Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.mft
File: q3qquyPNJFv6go-wJSHWRMbVtWY.mft (raw, json)
Hash identifier: mz3kfRUBiUpiYjNJWsQWxYSu3NAKB+WIxAvQRTJlcTQ=
Subject key identifier: F0:89:A9:6C:EC:93:7C:28:06:62:F9:85:BF:19:AB:39:19:C1:57:DD
Authority key identifier: AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
Certificate issuer: /CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Certificate serial: 019682B4D3826AB1BBA98865692A48CB7A2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.mft
Manifest number: 11FC
Signing time: Tue 29 Apr 2025 18:00:10 +0000
Manifest this update: Tue 29 Apr 2025 18:00:10 +0000
Manifest next update: Wed 30 Apr 2025 18:00:10 +0000
Files and hashes: 1: bgfztVWShrtQVnnUy79Uwf2ad-U.roa (hash: 6rNqpGYtQ5hCAICw5R79FB5nCbidIpeSHwH6YCdW27k=)
2: q3qquyPNJFv6go-wJSHWRMbVtWY.crl (hash: GQE3F60x5iVxn1O4JaBkU4tBqvG4nbgQhgKlHhsDKlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b4:d3:82:6a:b1:bb:a9:88:65:69:2a:48:cb:7a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Validity
Not Before: Apr 29 18:00:10 2025 GMT
Not After : Apr 30 18:00:10 2025 GMT
Subject: CN=f089a96cec937c280662f985bf19ab3919c157dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ec:9e:0a:4a:9f:10:91:42:05:7d:de:9e:1f:
40:07:2e:fc:e4:2b:97:01:3b:15:f9:30:5b:1c:fe:
14:bc:f3:03:dc:e2:ec:7e:28:5d:9f:30:f4:b8:62:
28:f8:c3:4c:5b:d2:98:d0:f1:cc:81:10:aa:2a:34:
c8:e5:48:7f:c8:ba:ce:c7:04:a4:b2:81:24:2b:42:
d9:93:74:67:56:af:f5:fb:cf:7e:ff:5e:5b:b8:bf:
0d:47:80:34:1a:18:c7:e4:e7:88:c1:8b:ff:35:19:
e9:e3:c3:cb:93:8f:95:00:f0:ef:bf:b6:7a:f4:20:
09:2d:7b:cf:8c:d2:a9:7c:79:7d:24:9b:67:cd:72:
91:29:bf:32:9b:9d:6a:37:06:35:d2:77:12:20:88:
a8:0a:47:bc:71:6c:47:e5:9c:27:86:32:1d:8e:21:
38:17:b7:c2:c0:c6:ac:d0:6b:2b:2b:67:42:2f:24:
fc:20:50:bf:ed:74:a5:21:b9:3f:92:48:ea:3a:6b:
b4:36:61:b4:f3:13:60:5a:25:9a:87:9d:5e:f4:fe:
1e:45:24:19:28:31:e0:17:a6:a1:8c:94:eb:a7:27:
c8:57:8d:cf:b9:03:c0:d2:93:bb:57:73:c5:5e:ad:
a1:53:8c:bc:a9:80:42:9a:e1:0c:9d:b6:db:78:98:
3e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:89:A9:6C:EC:93:7C:28:06:62:F9:85:BF:19:AB:39:19:C1:57:DD
X509v3 Authority Key Identifier:
keyid:AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f2:91:6d:fe:40:cc:e3:c7:0b:41:0e:bf:60:98:3a:05:34:
4c:a1:96:89:bb:c9:e9:ee:67:95:5d:71:f3:9c:61:31:e2:ed:
33:8b:1a:ee:b2:92:2b:08:ba:b9:74:8d:c0:92:a9:ab:eb:43:
fc:7e:0b:e5:23:ee:13:7b:bf:ff:46:72:3a:29:34:24:a5:42:
a8:6b:ab:39:25:2b:77:0e:36:35:a8:da:60:fe:09:fe:8a:14:
08:d5:a8:12:f2:c6:ca:da:e2:0f:c3:8d:a5:40:99:45:1a:19:
a5:56:7b:d6:fa:77:44:8e:97:2c:8a:64:b1:d8:b9:e9:77:17:
8c:a6:d6:24:b7:13:bd:0e:fb:f0:fd:86:5b:23:ae:3c:a3:23:
44:84:a6:a4:26:8f:0b:73:50:a3:9e:d9:e3:c3:6d:00:ce:e6:
d3:21:33:0f:d7:05:f6:d0:4a:6c:d8:9b:5d:70:ce:50:bd:62:
90:e7:5f:2f:2e:60:a8:cd:b4:73:cc:07:28:b4:06:53:37:b3:
3f:d6:61:db:bb:a8:6e:b1:b5:a3:64:da:f8:86:81:fb:a2:f5:
85:e2:23:1e:33:20:a3:d9:45:61:a0:6a:af:11:9b:78:a2:78:
71:17:36:95:28:e1:c9:09:78:94:10:7f:fc:5a:2a:50:88:5a:
a1:db:0c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:30:39 2025 by rpki-client