Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
File: qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft (raw, json)
Hash identifier: 6+Ts3+T79NCK4hYdJAUpDi6ZigkewrqCJ6zH6voGWzw=
Subject key identifier: B6:7E:BA:01:26:BE:8A:CB:CF:C9:9C:7B:B0:D8:51:EC:BC:81:D8:64
Authority key identifier: A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C
Certificate issuer: /CN=a86e257c32d9dbb819d517d55054f767d7161d2c
Certificate serial: 019659144250D9BDFC0AFFEF0600453E5357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 16:00:21 +0000
Manifest this update: Mon 21 Apr 2025 16:00:21 +0000
Manifest next update: Tue 22 Apr 2025 16:00:21 +0000
Files and hashes: 1: Uebp0JIuP3hxZnZ2gSrGEbFlcC4.roa (hash: ioWjN07GA9Wdsf4jPQTmSsjSBf+lcaQHQxBmquaB1Tg=)
2: qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl (hash: oAQ8zD54Q7lsBsRE1xe9OAlzSU/W3k7fJVMQcrunpU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:42:50:d9:bd:fc:0a:ff:ef:06:00:45:3e:53:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86e257c32d9dbb819d517d55054f767d7161d2c
Validity
Not Before: Apr 21 16:00:21 2025 GMT
Not After : Apr 22 16:00:21 2025 GMT
Subject: CN=b67eba0126be8acbcfc99c7bb0d851ecbc81d864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:54:f5:19:41:5a:03:25:fb:c1:68:43:45:d7:
85:e0:5c:3d:87:9e:94:ec:8a:b6:c6:d1:da:25:6f:
ce:2f:a5:6f:6f:9c:c3:25:7f:1a:6c:f3:97:b5:0e:
6b:8c:d0:91:8f:e6:01:73:be:d9:c8:f3:36:57:92:
da:e9:fc:cd:9c:bb:48:7a:7c:60:48:74:80:03:0c:
87:e0:84:f5:22:e5:36:17:dc:5a:e1:0e:d7:cb:2f:
fa:05:4a:70:bd:d6:24:7e:19:04:b0:13:c9:0c:83:
94:ac:bd:3f:8d:fb:52:75:07:d6:57:64:30:bf:97:
71:5c:1a:6f:f5:65:45:a6:f3:2f:ca:ad:c1:b5:e5:
f4:88:81:7a:5a:0f:3b:72:8f:ad:60:b9:e7:69:41:
a8:35:ec:f6:6c:2a:7f:55:8c:af:84:50:87:b1:f6:
86:1d:f7:a3:f8:d1:b0:9f:9e:89:9e:01:e0:c9:dd:
8e:08:54:f6:a5:3b:55:5e:23:26:54:f8:a4:89:79:
da:3a:63:4e:60:77:d0:4e:42:18:cd:b1:6f:50:b0:
d8:9b:13:a4:44:0a:89:b0:05:7d:a7:f0:4e:1e:3e:
84:8d:90:ac:e0:28:4b:50:bd:16:95:42:16:36:ad:
51:27:14:e5:4a:b2:b9:d7:ab:71:37:54:4c:07:b6:
67:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7E:BA:01:26:BE:8A:CB:CF:C9:9C:7B:B0:D8:51:EC:BC:81:D8:64
X509v3 Authority Key Identifier:
keyid:A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:85:bd:55:e6:a8:60:14:df:db:76:49:6d:61:b9:2f:be:59:
0d:13:eb:82:aa:49:18:14:81:f0:4e:62:c5:ce:e9:1e:d4:67:
cf:17:db:2d:f0:c3:36:57:a7:97:bc:9d:0d:1c:51:32:52:c4:
42:73:be:80:df:d1:6e:08:0f:d2:7f:ef:31:ee:37:fe:08:b2:
69:5e:09:e3:0c:c9:fb:18:bc:9e:6f:0d:23:40:e0:18:a4:54:
84:f7:7d:a1:6b:50:c7:41:f3:5e:14:ab:63:3e:b2:6d:8e:9e:
3b:5a:2f:54:31:a7:ae:03:a7:87:5c:b2:ac:90:d9:56:e6:ac:
18:ee:3f:c5:a1:bb:b0:e1:87:c8:ca:ce:23:ae:7c:0b:0a:84:
9b:7a:b1:07:c8:db:04:a4:1f:19:d5:b0:63:53:39:7a:a3:3e:
72:45:32:f5:d8:90:ed:82:1e:32:60:c4:7e:26:97:92:ad:b4:
e6:a8:6f:08:19:8d:ea:0a:f4:ea:a5:19:76:be:00:91:ad:c1:
ce:59:93:76:e0:86:9b:28:ab:1f:0b:e8:17:60:4d:65:bd:c0:
72:0a:9b:2d:ca:0a:7f:a9:55:23:97:09:1f:c9:c9:89:35:68:
87:fa:0c:ac:63:71:18:59:ff:66:3e:9e:2a:13:98:e6:9c:b6:
20:99:36:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:02:05 2025 by rpki-client