Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
File: q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft (raw, json)
Hash identifier: 4WSEzIiaSCn/LrhfU7PcdWdZSuDapBKYfPBfWVrIUlA=
Subject key identifier: 3C:60:16:DE:79:D7:AA:43:5D:AF:4E:0C:DD:C4:F1:06:A9:45:94:78
Authority key identifier: AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58
Certificate issuer: /CN=ab87734368d88315f11b329386cc5ef2bb875858
Certificate serial: 0196790D74FF154DF184889629A7C0EC03EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 21:00:47 +0000
Manifest this update: Sun 27 Apr 2025 21:00:47 +0000
Manifest next update: Mon 28 Apr 2025 21:00:47 +0000
Files and hashes: 1: q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl (hash: XmAU5RsIeeR76lLTnUoNuwVTdlKPfibaay2NQAVrJMk=)
2: sqo5PLdWdHMa-3THIwpzThX3MIQ.roa (hash: mkeWzT4DWdeQx69gMonfC3UIQ6XY4x+08EOS1mbWBlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:0d:74:ff:15:4d:f1:84:88:96:29:a7:c0:ec:03:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab87734368d88315f11b329386cc5ef2bb875858
Validity
Not Before: Apr 27 21:00:47 2025 GMT
Not After : Apr 28 21:00:47 2025 GMT
Subject: CN=3c6016de79d7aa435daf4e0cddc4f106a9459478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:65:36:62:18:bf:5e:c2:3b:63:8e:a6:cc:fd:
73:ca:f9:ec:a1:7d:55:26:56:5e:1a:37:54:f2:32:
70:97:8b:99:bd:80:91:de:34:d0:13:1b:b2:38:37:
a3:eb:9a:5c:da:cc:bc:54:5e:59:ff:86:6e:0e:0a:
c0:c6:e3:9c:87:6a:33:d0:2d:b0:0c:55:4a:42:65:
9e:07:48:a5:7c:44:d8:26:ab:ae:30:18:4b:ed:0a:
4b:e0:61:ba:f8:d9:94:8a:dd:9a:e3:3d:13:b1:42:
e0:cd:97:61:3c:a7:8a:71:2a:8a:30:b8:0a:8a:54:
e5:26:58:51:29:5d:62:e8:56:33:68:71:7b:be:c5:
41:f5:33:f4:c1:a2:50:c9:3f:81:a4:88:62:63:2e:
fd:ae:d2:60:cc:5c:79:57:bc:5c:7b:e5:21:14:5b:
17:76:e9:5d:81:12:a8:ed:fb:5c:16:00:5c:3b:66:
db:26:85:87:62:15:8e:0c:e6:4d:4f:78:57:15:db:
3a:2d:64:93:08:a1:4e:06:7e:73:d5:1d:41:17:59:
bd:05:65:a5:a4:55:82:21:47:26:b5:84:c2:83:f0:
54:e8:df:df:ec:1a:72:2d:5e:5d:b8:99:0c:0c:31:
88:a5:13:09:93:a1:89:7d:15:d0:c6:73:52:3b:36:
90:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:60:16:DE:79:D7:AA:43:5D:AF:4E:0C:DD:C4:F1:06:A9:45:94:78
X509v3 Authority Key Identifier:
keyid:AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c3:41:e2:b1:c2:50:7e:8f:62:d9:a1:ed:47:03:ea:a6:20:
3d:63:4c:c9:d6:80:1a:82:b9:14:e4:ed:f8:77:d4:2b:96:61:
07:14:36:f3:4b:5d:20:f9:6c:a9:ba:82:14:50:35:f9:e9:d7:
e9:2d:c9:12:f9:d7:a1:2e:ee:6c:31:e4:31:6b:c5:36:62:bf:
b2:e0:f9:6e:97:2a:4a:93:87:ad:a8:32:34:b0:f3:5d:e6:91:
d1:08:b6:bb:ad:c8:74:b6:df:5c:f9:a3:d8:ae:6d:a4:fc:eb:
56:66:8a:d3:86:f4:a5:24:51:ab:4b:8c:c4:ca:f4:48:ae:f2:
0e:63:1c:4e:2e:0c:e2:ce:18:cf:c2:5e:56:d3:59:4c:d7:30:
10:11:52:d3:9f:ad:8f:25:22:a0:20:bd:b1:20:7c:29:7d:6f:
96:c3:27:61:5f:b9:e1:6c:fc:bc:d1:b4:8f:5f:fd:f2:bd:88:
21:da:44:3f:1d:5a:05:d4:69:f0:7b:5c:a4:d2:5f:3d:c5:64:
79:c5:0c:13:27:26:d9:79:92:2f:9c:cd:5b:17:ca:bf:af:d6:
cc:f7:00:23:c9:79:39:df:b6:00:6e:cc:19:dd:99:f4:7a:16:
3a:ea:00:fa:2e:08:81:40:b7:93:d4:d9:39:ac:10:1d:19:3d:
d4:12:48:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:27:10 2025 by rpki-client