Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
File: q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft (raw, json)
Hash identifier: uFyalOlowIB8bhT3yPz1R0s9N8g2K9UhuUSEqgcIRBI=
Subject key identifier: C6:5B:99:7F:28:DE:92:06:66:E8:CC:77:A6:A3:49:10:0C:09:7B:7D
Authority key identifier: AB:F5:87:57:1C:0C:69:84:58:C3:85:B1:5D:60:C7:F0:8C:70:B6:FE
Certificate issuer: /CN=abf587571c0c698458c385b15d60c7f08c70b6fe
Certificate serial: 019682B51748344457BECF3CFE284CCCD4CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
Manifest number: 0899
Signing time: Tue 29 Apr 2025 18:00:27 +0000
Manifest this update: Tue 29 Apr 2025 18:00:27 +0000
Manifest next update: Wed 30 Apr 2025 18:00:27 +0000
Files and hashes: 1: J83vR5DpFwQeOzZ3QWcMbb8635o.roa (hash: iKjeQjYNy9qFyGrhW5tTdYxo05LYCK/XsNtUNF1Tfbg=)
2: q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl (hash: ZHOLPGkwyimEIxVWxBsR1wVhSs22vzuG0OuHOVH+2qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b5:17:48:34:44:57:be:cf:3c:fe:28:4c:cc:d4:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf587571c0c698458c385b15d60c7f08c70b6fe
Validity
Not Before: Apr 29 18:00:27 2025 GMT
Not After : Apr 30 18:00:27 2025 GMT
Subject: CN=c65b997f28de920666e8cc77a6a349100c097b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:60:12:8b:55:14:e4:63:47:76:34:53:bc:68:
0b:0b:35:79:e1:9d:1d:a7:ac:88:9c:a5:8e:d6:e2:
80:c8:55:e9:6a:64:c9:6f:7d:9e:dc:96:8d:65:19:
43:59:8a:08:a3:9f:2b:7f:38:e4:5a:f5:c3:82:d9:
1e:7c:71:36:e1:93:9b:9c:89:d9:21:05:aa:90:60:
42:7a:ba:0d:ef:9c:6e:bf:26:9a:fb:ce:ab:b9:88:
d1:bd:97:ea:49:64:c9:47:a5:d4:1a:4c:c8:68:47:
c1:4f:99:2e:bc:73:41:6f:8a:85:2a:86:25:8d:d6:
fd:49:fd:b5:9b:7c:fc:66:dd:94:4f:c7:02:91:b8:
68:2b:35:a9:8d:09:fc:ab:38:b8:be:d4:d2:48:f6:
23:26:50:67:94:68:49:a5:6d:83:2a:46:97:51:08:
72:dc:e7:8a:53:64:fe:ad:2c:40:02:df:04:01:12:
d0:e8:48:56:a7:fd:84:c8:20:ba:ea:e7:0c:d0:6e:
28:cf:8c:3e:49:85:57:bf:ee:8b:56:fe:18:d7:aa:
33:46:9d:99:ca:31:8b:7c:8f:6d:ea:5e:8e:7d:03:
47:05:50:6e:e8:a1:dd:4a:79:53:31:f0:53:5c:8e:
90:fd:27:d0:8a:a6:e4:70:cb:1b:e6:cd:b0:76:0b:
79:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5B:99:7F:28:DE:92:06:66:E8:CC:77:A6:A3:49:10:0C:09:7B:7D
X509v3 Authority Key Identifier:
keyid:AB:F5:87:57:1C:0C:69:84:58:C3:85:B1:5D:60:C7:F0:8C:70:B6:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:04:83:3e:f6:1b:9f:f5:bc:5b:c2:6d:68:72:76:50:83:0c:
9c:27:fe:c7:9c:f0:91:fd:70:e5:68:c8:1f:37:19:d1:87:ce:
0d:42:31:00:c5:db:ab:f9:82:5f:c4:cb:77:f6:51:17:e5:dc:
44:7c:4f:4a:a9:dc:6c:ee:1d:b3:ed:53:3c:69:fc:08:99:9c:
3d:c0:92:74:cc:1f:81:74:52:d0:b5:87:e5:36:bb:8d:61:7e:
36:6f:c6:77:bc:e7:99:eb:f8:59:94:97:86:b6:0e:0e:42:4c:
2e:a0:b0:49:fe:34:65:4e:41:e6:8a:7b:e8:73:cf:49:4d:77:
64:72:01:42:04:4c:12:7d:f3:1a:97:7d:92:e7:1f:48:22:ed:
c4:fa:46:06:3a:0a:e0:3a:60:90:5d:12:67:a3:88:f2:1a:68:
7c:38:ad:42:5d:4b:5b:80:63:9e:bf:c3:d0:e5:d1:b5:a3:fa:
d4:06:7b:73:e6:a4:bc:5a:81:e1:3e:43:a3:05:7e:d0:57:c3:
de:a6:89:0b:4e:66:71:a2:44:9a:75:bb:46:11:36:b0:ca:52:
fa:aa:16:c9:93:a0:d4:4c:ed:63:82:fe:7a:7e:56:14:de:2a:
8e:46:f0:84:47:83:56:2d:62:0b:45:6f:36:d5:7e:80:4c:df:
8f:9d:77:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:53:43 2025 by rpki-client