Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
File: q-CopGLQ3h9NMBLD455c2mA-j5E.mft (raw, json)
Hash identifier: nongUKxVYcLqftUpBZi0VaN6etsSSurc9U20R4pRJQk=
Subject key identifier: C9:CD:3E:C8:03:19:FD:1E:C2:E1:81:76:0E:57:FC:1B:88:F3:B8:69
Authority key identifier: AB:E0:A8:A4:62:D0:DE:1F:4D:30:12:C3:E3:9E:5C:DA:60:3E:8F:91
Certificate issuer: /CN=abe0a8a462d0de1f4d3012c3e39e5cda603e8f91
Certificate serial: 01968391BAE5BC1DD65465381EE44021F728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
Manifest number: 1168
Signing time: Tue 29 Apr 2025 22:01:27 +0000
Manifest this update: Tue 29 Apr 2025 22:01:27 +0000
Manifest next update: Wed 30 Apr 2025 22:01:27 +0000
Files and hashes: 1: 1W5smHKXook3Cttl9rBFCphz4iU.roa (hash: pODFfCt0njdSi3l+0iabpv9dot/GnoaQcWWIJ30v1gM=)
2: q-CopGLQ3h9NMBLD455c2mA-j5E.crl (hash: BR6SHxb99xZmvqaIrLe8DPHf1XWOo4ABwwysfvolU54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:ba:e5:bc:1d:d6:54:65:38:1e:e4:40:21:f7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe0a8a462d0de1f4d3012c3e39e5cda603e8f91
Validity
Not Before: Apr 29 22:01:27 2025 GMT
Not After : Apr 30 22:01:27 2025 GMT
Subject: CN=c9cd3ec80319fd1ec2e181760e57fc1b88f3b869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d8:ee:e7:24:47:5a:dc:7a:23:4f:68:c7:ac:
37:f9:01:81:73:4b:53:1f:bc:31:1a:b1:a7:f7:d3:
ce:20:94:9e:d4:9a:d7:4e:6c:c8:93:63:5c:bc:bc:
3a:b3:a0:b0:bd:7d:3f:55:a8:1f:f9:a5:58:0f:64:
5d:f7:82:46:89:d7:8e:d4:b1:1f:65:30:76:d8:dc:
98:dc:22:96:b6:85:63:e8:58:a9:4f:a0:7c:f8:93:
c5:0f:17:9a:57:9d:5a:5e:54:08:88:fb:cf:ea:18:
8c:ca:9b:bc:d9:68:2e:c1:35:cb:a4:e6:99:12:f5:
79:49:a8:46:80:c6:e6:92:5c:cc:ff:c1:52:86:93:
f9:a0:4b:ff:9d:eb:ae:05:3b:4e:b0:28:d5:b2:36:
54:ef:de:18:f2:5e:13:be:8a:55:06:66:da:6a:99:
22:d6:a9:80:3f:d9:1f:bd:0f:85:00:17:91:d6:32:
8e:ad:1a:2d:26:4c:fa:25:c0:6d:19:8a:5b:35:04:
79:1c:c9:0e:40:3e:40:c0:4f:92:bf:0b:5e:22:83:
04:bc:23:36:fb:c3:7e:71:9d:a7:95:6d:63:ac:8f:
33:4d:2a:b2:03:68:0c:d6:6c:1b:18:5c:52:bc:df:
7f:ee:03:c7:66:4b:54:bc:4b:2c:6d:64:83:37:d6:
6f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CD:3E:C8:03:19:FD:1E:C2:E1:81:76:0E:57:FC:1B:88:F3:B8:69
X509v3 Authority Key Identifier:
keyid:AB:E0:A8:A4:62:D0:DE:1F:4D:30:12:C3:E3:9E:5C:DA:60:3E:8F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:cc:13:2a:90:90:62:fb:85:49:a8:58:bb:b2:40:b9:c1:76:
da:be:09:8f:d9:2d:d6:b1:29:a6:af:fa:d6:fd:0f:13:1f:15:
e7:8c:7d:fc:5d:63:d0:a6:d4:f5:3d:00:4d:8c:4a:59:d1:12:
be:96:76:fb:14:d6:20:1f:03:57:99:bc:5e:9b:b0:39:ae:77:
3f:b8:ea:ad:d2:93:33:da:16:b8:2c:87:a3:b1:92:1b:a8:d3:
70:7d:0a:3a:6a:6d:28:24:bc:ba:ad:3f:f1:cf:12:4c:d6:ec:
1f:d0:35:65:3e:89:58:63:bf:ec:ca:be:74:93:26:b4:be:76:
e8:2a:b4:65:7e:4a:3f:c8:e1:ed:42:85:36:31:08:1d:1a:09:
47:bc:04:91:16:c6:d4:bb:42:5b:0d:ab:49:7e:d2:8f:ba:0e:
43:c7:ea:b2:b3:9c:22:3a:8b:9c:da:be:1b:85:56:05:4e:8e:
f3:90:99:f0:6b:0a:be:7c:7a:6a:ea:75:43:c0:ce:58:d4:6a:
3e:86:95:b3:35:fe:a3:9f:40:5d:eb:d8:12:a3:68:d8:d5:ff:
38:e4:06:f1:56:a7:f8:cb:91:14:36:81:be:19:ae:66:2c:75:
a4:00:49:ba:5d:dd:8d:4a:4a:36:1e:e6:6c:29:7c:a6:8a:0d:
b2:d9:42:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:24:29 2025 by rpki-client