Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
File: qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft (raw, json)
Hash identifier: jXm4kw36a5NdBH9vZ1q4AGVmam/EiFziX3S1/t2pzTg=
Subject key identifier: 57:C5:13:24:49:B1:8A:9A:5D:30:DE:7F:0E:37:F9:DC:3E:33:D9:14
Authority key identifier: A9:BE:16:CE:7D:B3:BE:69:05:B1:AB:EF:8B:E2:1A:23:19:B0:E4:3E
Certificate issuer: /CN=a9be16ce7db3be6905b1abef8be21a2319b0e43e
Certificate serial: 01967AFBE3EDC7E0103BF283642A44549338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 06:00:50 +0000
Manifest this update: Mon 28 Apr 2025 06:00:50 +0000
Manifest next update: Tue 29 Apr 2025 06:00:50 +0000
Files and hashes: 1: 1qwW0uRF0uaIMOZUzvFdP6iUIGc.roa (hash: XnlKdK7HSE5Z4YnaNQLgBs+MxP6gmaSDYHLIExtRWFg=)
2: qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl (hash: efoT9azsNUCi464f14TUkJJOeUmr95oHLdfsZT4E8y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:fb:e3:ed:c7:e0:10:3b:f2:83:64:2a:44:54:93:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9be16ce7db3be6905b1abef8be21a2319b0e43e
Validity
Not Before: Apr 28 06:00:50 2025 GMT
Not After : Apr 29 06:00:50 2025 GMT
Subject: CN=57c5132449b18a9a5d30de7f0e37f9dc3e33d914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:98:3c:25:53:e8:cf:4e:bb:e3:0b:a0:d8:64:
39:28:21:6f:6c:78:6d:ab:55:c0:92:fa:a0:38:0f:
9d:f8:e4:f6:e5:0b:87:f4:39:ac:0b:af:65:fe:f9:
02:50:5a:c5:50:0f:c6:97:f0:33:56:41:ef:a8:f2:
bb:96:e0:93:de:ed:c4:70:bc:7e:81:26:be:50:0c:
ce:b4:ef:8d:5d:26:59:36:9f:c3:32:d3:7a:93:22:
82:f7:c9:20:d1:c5:a4:f5:2a:74:a1:d3:60:82:30:
40:18:e3:6f:35:b9:57:e8:ae:22:32:bd:d5:a7:67:
5c:f5:60:10:4e:eb:9d:06:7d:ba:5c:fc:52:6c:96:
66:39:bc:17:b5:00:29:e8:fa:2a:56:cd:0c:95:1f:
f2:9b:1e:e2:d5:f9:44:21:13:00:d0:77:35:83:5a:
e8:4b:25:b1:9f:72:33:18:f9:6b:a7:87:2b:8a:33:
77:8e:0b:85:5f:f8:63:4c:77:21:63:a3:2a:ab:35:
fb:99:a9:99:0b:4b:50:44:00:25:40:54:45:b8:9d:
31:16:9d:66:74:1c:02:ea:69:68:4d:0c:90:8c:b0:
27:99:d1:a6:80:6a:41:95:fc:d3:7e:cf:de:75:be:
0d:50:71:f3:62:4c:3f:49:4b:29:51:87:96:3a:93:
50:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C5:13:24:49:B1:8A:9A:5D:30:DE:7F:0E:37:F9:DC:3E:33:D9:14
X509v3 Authority Key Identifier:
keyid:A9:BE:16:CE:7D:B3:BE:69:05:B1:AB:EF:8B:E2:1A:23:19:B0:E4:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f5:c8:fa:24:06:a2:04:0f:37:4f:8c:64:50:16:2c:c0:c1:
1a:8b:33:7f:79:de:9b:98:92:1f:05:db:91:99:6a:6e:86:13:
a8:d7:dc:e6:ab:3a:e9:f0:dc:26:d0:94:17:e1:10:f8:eb:60:
8d:b6:83:7e:52:40:22:57:f4:0e:2e:8c:18:97:77:b7:7a:bd:
91:a9:f8:7d:fb:d3:5d:98:72:2e:dd:9c:31:7a:67:bd:97:be:
e9:17:34:6d:66:12:78:0c:e9:15:49:7f:97:48:4e:d8:83:2c:
eb:f8:9b:bb:90:47:b1:58:53:38:cb:b4:e2:7a:a6:00:ef:51:
aa:da:0b:b1:69:d3:5f:b6:4b:2e:b2:18:08:1d:4c:5f:fd:e7:
3e:1b:3b:f1:5b:29:a4:c7:66:b8:e0:57:23:86:7a:90:cc:bc:
aa:ef:73:6b:df:b5:d9:d5:72:f7:81:f0:f1:1c:8c:3a:30:ea:
56:6d:50:92:37:b8:ae:a2:72:a1:30:3d:c4:31:25:9a:12:ee:
ac:ef:6c:a5:c7:1e:c5:c4:d5:a1:f4:11:23:5e:59:68:fc:21:
83:94:9f:d2:2e:50:72:09:b6:3f:11:1e:af:13:fe:06:96:f3:
0e:69:9b:10:29:8d:97:41:4b:a6:64:48:3e:44:d0:41:94:99:
4c:ca:7e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:04:34 2025 by rpki-client