Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
File: q6g10GAXbugWDHkw-H5pNVkJDXg.mft (raw, json)
Hash identifier: fU7XWHjrtS2dT+wlAhl0odALkFC/2pB/PaYChwJqlRk=
Subject key identifier: CA:F5:AB:52:E4:AE:B0:75:DA:84:C3:4C:91:BD:80:F8:CC:DE:0B:A8
Authority key identifier: AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78
Certificate issuer: /CN=aba835d060176ee8160c7930f87e693559090d78
Certificate serial: 01976D067779EDCFE6BFA0969FF2A5F7A288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 06:00:29 +0000
Manifest this update: Sat 14 Jun 2025 06:00:29 +0000
Manifest next update: Sun 15 Jun 2025 06:00:29 +0000
Files and hashes: 1: WxKERWcgZHE3QlVsylKc45ZZndo.roa (hash: ZntJzaaGEPPPr8RAncg56sX3jW5j5m9ABQj+rx3cm+Q=)
2: q6g10GAXbugWDHkw-H5pNVkJDXg.crl (hash: gBxQaSNvBmrzFfmWb/Hdn6eJAnn0RRG0150wQlG4mNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:77:79:ed:cf:e6:bf:a0:96:9f:f2:a5:f7:a2:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba835d060176ee8160c7930f87e693559090d78
Validity
Not Before: Jun 14 06:00:29 2025 GMT
Not After : Jun 15 06:00:29 2025 GMT
Subject: CN=caf5ab52e4aeb075da84c34c91bd80f8ccde0ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4d:33:4d:91:83:49:be:d4:bc:07:ac:75:99:
9d:0b:2d:90:a6:03:cc:5a:34:2d:47:82:d8:7f:32:
f5:ec:c5:0d:be:2f:34:8c:2b:84:9f:1e:e6:5a:83:
46:70:c3:8d:bf:36:b9:f8:04:f0:dc:ce:0c:b4:c3:
fc:28:ac:33:d0:5f:5f:68:bd:0e:1f:37:b0:1c:74:
3c:a6:a5:98:b0:7b:5f:54:c7:ef:e7:6c:f5:90:e2:
7c:f2:d3:37:65:21:76:0f:48:99:ea:70:10:9f:f8:
57:81:ae:f3:71:9e:68:24:15:63:4e:3b:6c:f9:09:
06:f7:f7:22:d6:4d:1b:b2:9b:d1:d0:36:a4:d9:06:
41:b7:e0:8a:f4:e8:62:25:5a:47:25:8f:33:f0:1f:
69:01:72:b0:43:26:af:3f:74:48:28:83:ed:42:fc:
63:4b:da:de:7b:29:34:65:ed:f0:a7:b0:7e:9c:e6:
91:48:84:d4:fe:bf:d0:0b:99:03:a5:09:50:72:27:
79:64:92:4a:99:80:8f:40:10:1b:da:2d:c1:1f:96:
97:11:3c:26:7a:f8:04:4e:ec:29:b4:bb:3b:7f:1e:
f7:bb:bd:7c:45:51:71:74:5a:d3:12:58:fc:2b:5b:
b6:db:ad:90:5a:65:0f:5e:1b:b2:9a:e5:a1:dd:07:
70:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F5:AB:52:E4:AE:B0:75:DA:84:C3:4C:91:BD:80:F8:CC:DE:0B:A8
X509v3 Authority Key Identifier:
keyid:AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:6e:b3:ab:41:81:e6:83:37:98:87:3d:9a:85:dc:8f:af:e0:
dd:03:c0:37:24:0f:a1:45:66:fb:38:a9:b1:d6:1f:e9:e9:a5:
61:71:ec:84:19:ef:19:99:4d:19:2f:2e:d0:18:0b:f7:d9:9c:
bc:04:f8:54:26:45:42:a7:c1:ac:a6:54:89:9b:ba:a6:50:ba:
fe:00:2b:c1:dd:1c:c4:1f:36:02:69:e0:9a:3a:7a:47:2c:ea:
96:c8:92:60:54:ef:bc:b6:4c:40:a7:df:54:86:ff:76:a3:6b:
30:3c:84:cf:06:78:0d:73:66:47:4c:4e:c4:3f:ee:8d:bb:71:
2f:0b:46:0a:8c:61:71:fa:a8:b7:62:2d:f8:75:c1:33:ca:27:
6f:1f:03:a4:04:bd:ac:57:37:29:40:d4:37:52:b2:c0:c2:b2:
ff:b0:4d:d6:23:06:01:cc:6f:2b:ef:91:78:5b:79:c4:54:09:
a4:52:09:97:1e:55:84:e4:0b:2e:78:16:52:d2:4c:34:a2:da:
8e:c2:2d:2d:10:3b:20:6c:dd:34:0d:39:fd:e6:1c:d8:51:ac:
f3:ba:a1:bf:e8:91:b2:ad:58:cc:dd:b3:1d:8a:1a:06:09:8b:
34:a4:71:2a:f4:39:0d:d1:33:d0:91:1b:ac:90:ef:e4:c0:b9:
8d:97:51:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:57:05 2025 by rpki-client