Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
File: rqAyAc2mqK295P6ARuxl-WrGqWw.mft (raw, json)
Hash identifier: jUiPSBORxEtqQhMFjYI9+YmB1484BqMHNbvBnz4CsM0=
Subject key identifier: 3F:FF:FA:42:9C:DF:95:42:92:B6:A2:3C:66:78:20:04:45:FF:D7:42
Authority key identifier: AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
Certificate issuer: /CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Certificate serial: 0196507F059C072B4F55ADCA800C17DEC99B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
Manifest number: 52
Signing time: Sun 20 Apr 2025 00:00:23 +0000
Manifest this update: Sun 20 Apr 2025 00:00:23 +0000
Manifest next update: Mon 21 Apr 2025 00:00:23 +0000
Files and hashes: 1: OHSgHk7806-Y3EiMMODqh70dnpA.roa (hash: dwELo2G8zKa9A3mOV9vawf+jeFFyKXxpSg3LwUytDM8=)
2: ZfKmgCC5shqdiJ4oG4WQU2IlAJs.roa (hash: xPdeleCRUgq2S3wQBazj5FbP5YRWDoq9gRuAfQMqJJU=)
3: rqAyAc2mqK295P6ARuxl-WrGqWw.crl (hash: d9Z1D3C9YtSCRVCUHX8/AVX8ulsYmOdGTRIOTdsGaiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7f:05:9c:07:2b:4f:55:ad:ca:80:0c:17:de:c9:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Validity
Not Before: Apr 20 00:00:23 2025 GMT
Not After : Apr 21 00:00:23 2025 GMT
Subject: CN=3ffffa429cdf954292b6a23c6678200445ffd742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:89:1e:34:09:48:d1:fc:8d:44:43:e7:b4:43:
48:94:cf:e0:7e:93:fc:5e:0f:22:9a:9c:05:68:62:
90:a0:7c:6d:34:79:66:eb:e1:1c:94:ed:50:0d:fa:
0f:d2:a1:26:79:50:dd:d6:75:b1:88:82:88:58:e6:
ce:20:4f:da:a2:e8:25:0e:42:ab:80:33:f7:d1:af:
1f:65:5d:04:bb:29:8e:71:ff:9f:44:97:22:85:db:
23:1e:36:5c:d7:b3:a3:1c:e9:c1:73:45:db:9f:fd:
bb:bf:20:7a:ab:79:2f:e7:0c:9f:26:e0:74:91:f2:
6e:ca:45:2c:fd:19:ac:c5:10:25:15:63:1b:4e:f2:
f8:e3:e7:a9:5e:b1:19:e9:48:19:97:83:a2:ab:72:
96:a3:1f:0b:0a:ec:44:07:5a:4d:40:64:9c:fb:e9:
9f:e2:df:70:3b:bd:36:97:1c:d5:41:8d:e1:69:60:
e8:e1:7e:63:46:0a:21:3b:ec:f2:02:5a:c8:a7:97:
50:98:11:a7:a2:a3:ec:37:3a:37:62:cf:1b:ab:c2:
96:a4:e0:5c:f4:7a:f1:5f:f8:6d:08:64:b5:10:19:
7b:a9:49:e2:57:dc:f9:3b:ea:a1:16:31:eb:2c:b6:
e3:1f:1a:02:fa:f5:93:7d:93:7a:46:a5:28:6a:fd:
c6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FF:FA:42:9C:DF:95:42:92:B6:A2:3C:66:78:20:04:45:FF:D7:42
X509v3 Authority Key Identifier:
keyid:AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:74:1c:c3:22:0c:bf:6c:76:25:14:6c:40:53:a6:31:60:8a:
3e:5b:1d:d1:4e:86:b0:56:62:f6:29:e3:7e:7e:59:c2:57:01:
9a:47:99:82:ad:6e:93:a8:70:5f:03:6b:95:d7:31:58:39:09:
02:3f:0e:f7:2d:6e:26:98:47:87:ad:3a:95:11:ca:7c:2f:d7:
09:35:0d:94:98:57:a6:a2:36:06:a3:09:3d:18:9a:f7:4f:37:
98:5a:8f:3e:36:f0:8c:ee:d8:4f:1f:a9:ad:57:31:2e:fb:e0:
cc:03:52:53:f0:35:51:6c:1f:12:06:7a:27:9d:72:88:55:96:
1f:53:9c:de:63:bb:8c:3b:bb:88:6b:3b:3f:8c:e0:8d:71:38:
b4:c6:d5:e2:5c:e5:1e:fc:96:0d:3a:40:4f:5e:78:0b:59:d5:
15:89:26:7b:f1:b7:dc:55:b0:e5:de:ae:d3:ff:40:07:62:da:
fd:23:e3:35:9c:2f:e2:a5:27:31:7e:1e:4c:6b:30:f6:0b:26:
92:99:e8:16:dd:83:28:06:7f:19:07:bf:1a:25:ed:d9:c5:d1:
79:09:38:bf:19:48:4a:4c:ab:41:a4:69:7b:0b:49:71:76:1a:
da:c8:d2:8b:ab:4e:28:ab:b4:cc:f7:96:23:47:11:24:89:13:
6f:ca:da:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:03:13 2025 by rpki-client