Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.mft
File: qQ2awu8R1UaTddbebGv3IRKeO3E.mft (raw, json)
Hash identifier: RMINcuNw3FATev8ljOkCYXoIrCI7h4RWQ3AsehJcbzg=
Subject key identifier: F5:A3:A5:9B:48:B9:D0:E4:48:68:CA:F7:0C:EF:95:2C:8E:F7:F4:71
Authority key identifier: A9:0D:9A:C2:EF:11:D5:46:93:75:D6:DE:6C:6B:F7:21:12:9E:3B:71
Certificate issuer: /CN=a90d9ac2ef11d5469375d6de6c6bf721129e3b71
Certificate serial: 01967AFB9CB6BCE5C8E2A52AD59D848ED645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ2awu8R1UaTddbebGv3IRKeO3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.mft
Manifest number: 1451
Signing time: Mon 28 Apr 2025 06:00:32 +0000
Manifest this update: Mon 28 Apr 2025 06:00:32 +0000
Manifest next update: Tue 29 Apr 2025 06:00:32 +0000
Files and hashes: 1: qQ2awu8R1UaTddbebGv3IRKeO3E.crl (hash: 2xlCBDCJFjev8deMJaphjTLC4xdpdbJy0Q+f5gK5y5k=)
2: yuW5WVwgNaxBxObKx0w_CE3bdf0.roa (hash: bxzeDx/FJJDZscd0BPoaz8SHe0rmx/Qll6/QwchRolI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQ2awu8R1UaTddbebGv3IRKeO3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:fb:9c:b6:bc:e5:c8:e2:a5:2a:d5:9d:84:8e:d6:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90d9ac2ef11d5469375d6de6c6bf721129e3b71
Validity
Not Before: Apr 28 06:00:32 2025 GMT
Not After : Apr 29 06:00:32 2025 GMT
Subject: CN=f5a3a59b48b9d0e44868caf70cef952c8ef7f471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b9:4b:2f:d2:49:ed:44:11:c2:3a:06:8a:eb:
01:44:56:a7:f2:fa:67:3b:87:16:41:d1:df:8b:a5:
cd:01:73:3e:38:8d:9a:e0:50:90:0b:e4:12:59:d4:
ed:8a:3e:2e:b1:2b:96:52:de:1a:7a:fe:d1:1e:d2:
8c:b9:e9:22:f9:b8:d4:b7:37:0d:3a:0b:71:04:ba:
cd:00:0b:5f:a2:a2:e6:13:d0:44:4d:be:0e:87:04:
c3:08:db:08:87:0a:da:94:13:e6:91:d6:b5:0f:c9:
b2:4b:3c:49:3e:b4:1f:56:33:70:91:84:0b:ce:94:
35:80:bb:56:20:fd:64:a3:05:0a:23:cb:48:27:dd:
ff:f2:fb:a7:aa:ca:5a:f2:80:72:12:68:33:78:c6:
a4:ae:e8:dc:91:43:6a:7a:ac:e1:ba:2b:30:e6:e2:
b5:b5:ec:4b:5c:3a:e2:a3:7a:62:d2:47:0a:0a:61:
8e:d9:b0:58:f8:76:3a:14:e9:d4:9b:60:58:d7:2e:
0d:75:16:a9:9b:58:ae:b8:e7:e5:a4:c3:0e:b8:6c:
84:04:c1:7f:cb:0b:96:fa:32:91:e2:85:33:d5:c2:
e1:49:cb:d8:9e:1e:27:50:c6:9c:e2:0e:d5:b1:80:
4a:6a:af:11:71:72:34:17:95:df:de:f2:ac:98:02:
c1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A3:A5:9B:48:B9:D0:E4:48:68:CA:F7:0C:EF:95:2C:8E:F7:F4:71
X509v3 Authority Key Identifier:
keyid:A9:0D:9A:C2:EF:11:D5:46:93:75:D6:DE:6C:6B:F7:21:12:9E:3B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ2awu8R1UaTddbebGv3IRKeO3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a4:8c:c6:48:67:e9:66:66:8f:b3:44:e5:65:2b:eb:04:3e:
f3:6e:c9:91:72:a4:1c:71:7f:1c:0b:1a:29:ed:c3:fe:de:33:
01:4a:aa:3d:ac:72:d9:e8:d7:91:25:1e:4d:56:f3:07:ee:a6:
11:c8:ca:aa:d2:ea:5d:01:2e:ea:4b:2f:74:11:d6:a4:6b:4e:
92:5c:66:6c:0c:00:f2:e9:d4:69:70:97:10:b2:c9:f2:ca:69:
90:6d:d4:83:94:6e:af:db:f7:fe:6c:7d:1c:58:4e:f2:0a:dc:
fa:50:8b:5c:16:2d:c9:f1:ff:3a:8a:28:cd:47:c0:c9:06:8e:
b1:ca:50:23:19:22:bc:f7:d6:ef:2d:7f:aa:d1:7b:1b:15:10:
5f:f7:95:18:c8:69:63:fe:8d:56:49:91:c2:33:c8:af:c0:51:
b1:c0:a3:8d:f3:ec:ef:ee:45:fa:49:a3:be:e0:30:05:0c:0d:
2e:0d:7b:e3:ec:8f:6b:f9:a3:ed:f3:6f:f9:0f:33:97:50:eb:
3d:da:d1:26:d5:58:ab:55:1c:26:5d:a1:64:b5:ef:56:34:44:
b0:73:d9:e9:e2:f3:a4:ed:1e:fb:5c:40:d0:e8:05:2e:9f:9d:
2d:ae:a2:b4:99:f8:eb:88:76:3e:42:ee:a1:c2:71:16:3a:83:
e7:58:35:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:25:22 2025 by rpki-client