Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
File: q-CopGLQ3h9NMBLD455c2mA-j5E.mft (raw, json)
Hash identifier: en/OJ+0PrEoznx6/wjR6mnm1TlQdWRIbTEV5v/+HBKU=
Subject key identifier: AF:B6:73:FC:50:C4:69:02:3B:65:A4:EC:86:30:DC:D5:72:4A:1B:19
Authority key identifier: AB:E0:A8:A4:62:D0:DE:1F:4D:30:12:C3:E3:9E:5C:DA:60:3E:8F:91
Certificate issuer: /CN=abe0a8a462d0de1f4d3012c3e39e5cda603e8f91
Certificate serial: 019649A121B4695BE076782CD03F47395B0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
Manifest number: 114A
Signing time: Fri 18 Apr 2025 16:00:18 +0000
Manifest this update: Fri 18 Apr 2025 16:00:18 +0000
Manifest next update: Sat 19 Apr 2025 16:00:18 +0000
Files and hashes: 1: 1W5smHKXook3Cttl9rBFCphz4iU.roa (hash: pODFfCt0njdSi3l+0iabpv9dot/GnoaQcWWIJ30v1gM=)
2: q-CopGLQ3h9NMBLD455c2mA-j5E.crl (hash: XBPO7NCRm27l+yOAn6ys2XvZeFfHMBPj/dC1veYA4T0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:a1:21:b4:69:5b:e0:76:78:2c:d0:3f:47:39:5b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe0a8a462d0de1f4d3012c3e39e5cda603e8f91
Validity
Not Before: Apr 18 16:00:18 2025 GMT
Not After : Apr 19 16:00:18 2025 GMT
Subject: CN=afb673fc50c469023b65a4ec8630dcd5724a1b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:94:3d:76:b4:a9:81:0f:26:1a:7f:86:fb:06:
30:44:8f:6e:9f:09:2a:e6:4c:24:b8:69:51:58:f8:
00:44:78:af:c8:65:34:88:67:71:3c:5e:81:4c:37:
16:ef:64:fd:7f:63:66:ee:50:7f:9d:31:84:85:c2:
d9:a3:7c:60:4e:0f:96:27:4d:4f:b8:0b:3f:82:45:
f8:bb:04:cc:aa:2b:8a:0a:c4:bc:5f:ae:37:c1:d8:
67:97:96:31:d5:2c:58:d3:7f:7c:b8:e3:65:0e:c8:
b1:d3:7b:a0:51:38:b7:47:d8:61:21:43:67:2f:a8:
65:03:a5:be:bb:60:09:f3:93:9f:fb:dc:02:b8:f9:
16:4e:91:1b:92:73:a3:d5:fc:84:85:88:a3:39:bc:
be:ff:69:3f:84:c6:18:a1:b4:fb:a9:84:0c:37:ae:
9a:00:f5:cb:0b:97:19:2b:bd:22:9d:1e:0a:47:4f:
93:1f:9b:37:f4:2b:36:15:cb:fb:3f:af:96:e8:d8:
c4:28:e8:53:4f:bf:65:4e:16:c5:5c:a8:ca:56:b5:
1c:7d:a7:ae:1a:74:6b:85:9b:d9:53:5d:6e:c4:f2:
3f:52:46:9d:c3:c6:f6:5b:79:11:21:24:b7:8e:15:
48:95:51:e8:f0:f2:de:40:6e:dd:b5:65:cb:e4:4b:
7c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B6:73:FC:50:C4:69:02:3B:65:A4:EC:86:30:DC:D5:72:4A:1B:19
X509v3 Authority Key Identifier:
keyid:AB:E0:A8:A4:62:D0:DE:1F:4D:30:12:C3:E3:9E:5C:DA:60:3E:8F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:71:77:6b:5f:ac:0b:87:fa:e6:d6:52:38:a3:4b:ee:ac:12:
57:22:b1:ae:ca:6b:81:a3:75:a4:5b:35:df:54:34:12:73:93:
81:58:54:58:ce:2c:24:63:38:d4:f2:ae:63:fd:1a:f0:f7:db:
6f:40:41:a1:43:a0:03:89:ca:91:53:ca:b9:44:ac:37:42:4b:
90:20:06:07:2c:d3:83:61:d2:f3:6f:09:fb:aa:64:3e:23:7a:
67:cc:97:9f:72:e1:c1:95:c3:6a:f2:d7:cf:11:78:05:cc:df:
57:53:bf:95:2a:60:19:a2:d3:56:7e:7c:e7:c9:be:cb:24:9e:
50:92:f8:dc:98:de:00:6e:d8:cf:9c:22:bb:c3:6c:e6:19:88:
2e:e9:e8:28:45:6c:76:8c:04:7d:f0:88:13:19:c8:4e:32:b1:
96:d2:47:8b:3f:45:59:2f:13:08:16:a1:f8:b8:35:84:97:2f:
a3:c6:84:13:14:95:ac:5a:91:57:7b:41:d4:8f:21:67:dc:b0:
c2:aa:60:7e:7d:d9:bf:69:4d:b8:ef:28:0b:a3:78:76:04:70:
b1:46:7f:5e:4c:d6:57:26:53:46:17:6a:9c:55:b0:9a:bd:9f:
9c:86:b1:fe:41:3f:df:1c:66:50:5b:4e:29:2e:fb:70:7d:0f:
14:d0:a2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:59:40 2025 by rpki-client