Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
File: q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft (raw, json)
Hash identifier: m1HTURTbI/46705Ci8Pm4qwwlzWTXawFBWYWaSe5Q/Q=
Subject key identifier: FC:02:B7:46:8E:C8:A1:63:1C:C1:57:12:63:5D:78:7A:97:74:11:F3
Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
Certificate issuer: /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Certificate serial: 01968246FCC8483BF0832FC4181469570890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
Manifest number: 1520
Signing time: Tue 29 Apr 2025 16:00:12 +0000
Manifest this update: Tue 29 Apr 2025 16:00:12 +0000
Manifest next update: Wed 30 Apr 2025 16:00:12 +0000
Files and hashes: 1: 7XQS9fgmC0xNqPuIMhkAaeUEx0g.roa (hash: 30Yt0v1j2/2WiJgCszBG8BLPKcC0q4CL1Hk0j9TqmbM=)
2: CGRTCK3Ge4ADHzCWSkOhJS2ZO-g.roa (hash: qGlSQR4VzbycTQ4yuefrd6Ta0FRZb+PMZoj6HNp+HDk=)
3: q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl (hash: cYJdev/pTkYZjFIIkyud9oR2F5242hy205D9jn2zXj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:46:fc:c8:48:3b:f0:83:2f:c4:18:14:69:57:08:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Validity
Not Before: Apr 29 16:00:12 2025 GMT
Not After : Apr 30 16:00:12 2025 GMT
Subject: CN=fc02b7468ec8a1631cc15712635d787a977411f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fb:08:85:68:4d:0a:1d:0b:18:0a:09:12:84:
8b:40:78:43:30:8e:28:21:c2:80:e4:46:27:c0:ad:
39:1c:c1:7b:a4:e7:e1:10:49:6b:3f:6f:f9:00:a3:
1e:b4:12:1e:f7:68:f1:4c:b0:45:93:ea:3f:df:59:
2c:bc:55:fe:bb:ce:78:e6:27:df:ca:29:22:7e:0d:
3f:81:da:3d:bb:dd:4d:d6:9a:d3:e7:62:b0:67:d7:
d6:2f:56:05:25:53:13:1b:a4:b4:5e:ba:85:c9:c3:
ff:7f:65:ea:57:85:a6:cb:a6:7c:cd:19:a4:ac:2b:
22:0d:9a:8e:d2:e6:e4:e5:96:ee:2e:ef:94:34:23:
10:40:26:88:d6:65:35:0a:b7:d0:1f:02:9b:7f:97:
12:88:87:31:eb:5c:c8:58:3e:67:8c:bb:a5:fd:d5:
35:3e:f7:9b:d4:aa:0f:f1:a9:64:d1:b4:a8:f8:f9:
c3:5f:b1:ec:35:2c:5b:2d:50:7e:dd:9d:85:50:16:
a6:e5:cd:c1:bb:a1:7d:a2:fa:cf:8a:14:53:59:11:
e1:02:a7:d1:1c:bf:0b:fa:82:e3:0d:ca:26:75:03:
85:28:83:6f:4f:dc:24:8f:1d:c2:8e:92:04:a7:22:
90:f4:3e:b7:e6:f6:01:22:1b:34:c7:e4:fa:cf:bf:
0b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:02:B7:46:8E:C8:A1:63:1C:C1:57:12:63:5D:78:7A:97:74:11:F3
X509v3 Authority Key Identifier:
keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:35:19:64:eb:f6:4e:be:9d:b1:f8:b7:4c:0f:2b:0a:68:de:
4a:c9:e8:1f:82:ca:40:4f:f6:23:08:9d:0e:27:5c:7f:41:3f:
3b:a1:54:1a:69:7a:c6:45:a5:b5:5f:fb:24:96:52:83:b1:5e:
6e:f1:e7:0c:9c:54:49:8b:23:68:ba:84:eb:15:6a:95:0b:fc:
98:ce:cc:fa:ef:06:fb:32:51:d3:fe:f8:07:91:4e:52:bd:4c:
f4:8e:e4:af:dc:37:ed:3f:75:0c:cc:7c:75:0c:5c:a1:a0:75:
6f:1d:af:e4:c1:a6:d3:66:f0:89:c4:70:f6:c0:d4:6e:d9:1f:
7d:9b:02:96:24:65:89:6b:87:2f:84:7c:da:4f:60:82:ca:5c:
b2:b3:65:45:8f:a1:94:df:9a:0e:02:68:e1:93:a6:47:75:4e:
31:2b:1b:4b:ec:79:d0:ba:db:56:db:b1:8c:6e:76:1d:5b:d4:
99:a1:47:32:8a:d1:d0:53:ca:a6:16:55:35:76:9b:1a:28:0f:
e0:ff:b5:2f:3b:ef:1a:1a:fe:3d:6b:4d:d6:b4:e3:7b:15:d7:
93:4c:9c:6f:0d:44:1a:b1:fe:39:3d:73:4f:e3:07:3c:48:bc:
44:75:47:8c:2c:d3:47:3f:1a:06:53:2e:5c:99:78:ae:c7:b9:
a4:0e:c4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:06:04 2025 by rpki-client