Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
File: qT4365yxmDJdZWZzKJJY0o6587g.mft (raw, json)
Hash identifier: dFqLKlDab5WkzABj10uF+5HSlZ6oey8idtT1/ff7u+o=
Subject key identifier: 3F:43:41:69:C9:B1:A9:61:6C:5A:E3:78:52:F3:A5:88:3A:82:FA:6A
Authority key identifier: A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
Certificate issuer: /CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Certificate serial: 019659F07730EE577E6F2BE023685EBE0FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
Manifest number: 1495
Signing time: Mon 21 Apr 2025 20:00:53 +0000
Manifest this update: Mon 21 Apr 2025 20:00:53 +0000
Manifest next update: Tue 22 Apr 2025 20:00:53 +0000
Files and hashes: 1: B6IAypRDNnn3wQIonYGMbrtebVA.roa (hash: RDNajdiQ2iOHeS1ehJ984LhPxM3hBSKi1PJW1BaavLE=)
2: qT4365yxmDJdZWZzKJJY0o6587g.crl (hash: 149L6XoekRVcDqpgyvBmNNLy6VsK3VlTIKi5ectCjds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:77:30:ee:57:7e:6f:2b:e0:23:68:5e:be:0f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Validity
Not Before: Apr 21 20:00:53 2025 GMT
Not After : Apr 22 20:00:53 2025 GMT
Subject: CN=3f434169c9b1a9616c5ae37852f3a5883a82fa6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f5:ce:25:0a:95:ef:c9:ab:ec:43:e2:5d:39:
3a:94:ca:38:58:73:a1:70:41:0c:ca:f1:5c:9a:14:
83:6f:b2:43:1e:7f:c6:9d:05:3d:a5:52:85:f3:12:
ee:55:90:4d:24:4d:06:51:a8:c8:60:63:50:85:7f:
80:ca:21:39:49:9a:8e:6d:f1:8f:18:4d:91:aa:3b:
ca:2a:fe:45:79:e2:1e:74:a1:65:6a:11:cf:62:e8:
2f:e6:f6:96:25:a5:0f:57:56:61:3f:c7:a0:66:19:
70:17:11:44:98:28:d1:ad:bf:c6:8d:cc:b6:4e:10:
b0:82:89:bb:ed:b9:93:7f:01:e2:e5:71:de:72:ae:
20:97:6e:cb:2f:83:9a:7e:9b:10:d0:97:27:67:32:
07:2c:f7:5c:94:0f:60:09:25:5c:2b:70:f0:e1:b2:
29:46:05:8b:79:ab:d4:02:ff:31:59:77:ae:9d:65:
a2:0e:66:04:6b:43:d8:30:06:89:15:13:af:ce:09:
f1:37:5a:27:78:00:1b:c3:2a:c8:6f:ba:ea:e8:e8:
55:9d:60:04:bc:6e:cd:d2:f2:83:7f:bd:bb:41:d2:
de:9f:79:10:41:1e:58:d5:55:3a:3e:f4:d4:04:a9:
b0:e6:e8:0f:be:ef:e1:88:cd:67:be:b6:62:a2:0f:
c3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:43:41:69:C9:B1:A9:61:6C:5A:E3:78:52:F3:A5:88:3A:82:FA:6A
X509v3 Authority Key Identifier:
keyid:A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:10:b2:29:ee:8e:cf:24:a5:6d:d6:30:52:b0:69:27:03:ce:
3f:05:5e:c7:80:95:db:3e:06:10:cb:79:74:94:22:22:64:82:
ea:3b:89:f0:e3:09:95:b9:c9:68:d5:ce:42:e8:ae:45:22:f9:
ca:9b:f3:5b:f1:bc:d8:25:86:f6:f2:d6:a8:98:67:42:0e:91:
de:a9:95:0b:9b:4c:c4:40:5e:07:3b:9e:2c:fc:6e:75:6c:f0:
ed:e8:36:b5:19:02:24:0c:6d:06:e5:23:47:c8:18:72:3a:a2:
c3:b2:29:cc:8c:43:4b:0c:ed:37:70:15:a6:62:8b:ed:28:0b:
9b:82:7e:63:8c:04:45:74:d5:1a:08:ad:09:39:be:6a:5c:4a:
55:22:92:8e:8a:53:d6:b4:3f:dd:5d:f9:1d:7b:df:e8:56:a7:
9d:45:c8:c2:57:b4:70:cb:82:e4:e0:a3:04:b4:ec:7a:68:e3:
6d:27:ba:be:50:b6:54:dd:dc:4d:3a:94:69:d4:5a:b9:10:b1:
d3:b1:29:df:75:19:8c:2b:17:46:43:dc:5a:0b:5c:bd:79:02:
3e:bb:80:9d:f1:b3:9a:45:64:25:ac:80:1d:91:dc:32:1b:a3:
64:3d:77:25:c3:5b:fb:fd:33:3f:fc:0d:2a:99:17:5f:b1:e2:
fa:35:b7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:21:12 2025 by rpki-client