Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
File: q4gs1tGWrh-WhyrK54MhvnqSuOs.mft (raw, json)
Hash identifier: RWP9SAvprr8Sp+s5faExUFdGWPC+VNHu1fVwY3xyEtc=
Subject key identifier: B6:F5:46:08:06:DF:4F:B8:BD:68:AC:E8:8A:04:70:D3:81:D3:AC:EE
Authority key identifier: AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
Certificate issuer: /CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Certificate serial: 0196944DBA9B7DDBEA13148FA63428D0DAF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
Manifest number: 1521
Signing time: Sat 03 May 2025 04:00:43 +0000
Manifest this update: Sat 03 May 2025 04:00:43 +0000
Manifest next update: Sun 04 May 2025 04:00:43 +0000
Files and hashes: 1: F9AhQNt9Udb849dXCdScX4FqhCA.roa (hash: px1gv2xGNlwFH8D+WdL+fioWoJ0lDCB6LorhXUTwMrQ=)
2: LVdTUXxiMF9XJQST5UOIEXtOCYY.roa (hash: 1JvKiaaOoOhGqXZ9Dq7CyaK8VVJ8p+cu5cPkQb+6aUs=)
3: q4gs1tGWrh-WhyrK54MhvnqSuOs.crl (hash: QOCOu0vDk435IM8LPxG2nKgLD9ouP2VeKpcEn77wIvg=)
4: skwwLakYgia163942_1PcvI2KGM.roa (hash: RjC50vXYyJh6b6nwgCbvXjKOTFm1vHWVMG4k+WUjU5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:4d:ba:9b:7d:db:ea:13:14:8f:a6:34:28:d0:da:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Validity
Not Before: May 3 04:00:43 2025 GMT
Not After : May 4 04:00:43 2025 GMT
Subject: CN=b6f5460806df4fb8bd68ace88a0470d381d3acee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:de:7b:d3:b9:a6:d4:ed:2f:65:79:a0:bd:7a:
dc:96:40:9e:7c:88:31:29:d1:b4:15:53:4b:38:56:
cc:e1:3a:77:8a:95:a9:c8:5c:61:bc:a0:b1:61:a8:
f3:8a:ec:48:4a:24:f7:a1:3d:6e:67:41:53:6f:2d:
e5:1b:2c:f4:35:ab:9a:4d:c9:8f:51:b7:f7:8c:18:
42:77:a1:16:00:fe:a0:a6:23:82:41:c6:81:2e:74:
1b:2c:c0:5d:c7:d0:cb:de:ec:23:f3:4a:6d:63:20:
e8:09:0a:1b:db:1c:60:37:35:28:19:ac:08:52:97:
52:c4:2a:aa:c9:38:da:13:9a:ee:6e:38:30:15:91:
d2:37:2c:e4:e6:27:ae:75:d8:be:26:a3:4c:32:99:
5c:9e:e4:9f:6b:cd:ce:20:1c:9f:99:a7:9c:57:5f:
64:37:c0:44:7c:ec:2b:bb:b9:63:f0:3f:cf:03:95:
1d:03:b1:b4:de:49:ee:9c:f1:f7:64:b2:d9:30:ca:
a3:a9:09:4b:10:55:ef:82:3e:6f:50:0a:3d:e2:fc:
c8:fe:f5:ab:45:39:44:a0:25:cd:eb:49:d6:30:a4:
6c:0d:3b:a0:0b:1c:04:08:2e:1c:8a:a7:2d:1f:f7:
ef:9d:52:34:34:21:9b:c0:b0:e4:9e:f1:ab:21:be:
3a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F5:46:08:06:DF:4F:B8:BD:68:AC:E8:8A:04:70:D3:81:D3:AC:EE
X509v3 Authority Key Identifier:
keyid:AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:3e:94:a0:5b:cf:b5:0e:a4:af:11:41:cf:1a:64:3a:82:75:
cd:d7:34:56:f1:c9:6f:2c:28:f1:a7:d7:66:52:4f:27:82:c6:
75:a0:92:b9:e8:f3:42:d5:e0:85:c0:da:85:2f:2b:65:b0:b7:
5c:29:23:e1:82:33:01:01:2b:6f:85:ce:19:14:2c:a8:5e:1d:
be:ce:95:dd:16:74:e9:90:b6:c7:e8:4f:96:6f:99:83:63:27:
98:be:4f:2c:45:74:b1:db:15:c1:3f:15:03:76:e5:cc:cb:62:
b4:d7:24:94:66:88:1e:35:09:e2:96:aa:ae:fa:1d:fb:07:85:
2e:67:1b:83:99:74:ad:64:73:aa:b9:62:0c:bf:a4:d7:24:70:
d8:da:3d:21:00:72:54:f3:f6:1e:be:be:52:91:45:3f:c5:74:
a5:9e:e7:f2:47:73:af:74:03:08:43:28:18:35:51:2b:c8:b6:
55:d7:ff:9e:f7:2e:16:bb:4d:1a:80:f0:ed:ca:a5:9d:02:98:
ad:a1:4e:52:92:28:91:27:71:2a:86:6b:4d:64:05:dd:c2:9a:
07:33:5e:d8:e9:f5:54:a0:e8:5c:53:16:61:8d:a6:43:46:78:
cb:a5:f3:d1:bd:41:9f:bf:ee:d4:78:1b:81:3a:a2:36:8c:ab:
16:a6:8a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:36:42 2025 by rpki-client