Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/cb0d26-893b-4804-b5d2-0c584926d821/1/q-Xi6xcODCq4YdswjbvLKl_V8Y0.mft
File: q-Xi6xcODCq4YdswjbvLKl_V8Y0.mft (raw, json)
Hash identifier: UYWFMxfy+V44ZhgYJ+CtU1ZRsxv5uj5sluTh6HpcvlE=
Subject key identifier: 47:07:D1:19:8B:12:EE:A1:0F:11:43:EE:AC:28:D5:C0:0F:40:95:94
Authority key identifier: AB:E5:E2:EB:17:0E:0C:2A:B8:61:DB:30:8D:BB:CB:2A:5F:D5:F1:8D
Certificate issuer: /CN=abe5e2eb170e0c2ab861db308dbbcb2a5fd5f18d
Certificate serial: 01967679FCA44D8025D8378BCF9AD09142ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-Xi6xcODCq4YdswjbvLKl_V8Y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/cb0d26-893b-4804-b5d2-0c584926d821/1/q-Xi6xcODCq4YdswjbvLKl_V8Y0.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 09:00:28 +0000
Manifest this update: Sun 27 Apr 2025 09:00:28 +0000
Manifest next update: Mon 28 Apr 2025 09:00:28 +0000
Files and hashes: 1: cMGXmTRMraio0J6I7HNBr7NWueA.roa (hash: fmI2PBkGPQFw2If/jchTfAwZs8fPgvDxYocX6ZJt4ZY=)
2: q-Xi6xcODCq4YdswjbvLKl_V8Y0.crl (hash: XcrahgqgVF5Y+kQl2xC7vSyWRN4CNBagwESDWUWIsuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/cb0d26-893b-4804-b5d2-0c584926d821/1/q-Xi6xcODCq4YdswjbvLKl_V8Y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/cb0d26-893b-4804-b5d2-0c584926d821/1/q-Xi6xcODCq4YdswjbvLKl_V8Y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/q-Xi6xcODCq4YdswjbvLKl_V8Y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:fc:a4:4d:80:25:d8:37:8b:cf:9a:d0:91:42:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe5e2eb170e0c2ab861db308dbbcb2a5fd5f18d
Validity
Not Before: Apr 27 09:00:28 2025 GMT
Not After : Apr 28 09:00:28 2025 GMT
Subject: CN=4707d1198b12eea10f1143eeac28d5c00f409594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:69:b0:e6:5b:d4:cc:5c:6d:ee:27:49:7a:aa:
63:a4:ec:e5:fe:75:f3:9e:89:a5:c5:88:b8:54:b6:
13:e7:7f:0e:f2:01:bf:e9:fb:10:59:74:7f:54:e9:
41:12:cf:2f:9a:0f:84:cb:69:02:df:86:d6:97:ef:
75:33:de:51:bf:99:b9:ae:13:0e:10:f3:2b:6c:8d:
d1:ee:cc:8a:14:4a:61:d8:fa:87:55:4e:ed:39:ed:
7a:90:76:e5:29:1d:da:73:ec:d8:6f:23:1a:e5:bb:
eb:03:e0:2d:fb:25:1c:b9:92:8f:f8:9b:e7:ed:ee:
5a:d5:90:8e:47:d1:a4:77:ea:b9:fb:01:13:ba:ea:
2b:aa:51:7a:b8:49:82:48:0b:ea:92:c5:39:15:b6:
9b:48:fb:97:80:8c:74:47:e8:5a:82:cf:6d:6c:78:
c6:0f:57:2d:19:99:92:69:51:05:22:a8:7a:84:cf:
4d:b9:7b:54:4c:a8:46:75:d4:62:ab:24:00:73:11:
c6:42:08:91:14:0e:46:9b:e1:5b:07:d7:12:6f:b1:
2c:ab:36:0a:80:f1:4c:62:c3:db:fa:f3:01:a5:a2:
fc:61:77:6f:65:02:6c:62:d1:ed:ff:0e:47:15:84:
c8:26:81:62:bc:a0:1e:0a:79:13:2e:f1:8d:2c:9d:
cc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:07:D1:19:8B:12:EE:A1:0F:11:43:EE:AC:28:D5:C0:0F:40:95:94
X509v3 Authority Key Identifier:
keyid:AB:E5:E2:EB:17:0E:0C:2A:B8:61:DB:30:8D:BB:CB:2A:5F:D5:F1:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-Xi6xcODCq4YdswjbvLKl_V8Y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cb0d26-893b-4804-b5d2-0c584926d821/1/q-Xi6xcODCq4YdswjbvLKl_V8Y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cb0d26-893b-4804-b5d2-0c584926d821/1/q-Xi6xcODCq4YdswjbvLKl_V8Y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f7:ee:75:f7:de:dd:31:70:df:b2:bb:b7:67:6a:c0:99:ae:
fe:f0:21:7a:21:b2:c0:e0:7e:6f:f6:be:b9:b2:ec:79:9d:79:
ac:27:c1:c5:44:3d:95:e4:c4:5a:a1:2e:31:49:98:fc:21:b1:
1b:d4:fa:58:86:5b:4f:d2:22:dc:58:e9:7d:35:7f:2a:12:d7:
a7:d6:e3:f5:d0:30:02:a6:d6:cd:61:ef:7b:00:8f:ad:9d:23:
69:18:6a:6a:0a:2e:0c:86:a1:8f:f3:6f:c6:63:59:b9:f9:e6:
fc:01:a2:0d:1f:b3:48:93:d3:b6:f7:91:e0:f8:f3:53:59:be:
47:e8:b0:7b:23:f6:1d:56:5f:7c:a9:b5:85:5a:0d:8b:90:a0:
ac:3f:5c:d2:79:5c:d1:b3:4b:77:11:68:18:59:7d:c3:a5:09:
7f:de:d0:b9:fe:e2:71:6c:e2:95:83:dd:c2:bf:f6:fb:b3:01:
57:d4:74:bb:4f:99:2b:e4:ce:64:c8:4b:48:d9:5a:ab:68:5a:
b1:89:9b:0d:bc:dc:d3:37:f6:f9:fd:c3:2d:14:99:a2:2c:14:
f3:66:6b:7e:c6:9a:49:61:f2:11:aa:cc:99:22:bc:fd:94:32:
88:6c:bf:bb:ab:5b:e8:e3:fb:8d:a2:94:a8:5c:34:34:70:ba:
6f:6a:cb:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:49:15 2025 by rpki-client