Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
File: q6g10GAXbugWDHkw-H5pNVkJDXg.mft (raw, json)
Hash identifier: M3V8f8hHdi66Xau4/9W1I5/xr3g6DtqAwPRMxQxNe5U=
Subject key identifier: 69:C3:4E:FA:BA:6D:85:A4:EA:A0:E1:A3:74:3B:5A:90:AB:C7:5A:EF
Authority key identifier: AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78
Certificate issuer: /CN=aba835d060176ee8160c7930f87e693559090d78
Certificate serial: 01965500DD669A1792EC9024B2C798AE0C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 21:00:42 +0000
Manifest this update: Sun 20 Apr 2025 21:00:42 +0000
Manifest next update: Mon 21 Apr 2025 21:00:42 +0000
Files and hashes: 1: WxKERWcgZHE3QlVsylKc45ZZndo.roa (hash: ZntJzaaGEPPPr8RAncg56sX3jW5j5m9ABQj+rx3cm+Q=)
2: q6g10GAXbugWDHkw-H5pNVkJDXg.crl (hash: r53ZaLT55/utEM62CJRSnqMSLp2dkykBrwFNbXTKMts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:dd:66:9a:17:92:ec:90:24:b2:c7:98:ae:0c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba835d060176ee8160c7930f87e693559090d78
Validity
Not Before: Apr 20 21:00:42 2025 GMT
Not After : Apr 21 21:00:42 2025 GMT
Subject: CN=69c34efaba6d85a4eaa0e1a3743b5a90abc75aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:56:e0:1a:8d:e7:42:15:49:1b:1e:a4:13:18:
61:fe:b2:d6:68:63:05:0a:47:3a:54:bb:05:0c:61:
e5:71:d9:c0:95:2a:8f:41:b7:22:cb:71:cd:35:24:
a0:62:8c:f8:49:1a:e8:66:bd:f4:2b:0a:42:18:54:
3d:b8:24:0a:54:45:1a:ec:a1:64:38:de:f7:94:e1:
ef:c8:cb:9a:d8:67:69:4f:92:f3:79:30:80:64:d2:
15:8d:57:4e:22:47:32:54:13:c3:98:45:1e:c0:e6:
23:0c:75:d0:3a:bf:72:b4:87:8d:79:27:ee:59:46:
02:d3:d2:d9:1e:84:66:6d:37:c4:a3:15:4e:8c:0e:
d0:5e:15:c0:25:ec:05:57:4b:36:ca:0a:5e:3b:03:
ba:b5:31:fd:e6:1e:fe:02:31:0b:3c:34:86:6c:44:
68:64:bf:60:59:e1:70:28:8f:d2:71:e8:91:ca:a5:
73:d1:ed:30:22:80:34:0b:8b:9a:df:bc:59:b3:15:
0e:dd:f7:f7:cd:27:a6:a1:cd:a9:58:c3:c1:b7:b1:
40:27:a6:b7:0b:3c:0b:e2:16:d4:e1:13:d0:c3:e6:
be:e6:5c:2b:5f:9a:60:cf:7b:91:cc:2f:b3:2a:a7:
a3:3b:1b:bd:a5:01:3e:90:a7:dc:2c:b6:bc:18:ac:
b2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C3:4E:FA:BA:6D:85:A4:EA:A0:E1:A3:74:3B:5A:90:AB:C7:5A:EF
X509v3 Authority Key Identifier:
keyid:AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:76:d8:9f:11:b6:3f:30:c5:b7:53:bc:a2:4e:0e:0e:f9:9f:
48:85:c9:bd:1b:4a:cf:52:bd:35:0c:1c:f8:38:14:1e:41:94:
08:be:60:4f:a8:23:21:6d:8b:7f:c6:f9:45:fc:0a:71:f7:15:
8b:39:7f:cf:fa:a9:a8:0c:32:fb:cb:fa:c2:d7:1b:e1:33:ce:
7b:5c:16:33:dd:24:cd:62:d8:2b:d3:1e:85:b8:d8:23:e1:67:
59:19:3b:9e:0e:61:3d:97:26:6f:35:2e:55:07:ad:b0:3f:df:
c6:32:49:0e:6d:4a:eb:1a:01:27:d7:d5:9f:61:66:73:f6:8f:
d1:b4:09:69:1c:51:89:a8:6d:41:38:a8:a0:1c:48:ef:c3:05:
c6:d4:c2:b0:9f:f0:a4:3f:56:8a:1f:81:23:d0:49:c6:2c:5b:
fd:2d:65:ae:5e:16:ab:79:bc:ae:79:e1:7f:12:cc:28:07:0f:
db:ef:0d:a6:f0:e6:99:8d:1c:ab:aa:ed:52:10:cb:07:58:c3:
f3:a7:fd:73:d9:c0:69:9a:f3:ae:68:b9:34:a7:1b:e6:ec:15:
de:11:06:15:83:5d:43:ab:2e:b1:8b:6f:8a:1d:67:c0:7e:2e:
7a:bc:e5:e3:39:9c:c1:e6:7b:9b:cb:ae:01:34:d2:4a:1c:ff:
62:2a:ee:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:01:27 2025 by rpki-client