Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
File: qIXNvd_X0TFoRb609zmPPOZPrNA.mft (raw, json)
Hash identifier: RF9onuJM7bhlNlPJizpMEiIahxHeae5skEmI2ec5Euo=
Subject key identifier: E6:6E:5F:53:CC:C6:05:5C:83:8C:D0:96:80:5B:28:0B:13:D4:47:E2
Authority key identifier: A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0
Certificate issuer: /CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
Certificate serial: 019680FD921769116E37875CD67B26CCFDF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
Manifest number: 1257
Signing time: Tue 29 Apr 2025 10:00:23 +0000
Manifest this update: Tue 29 Apr 2025 10:00:23 +0000
Manifest next update: Wed 30 Apr 2025 10:00:23 +0000
Files and hashes: 1: qIXNvd_X0TFoRb609zmPPOZPrNA.crl (hash: tOMDiA87fm2JgiziRK64Xd9yEd77nX0xJoNxNKevP0Q=)
2: xtTCfWlyctb3-ZIARtvZc7gD2_c.roa (hash: DoO5FfFnFM++vEGajImQDDKEPB+yqs7BrAr2CdTgfGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:92:17:69:11:6e:37:87:5c:d6:7b:26:cc:fd:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
Validity
Not Before: Apr 29 10:00:23 2025 GMT
Not After : Apr 30 10:00:23 2025 GMT
Subject: CN=e66e5f53ccc6055c838cd096805b280b13d447e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:74:5a:f1:53:9d:03:cd:0d:1c:c0:51:24:b9:
29:1f:1f:df:62:7d:e7:87:b9:82:c3:bd:3c:74:d5:
d0:4f:f3:06:98:ba:e6:55:da:8c:5e:ed:ed:92:4b:
96:6d:24:f7:59:ce:bb:c8:31:3e:b5:6d:cb:55:c5:
1d:6b:5d:83:db:d5:09:14:72:b7:6c:02:2e:da:cc:
f6:84:88:7e:f2:51:0b:dc:da:40:26:c9:4e:7d:97:
59:35:cb:69:cf:36:42:21:6d:69:90:72:03:8c:79:
9d:53:8f:4f:13:00:74:3f:f4:53:13:0c:d1:81:2d:
a6:a5:a1:8a:bb:fa:05:9a:ae:f1:3b:23:4a:24:e8:
88:01:4d:d6:c7:3e:83:2b:a5:1b:76:a4:a4:2c:36:
09:d0:ea:b0:e0:e5:63:18:43:dc:35:ef:2e:18:8f:
00:e8:2a:2f:4f:87:95:f5:a4:7f:b4:d0:49:3e:75:
3e:bc:f0:3f:d7:fc:0b:80:12:dc:e5:19:3b:19:58:
9e:22:63:2d:b0:51:e6:e8:f1:c3:ca:16:d9:e8:57:
f1:55:de:27:e2:93:fb:50:fe:4f:b7:7d:0a:aa:f6:
80:fa:7b:89:9e:18:c4:0c:cb:d8:67:7d:82:e3:c0:
6d:f2:af:25:f0:c4:54:5c:10:4e:7c:32:9d:c2:9a:
96:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6E:5F:53:CC:C6:05:5C:83:8C:D0:96:80:5B:28:0B:13:D4:47:E2
X509v3 Authority Key Identifier:
keyid:A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e2:db:21:c6:b2:64:a9:a8:1b:44:1e:80:33:c8:07:e3:b3:
ec:16:33:a9:15:e9:ae:3f:ca:1f:68:d6:9a:c1:94:b5:41:f8:
5b:99:db:5c:29:97:77:d0:9d:ee:07:72:99:10:1c:e2:90:75:
54:6a:44:b4:5f:ca:76:ed:79:9b:96:99:f3:a9:d4:e4:0b:bd:
e2:76:a9:9d:27:87:95:c9:04:28:81:75:27:87:34:70:31:72:
e9:03:ef:3d:28:ce:29:69:9a:66:77:f9:1a:62:48:d7:7a:84:
12:bf:8a:fa:6b:82:6c:92:1c:58:82:b8:78:e3:f4:10:27:d2:
a1:7a:3f:9e:5e:62:52:bd:33:7b:40:aa:b0:55:f8:2b:ec:55:
4c:d4:c3:43:2a:06:56:f8:75:01:96:99:ff:58:15:6d:77:99:
20:d7:b3:08:aa:f7:19:43:df:b5:d9:14:33:03:28:0e:0c:16:
a2:fb:b4:c3:a7:a1:ce:e9:91:92:98:6d:50:40:7a:e0:f8:cc:
d4:4e:df:2b:56:e9:a3:58:11:ea:74:29:af:eb:42:dd:30:74:
d8:f9:8b:7a:42:33:b1:65:59:e1:27:62:f7:99:c0:9d:13:80:
91:de:f3:93:74:c1:49:b3:83:29:79:9b:29:fa:74:77:b5:73:
37:1c:49:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:34:31 2025 by rpki-client