:bf:df:50:f9:6a:4b:ba:d3:25:af:01:a2:42:0e:
05:e6:f6:0a:7d:92:7e:e7:b7:ca:17:4f:47:c3:bb:06:f7:fb:
6d:f3:42:27:d9:d3:0a:d8:fd:a5:9c:1a:28:1a:a9:9e:9d:1f:
55:cf:e1:12:e1:30:08:18:5f:a1:c6:e2:b1:e2:b2:48:30:3d:
da:7e:8a:ac:9e:22:fd:c2:91:0d:e4:86:c9:be:73:de:34:c5:
42:1b:4a:9a:75:72:de:1c:88:3a:de:45:b2:62:d3:30:f4:7d:
76:7a:06:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:05:07 2025 by rpki-client