Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
File: q3vjT10mnaUCqmg0i_B7ktksDMQ.mft (raw, json)
Hash identifier: 1Q3ekSkOjjqiJExkXsqcnjDMF/nTnGkCHx3A+QdPVAo=
Subject key identifier: 60:87:37:8C:94:5F:E1:34:0E:A7:DA:ED:0C:1A:DD:4F:2F:56:9A:36
Authority key identifier: AB:7B:E3:4F:5D:26:9D:A5:02:AA:68:34:8B:F0:7B:92:D9:2C:0C:C4
Certificate issuer: /CN=ab7be34f5d269da502aa68348bf07b92d92c0cc4
Certificate serial: 01965C8381B136B909CDE184AF7204EE0F08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
Manifest number: 07
Signing time: Tue 22 Apr 2025 08:00:44 +0000
Manifest this update: Tue 22 Apr 2025 08:00:44 +0000
Manifest next update: Wed 23 Apr 2025 08:00:44 +0000
Files and hashes: 1: 7abujg5YyGw-Dy5kOxbayEhXp8E.roa (hash: lOz5VIr6Vz6VAh0bdDShfDUIzKOutVJzrANsECMkN+c=)
2: q3vjT10mnaUCqmg0i_B7ktksDMQ.crl (hash: YJg6C8F0NocTQC1ZyhQ/vBi9/31QLiCrNuOj4RCr6No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:83:81:b1:36:b9:09:cd:e1:84:af:72:04:ee:0f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7be34f5d269da502aa68348bf07b92d92c0cc4
Validity
Not Before: Apr 22 08:00:44 2025 GMT
Not After : Apr 23 08:00:44 2025 GMT
Subject: CN=6087378c945fe1340ea7daed0c1add4f2f569a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:56:47:c9:37:9d:70:8d:f9:b5:cb:1e:66:a4:
2d:9c:49:79:af:68:58:08:4d:f0:2e:41:93:8f:a0:
b1:66:53:83:31:6b:f3:8b:e7:24:1e:99:cf:09:7e:
50:42:b3:5f:00:7a:a4:60:12:68:f1:bd:a3:f6:b8:
9d:5f:f8:77:ca:31:86:88:ed:20:84:50:fa:8c:1f:
0a:be:4c:bb:93:85:ad:fc:1c:be:e9:ff:76:55:3a:
1a:30:8d:2f:99:76:de:42:24:22:3b:59:8f:15:bb:
16:b3:2d:e8:52:6f:b7:03:19:f3:78:7c:b5:a9:8a:
73:b1:7f:ad:2f:02:8d:25:74:35:78:0f:a1:b3:5a:
0c:21:ed:a1:d9:1b:6a:63:49:ec:9a:73:47:bf:6f:
ca:ab:d2:27:44:3b:0f:09:c2:54:91:fd:48:3d:a9:
f1:1d:7e:6d:fc:96:eb:e7:2f:53:1b:4c:93:ad:65:
8b:67:8c:d2:f5:be:e1:2f:80:27:a2:5a:d4:c8:f7:
6b:4b:f8:0f:55:24:74:b0:33:55:cb:96:81:35:84:
e7:10:d0:2d:77:f9:99:b3:07:75:74:b2:1e:9d:c8:
64:c6:6a:af:a4:9c:e8:c2:d2:10:e2:f2:3c:5f:d6:
72:73:e6:22:98:78:0c:40:bd:72:0e:ab:83:d7:9e:
54:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:87:37:8C:94:5F:E1:34:0E:A7:DA:ED:0C:1A:DD:4F:2F:56:9A:36
X509v3 Authority Key Identifier:
keyid:AB:7B:E3:4F:5D:26:9D:A5:02:AA:68:34:8B:F0:7B:92:D9:2C:0C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:9b:e7:ae:59:f4:78:0e:50:f5:ae:f2:72:03:21:36:ab:18:
8a:0e:47:e7:81:a6:4d:24:f8:e1:cf:50:7e:40:1e:a1:52:1b:
78:c8:08:2d:14:38:86:e8:1c:43:12:72:5b:28:4f:90:87:51:
d7:67:04:82:52:b3:50:c6:00:12:6c:71:47:e0:7a:5a:94:3a:
16:b0:98:59:a8:95:5d:81:f8:a4:fb:31:0b:e3:e6:95:05:f6:
96:45:82:5e:17:12:15:62:98:6b:87:9a:7a:19:71:79:c7:dd:
20:ae:2f:22:08:71:44:0d:b0:f7:8b:09:03:6d:c2:d0:82:8a:
2b:35:12:73:c0:2e:6a:a0:9c:05:29:a3:71:9a:56:20:a0:02:
75:06:2c:ed:78:9f:05:ca:4f:89:7d:06:ce:23:e9:7a:c1:c2:
ff:ff:66:7c:61:d3:ba:42:12:75:3e:5e:ce:96:fc:53:4d:36:
6f:dc:e8:0b:cd:7f:5d:1f:9f:26:09:69:c2:5a:9a:0a:1a:7f:
d9:9d:04:f7:5d:de:16:f2:3e:51:3d:02:e6:6d:10:2d:7a:4e:
c7:34:b9:a2:79:99:d0:e9:34:5b:15:83:cd:e0:75:e2:a7:ee:
fc:7d:18:31:9a:33:b5:40:1c:8f:13:ee:69:86:df:86:3d:c1:
41:2b:2a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:31:17 2025 by rpki-client