Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
File: q08Em20XYCv3tI0QTQja8BQx28I.mft (raw, json)
Hash identifier: D4k1ErqsY4GCVMS9nAAiXZipVbNDA/QxTJ1SqLMPpbM=
Subject key identifier: DE:48:D6:64:4F:1F:D6:C1:57:C9:C8:07:0B:AE:B0:0E:CE:1A:14:04
Authority key identifier: AB:4F:04:9B:6D:17:60:2B:F7:B4:8D:10:4D:08:DA:F0:14:31:DB:C2
Certificate issuer: /CN=ab4f049b6d17602bf7b48d104d08daf01431dbc2
Certificate serial: 019680C6F0AB28429E85BCB0B70EE31D37FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
Manifest number: 1512
Signing time: Tue 29 Apr 2025 09:00:43 +0000
Manifest this update: Tue 29 Apr 2025 09:00:43 +0000
Manifest next update: Wed 30 Apr 2025 09:00:43 +0000
Files and hashes: 1: kWd4hi-OyYBjozDmbmhqQmpA6Pw.roa (hash: ZCQPM7gY7pbLQQubJYcs97+7fXVoiPmIY9e2vsVxbNM=)
2: q08Em20XYCv3tI0QTQja8BQx28I.crl (hash: Ow7cYICLE+2eJRFugVf1/TNtlbHs38Ul9nmC4mwv8Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:c6:f0:ab:28:42:9e:85:bc:b0:b7:0e:e3:1d:37:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab4f049b6d17602bf7b48d104d08daf01431dbc2
Validity
Not Before: Apr 29 09:00:43 2025 GMT
Not After : Apr 30 09:00:43 2025 GMT
Subject: CN=de48d6644f1fd6c157c9c8070baeb00ece1a1404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ac:9d:9d:cd:99:01:22:68:47:3c:e7:e0:36:
09:8b:fe:2e:27:99:9e:8f:b1:d8:69:15:36:90:be:
94:f5:b7:6c:17:da:d1:52:8c:66:a2:b3:b2:ca:10:
4e:cb:05:a2:80:d9:4f:34:36:72:15:57:cf:ff:66:
63:c1:d2:62:e3:f8:8b:06:a0:5a:c9:f7:f1:df:0b:
17:e9:a2:81:44:ef:ef:20:50:de:f0:1c:71:12:74:
35:78:53:34:06:6f:27:e6:fd:30:f6:80:01:59:b8:
5c:87:d4:99:3c:a2:a6:5f:9e:aa:ec:d9:4e:7f:cb:
26:69:5b:06:8c:c9:95:79:63:11:29:03:e6:c9:16:
44:85:53:6d:f2:0d:ad:f8:68:2b:18:8f:e7:6d:66:
4b:20:01:74:33:13:b9:c2:92:71:de:14:84:39:cf:
12:68:07:cc:19:0d:3a:61:fe:e6:6e:7b:54:63:38:
65:3a:59:6b:42:d9:7b:b9:b2:d5:9a:72:76:50:12:
37:51:c6:3c:3a:27:3f:0a:33:f2:3c:7e:ce:38:9e:
74:37:f3:76:ee:61:e2:83:ef:b2:f0:91:64:b4:16:
28:02:f9:cf:1a:f8:8f:9b:d9:ae:22:eb:76:31:26:
25:da:b5:ed:ea:a2:bc:ba:33:ae:18:d0:3b:b7:35:
2d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:48:D6:64:4F:1F:D6:C1:57:C9:C8:07:0B:AE:B0:0E:CE:1A:14:04
X509v3 Authority Key Identifier:
keyid:AB:4F:04:9B:6D:17:60:2B:F7:B4:8D:10:4D:08:DA:F0:14:31:DB:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:af:39:3f:4b:7b:c3:80:0e:9e:2f:87:1f:fd:6f:94:90:44:
af:30:7e:f6:86:22:33:11:39:98:de:e1:ab:5a:5e:63:99:c5:
56:56:4d:4b:6c:bc:46:37:7c:8f:ad:65:bc:5a:42:d4:6f:24:
80:15:ad:b5:59:cf:60:59:9a:c7:9a:db:c9:9e:a1:a9:fd:19:
b0:ad:bf:ca:72:84:7e:84:65:02:4e:16:af:7b:a9:af:ba:f1:
95:8d:3a:1c:ac:f7:9d:c6:bc:fc:64:b8:65:ca:f3:e0:ae:ba:
4d:52:e2:52:82:79:bd:eb:59:26:cd:46:0f:c6:fd:c0:db:3b:
24:15:62:48:23:f0:e3:32:91:c5:aa:c1:a6:67:f0:4e:07:87:
c4:93:ed:19:fb:78:38:4a:e2:fc:b3:a2:63:8a:09:de:b3:9b:
30:34:78:e3:ee:86:dd:de:d2:fc:db:20:e7:02:0e:09:1e:c4:
87:e4:68:b2:35:13:f1:56:c8:69:f0:f2:f4:1d:8c:12:8d:a1:
ef:79:e9:bf:b1:f4:dd:6f:38:94:22:a5:8a:a0:a1:73:bc:ca:
2f:f3:74:74:81:5b:be:70:e6:be:02:7b:4e:99:47:41:60:43:
3c:cf:7c:31:40:13:f0:fb:89:a9:e7:3b:04:3d:fd:86:72:55:
89:08:50:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:13:51 2025 by rpki-client