Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
File: Q9_AZs580-OCV0poZnlzsLRo3zw.mft (raw, json)
Hash identifier: 0b7xUamMWNYLVfI3nn8lF8bU2Oqz8XL5LSRNSiFFHzo=
Subject key identifier: D1:DD:EA:04:A5:AF:B7:D3:59:C3:99:A1:E4:89:7E:90:26:FA:72:EC
Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Certificate serial: 0196730B3DB05E8C485A44AC1F5183BA642B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
Manifest number: 1495
Signing time: Sat 26 Apr 2025 17:00:38 +0000
Manifest this update: Sat 26 Apr 2025 17:00:38 +0000
Manifest next update: Sun 27 Apr 2025 17:00:38 +0000
Files and hashes: 1: 7Ii3o_ZhGPWdlGRrqt0iNC6A45A.roa (hash: bSJ6yN+1N4lchi22FVNmsmx0YQvJ/a2LompQsIf4Zik=)
2: Q9_AZs580-OCV0poZnlzsLRo3zw.crl (hash: bceXEQkGLZSrpDFLK11Ci39euPnFno93qxLeG/WTr7A=)
3: XFuigRA8MEoOFoeSisElJd3ZsTs.roa (hash: 6UiYiGL9M04Fpw4dwtYLRNHZ/SpRJ4sN2n0AIpfwxcA=)
4: YEwBGJwVFMVG4n9Uv5C8kaKbP_Y.roa (hash: 71JCVJhZ0PYDS413IRMGeXcUCfZfAR4EomHNNgUpftE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:0b:3d:b0:5e:8c:48:5a:44:ac:1f:51:83:ba:64:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Validity
Not Before: Apr 26 17:00:38 2025 GMT
Not After : Apr 27 17:00:38 2025 GMT
Subject: CN=d1ddea04a5afb7d359c399a1e4897e9026fa72ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7e:4e:8a:e6:37:78:48:f3:69:48:8d:7b:69:
27:96:32:85:e2:1a:66:16:dd:bb:be:06:2b:bc:cd:
bc:19:0b:87:65:13:1d:2e:11:43:22:2c:5c:6e:bc:
3f:40:f3:6d:ba:a8:f5:d0:32:2a:0e:45:ee:77:33:
a2:f4:c3:fb:ae:1f:cb:75:d7:bc:7b:a5:4c:ef:55:
44:f9:cf:83:51:89:a5:73:3c:3a:f7:b6:47:94:17:
cf:fd:b5:a1:3e:99:ea:61:7a:c3:aa:41:c0:4c:50:
d7:52:88:1f:a8:a2:87:43:9c:c4:0c:79:a9:26:ef:
00:c5:12:14:b0:2c:b8:14:1f:40:1e:e5:09:a5:fc:
9f:c6:f3:a7:3c:1a:e6:06:28:2f:9e:17:0a:7c:97:
60:5a:13:81:03:4f:11:fb:37:de:17:bc:89:67:1a:
12:70:56:fb:2c:b8:fa:74:cd:4b:c0:b1:68:b6:d4:
85:d4:04:1f:51:3c:67:81:05:85:35:b3:d0:3b:66:
1d:17:b6:74:1a:80:5e:63:72:bc:91:68:a5:90:17:
2f:2d:dc:23:4e:21:9f:ef:b1:ad:41:e0:91:ef:3e:
17:a0:f2:85:14:66:72:fe:e2:b7:3f:73:e7:e4:a8:
17:56:5a:b5:48:f6:57:7b:53:d9:89:7e:25:f9:50:
db:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DD:EA:04:A5:AF:B7:D3:59:C3:99:A1:E4:89:7E:90:26:FA:72:EC
X509v3 Authority Key Identifier:
keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:9c:cb:2e:0a:c1:b0:e3:2f:e2:4b:a1:de:e9:a9:d1:6c:8b:
8b:25:84:65:74:d2:fe:9b:52:a9:90:33:40:43:d2:35:3a:d2:
f9:96:f8:e8:9a:7b:e7:74:16:fd:e6:51:98:b7:37:b2:ef:0c:
aa:ce:31:d3:f3:58:16:9a:db:f3:c8:65:1c:47:18:b0:fb:5f:
fd:e3:75:69:8d:b0:f0:73:5b:f7:fc:6e:e2:3b:00:fa:78:4a:
8c:df:5a:1a:bb:c2:fc:0e:3e:88:40:f6:38:84:a8:42:ed:93:
40:45:30:b3:9f:57:17:74:9e:ee:60:ff:11:70:0d:ab:98:8f:
11:17:ad:b8:47:78:16:c8:6f:91:d5:2c:a1:43:00:0e:e6:31:
12:ad:31:96:7f:58:e1:ec:53:58:38:93:5a:b2:ba:71:3b:a8:
19:fb:c2:c7:63:f6:75:9f:42:11:e2:d0:66:53:66:e6:c5:57:
49:32:09:eb:3f:a1:c0:11:47:47:9f:96:20:64:3d:64:b9:77:
94:6e:70:2b:f4:6b:5d:59:25:55:a5:73:0d:eb:a6:1b:bb:e0:
de:3b:6d:eb:c9:21:a5:c0:c5:ac:ff:3a:f8:4e:88:45:e6:ab:
5e:b6:75:14:80:9e:b6:cb:33:9a:08:5b:c7:04:10:e0:7b:fc:
b8:43:af:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:01:56 2025 by rpki-client