Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
File: qIXNvd_X0TFoRb609zmPPOZPrNA.mft (raw, json)
Hash identifier: LHSqUNYsDbsFy5rDzMkIEuucJxk1Kj3DoLLG1u/kEqA=
Subject key identifier: 6E:80:22:1C:01:27:8C:69:4D:49:C8:33:FD:10:66:85:37:EB:EE:CC
Authority key identifier: A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0
Certificate issuer: /CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
Certificate serial: 019684DA571539C8A996600ECA815D5C612F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
Manifest number: 1259
Signing time: Wed 30 Apr 2025 04:00:23 +0000
Manifest this update: Wed 30 Apr 2025 04:00:23 +0000
Manifest next update: Thu 01 May 2025 04:00:23 +0000
Files and hashes: 1: qIXNvd_X0TFoRb609zmPPOZPrNA.crl (hash: PqzIKoO7D8f/j5ap3Mx+byCZuoqM3sUysEotFJiTR6w=)
2: xtTCfWlyctb3-ZIARtvZc7gD2_c.roa (hash: DoO5FfFnFM++vEGajImQDDKEPB+yqs7BrAr2CdTgfGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:57:15:39:c8:a9:96:60:0e:ca:81:5d:5c:61:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
Validity
Not Before: Apr 30 04:00:23 2025 GMT
Not After : May 1 04:00:23 2025 GMT
Subject: CN=6e80221c01278c694d49c833fd10668537ebeecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2f:b1:24:6a:75:f9:e2:69:d2:1d:7a:dc:8f:
c6:bb:df:c2:42:28:2a:f3:7f:6e:6d:27:33:e0:12:
08:37:c3:0b:00:b1:f8:62:03:10:58:da:61:8c:81:
47:da:c7:31:14:6f:15:0d:7a:b2:41:bd:bc:88:d0:
ac:14:92:8c:9a:6c:83:f2:54:96:76:26:75:b3:3f:
3d:cc:63:2b:09:2b:1b:a2:82:02:d8:65:b7:0e:0b:
24:b2:32:bc:37:71:1e:ca:69:88:e0:03:a8:d5:57:
35:26:6c:29:98:21:68:f8:b0:ae:3e:57:c6:e6:8e:
87:08:ad:21:13:d5:4e:72:d3:2b:cc:39:54:16:c5:
62:38:21:3c:14:dc:32:20:a0:4e:6a:c3:62:9c:06:
26:5c:54:f6:10:d1:a1:ac:4b:2f:b3:22:e1:75:39:
9d:95:61:0f:17:9d:4a:9c:7b:3b:90:d1:fc:73:f5:
c7:17:09:8c:d5:fb:46:4d:a6:39:8f:70:db:84:dd:
27:51:50:5f:3f:4e:80:10:70:61:fb:e6:95:61:ab:
fa:6c:0e:f2:2a:59:2b:cb:c4:9e:0b:b9:a5:99:cb:
1c:8f:63:20:9a:47:bd:e1:b8:53:37:35:a5:6a:0d:
50:bb:51:15:f8:d6:02:2d:6c:3d:15:71:95:37:d4:
75:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:80:22:1C:01:27:8C:69:4D:49:C8:33:FD:10:66:85:37:EB:EE:CC
X509v3 Authority Key Identifier:
keyid:A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:41:e0:89:05:70:40:53:c9:3f:96:24:6a:ab:f3:6e:ab:ad:
b9:77:15:53:1e:92:a0:17:48:e7:1e:25:db:bf:64:ca:14:d4:
12:8a:51:30:21:6c:01:04:34:55:3a:b5:e1:c0:2a:20:1e:76:
9d:1c:8b:15:5e:22:d6:59:0f:22:ba:4c:49:87:e4:4a:60:2a:
12:61:fb:3a:39:ab:6b:d1:da:95:cb:70:b3:9f:a4:38:3c:34:
15:25:18:8b:63:99:b4:93:21:18:6b:4a:ca:8f:1e:9b:d9:88:
c0:81:a9:04:ba:1b:c2:0d:43:71:bb:52:8c:e3:e8:69:da:a1:
4c:29:8f:5e:8a:cd:61:48:2e:89:e8:a4:7f:83:10:a3:11:28:
f6:91:c8:6a:4f:99:f5:68:b0:b9:81:b2:b0:96:fa:12:50:16:
d4:42:fc:a3:7c:d2:c4:94:06:c3:3a:d9:12:22:b0:0d:54:04:
de:26:0d:6e:c8:d1:79:8f:50:17:b3:ed:30:fe:b0:65:17:06:
2a:a1:af:f3:13:c3:f6:fd:2f:b7:dc:2f:0a:7f:b7:ab:db:37:
c1:1c:73:20:f8:20:41:2c:57:e1:8f:19:a4:f5:03:67:dd:ff:
76:1a:4a:15:b1:fb:54:f2:9b:4c:92:a3:1f:88:54:da:de:2c:
4b:4c:37:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:43:05 2025 by rpki-client