Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
File: q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft (raw, json)
Hash identifier: EYn8mVxTWjlAJTP10scUGeLzVNQ3i4/XlCwpKrP2yjY=
Subject key identifier: 4F:C0:CA:95:3B:9B:12:B9:2C:C0:9A:01:6C:73:19:14:BE:3C:61:C5
Authority key identifier: AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
Certificate issuer: /CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Certificate serial: 019657947BA51EA9878D462622CC11F372EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 09:01:10 +0000
Manifest this update: Mon 21 Apr 2025 09:01:10 +0000
Manifest next update: Tue 22 Apr 2025 09:01:10 +0000
Files and hashes: 1: VZSRxm3ml_A23ijnM9Va4TMWjh0.roa (hash: 7MtkVkF9bomUQvYg1g+MpjW91REswNLWEdz5uVQ3rrI=)
2: q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl (hash: xXjbsP3SYa4vaMfApMz7kYZ5/FkSFCo2ny4IRYS6fOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:7b:a5:1e:a9:87:8d:46:26:22:cc:11:f3:72:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Validity
Not Before: Apr 21 09:01:10 2025 GMT
Not After : Apr 22 09:01:10 2025 GMT
Subject: CN=4fc0ca953b9b12b92cc09a016c731914be3c61c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ea:e8:fd:bb:51:23:3f:8b:bc:1f:47:77:2f:
43:e0:ac:9a:87:a1:54:d1:ec:2d:77:ac:a3:da:f1:
08:8e:ed:55:7a:b7:bf:97:85:a2:4c:7e:23:91:d2:
fe:82:5a:db:85:1b:fd:ea:dc:7a:70:e5:8a:c7:cc:
c7:cf:9d:b9:a7:1e:1d:f1:36:fc:c4:b0:e7:cc:b5:
be:46:7a:c0:f9:bc:7b:5b:6a:2b:1c:4d:64:fb:4c:
84:ea:49:3f:c8:92:b4:b9:bd:28:84:2a:30:68:28:
73:96:c7:76:58:3f:ab:67:ce:df:5e:55:ba:79:98:
81:a3:ad:31:4a:af:f1:13:da:07:c2:f0:90:8f:31:
6f:23:a4:6c:9c:8c:66:29:b6:5a:ca:41:90:e2:d0:
4c:d9:d5:0c:7b:6a:9a:16:6e:1e:51:6e:63:d5:0e:
e5:db:ca:3d:20:31:18:17:f2:d7:25:91:e0:03:96:
e3:de:df:4f:1c:73:c6:6f:56:f8:a2:cf:e0:03:3a:
5c:8c:17:4c:d4:52:29:6c:d8:39:fc:76:4e:d2:41:
7d:c1:a8:fc:ff:70:18:b3:a7:60:66:ed:00:63:20:
06:f6:43:97:1e:09:79:52:9d:a0:40:ad:f2:1b:9c:
e9:9f:e7:9b:6e:eb:8b:ce:99:0d:ce:95:e2:9b:6c:
c7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C0:CA:95:3B:9B:12:B9:2C:C0:9A:01:6C:73:19:14:BE:3C:61:C5
X509v3 Authority Key Identifier:
keyid:AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:8b:79:31:79:2d:71:ad:42:53:36:1e:ea:b3:5c:d0:ff:c9:
b7:fc:8c:72:4f:88:cc:46:56:85:0e:3c:fd:35:90:8a:2f:50:
43:99:8d:7d:38:d3:42:06:d5:82:33:b4:b9:d4:92:94:b2:2d:
da:cb:72:09:8c:75:85:60:84:97:d0:0b:b2:df:00:59:d1:60:
ec:02:04:d3:15:fe:33:b1:b2:a6:e0:3c:35:4e:1f:b4:90:ef:
8a:83:ef:ef:f5:1f:fd:9d:12:44:1d:e9:70:ca:9a:1b:77:53:
5a:92:43:9a:8b:0b:81:76:5a:b2:0f:51:91:42:96:75:11:71:
0e:57:c5:a0:aa:34:c7:49:22:84:9d:4d:ad:6f:a6:e7:0f:b2:
75:25:5b:69:08:7a:e6:5f:a1:9b:f7:ea:a5:ca:79:a9:fc:cb:
8d:a1:2a:34:02:5d:e6:54:a1:57:c8:d3:29:b6:23:1f:7d:ca:
10:89:b1:80:e4:6e:ff:36:bc:46:db:e0:f8:32:2d:dc:3a:40:
88:38:cc:7b:74:fa:8a:a5:5f:b6:80:09:9e:26:58:af:ec:06:
6e:ae:43:45:42:6d:6e:a0:ff:61:e1:ef:95:fa:af:2b:4c:ab:
8a:ae:a6:3f:54:95:aa:1e:ed:7a:1c:61:e0:b0:2e:fb:bb:a0:
e9:4f:a2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:19:35 2025 by rpki-client