Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
File: q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft (raw, json)
Hash identifier: u9VVYiOqzAeel++9UXL3RkmYZrw5ZQFLIFsSyARyxNM=
Subject key identifier: 23:C6:D5:A5:1D:D5:E0:4A:B9:B5:43:1F:64:1C:55:D4:27:08:F4:E4
Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
Certificate issuer: /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Certificate serial: 019651FFEFD43C6987D492F3430F08EDD674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
Manifest number: 1507
Signing time: Sun 20 Apr 2025 07:00:49 +0000
Manifest this update: Sun 20 Apr 2025 07:00:49 +0000
Manifest next update: Mon 21 Apr 2025 07:00:49 +0000
Files and hashes: 1: 7XQS9fgmC0xNqPuIMhkAaeUEx0g.roa (hash: 30Yt0v1j2/2WiJgCszBG8BLPKcC0q4CL1Hk0j9TqmbM=)
2: CGRTCK3Ge4ADHzCWSkOhJS2ZO-g.roa (hash: qGlSQR4VzbycTQ4yuefrd6Ta0FRZb+PMZoj6HNp+HDk=)
3: q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl (hash: BUAsE/GYwWVYHiZ4FRoZv2ow4H2S7Jdpj0mU3HI0RDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:ff:ef:d4:3c:69:87:d4:92:f3:43:0f:08:ed:d6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Validity
Not Before: Apr 20 07:00:49 2025 GMT
Not After : Apr 21 07:00:49 2025 GMT
Subject: CN=23c6d5a51dd5e04ab9b5431f641c55d42708f4e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a9:59:21:5e:d0:88:fe:71:47:2f:84:37:c4:
c2:22:51:b0:15:8e:38:4d:20:e9:2c:0e:d6:75:96:
04:15:e2:b2:6b:42:e8:3a:11:cf:27:c3:0e:0d:1f:
a0:c7:0b:18:7f:92:1f:74:c9:db:82:0c:0d:63:91:
72:ca:54:bb:06:bf:d3:33:ac:e6:13:e8:ec:2e:22:
0a:28:70:a7:10:ff:58:28:07:22:20:d6:de:b3:33:
6c:93:58:61:2f:8f:e0:ef:f7:d0:b8:f9:b1:90:d2:
e1:82:dd:48:fa:fe:3d:95:2c:4a:28:78:45:39:72:
84:12:bf:3b:bc:f0:6e:a1:6f:10:20:45:a7:9a:41:
b8:80:c8:0e:44:ad:29:06:30:47:03:4c:09:8f:d3:
cb:b2:77:6d:fe:97:8e:09:d8:03:38:ac:20:2d:eb:
d0:de:11:f8:86:d4:e8:a7:9e:b4:f1:e1:7a:75:86:
95:a6:cb:1e:a3:27:d4:94:65:9e:a8:e8:d6:46:07:
6a:b9:79:c1:82:76:fb:16:69:78:59:40:91:2e:1d:
65:74:c9:a2:9a:0c:d4:82:98:bd:63:e9:07:f6:ae:
bc:7c:6c:46:bf:6d:b5:d7:8a:36:e4:26:ad:43:08:
a1:f9:f3:fd:cb:cf:15:14:e5:cb:d2:f9:0a:1d:01:
a3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C6:D5:A5:1D:D5:E0:4A:B9:B5:43:1F:64:1C:55:D4:27:08:F4:E4
X509v3 Authority Key Identifier:
keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3d:d3:61:17:50:a1:8d:8c:f3:bd:8e:4a:de:cf:57:c3:6b:
70:79:b5:f3:56:25:b4:7b:6a:bd:43:0a:c1:7f:87:d0:64:65:
24:f0:4e:1b:a6:50:0d:24:36:24:13:1d:80:dc:40:34:aa:64:
84:be:58:83:25:a9:fb:35:d3:ad:46:37:ef:ea:7a:33:5d:c8:
06:25:e1:47:54:36:5a:d0:48:68:59:c7:9d:a8:a0:19:9a:fe:
64:64:10:2d:6e:e7:ec:2a:68:8e:03:53:f7:31:b6:98:71:7d:
de:59:ad:0c:8f:ba:73:0f:bf:d6:ff:b3:07:81:9d:27:dc:d0:
3c:c1:db:7b:c1:a2:0f:98:ff:6f:2c:6d:c8:6c:6d:8c:27:d9:
5c:06:39:06:29:ac:8e:17:b7:72:57:73:a4:4f:7d:64:86:44:
a3:65:16:0a:1c:e0:91:c5:b9:b6:8c:55:6d:70:db:38:72:65:
7f:32:1c:06:9b:54:87:fb:43:f2:b3:6d:e2:af:60:e3:b8:a8:
fc:80:48:b0:48:72:69:2c:0c:a8:36:49:7c:3c:00:db:db:75:
4c:97:8c:2c:1d:7f:51:af:da:ef:87:85:a7:a1:4c:bc:25:a5:
7b:1e:12:1b:99:58:ed:10:21:9f:2a:eb:76:47:98:3b:29:fa:
fd:a1:89:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:23:41 2025 by rpki-client