Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
File: q9xALNU1_JEj6gJsYq6c8PgOlBg.mft (raw, json)
Hash identifier: KsM/S8Iaw396RPyEuGq21SITTR9MIs3xmtkDH9M4Ybo=
Subject key identifier: B6:61:1D:BE:ED:33:A4:9A:31:FC:46:10:84:21:89:02:0A:07:DD:A2
Authority key identifier: AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
Certificate issuer: /CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Certificate serial: 019660CE97E66AA43238191B3504667531F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
Manifest number: 1503
Signing time: Wed 23 Apr 2025 04:01:14 +0000
Manifest this update: Wed 23 Apr 2025 04:01:14 +0000
Manifest next update: Thu 24 Apr 2025 04:01:14 +0000
Files and hashes: 1: LtPXIJBODsTgHOTG4NK5yVKpj5k.roa (hash: ITX8aC19jlc3FBy1kQN9LCE6ibXilzDMrJg98+CkzVM=)
2: TEBaODlmDCqhNdveSNP6xcEtL-0.roa (hash: Ni+drEe1sF+jcV53LsQ0wrDEiq7Vue9pJpbJAT7gLcE=)
3: q9xALNU1_JEj6gJsYq6c8PgOlBg.crl (hash: 5MCWfgANSr3h59B/4A48voJihV3vBpLDIUqcKA8UXzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Apr 2025 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:60:ce:97:e6:6a:a4:32:38:19:1b:35:04:66:75:31:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Validity
Not Before: Apr 23 04:01:14 2025 GMT
Not After : Apr 24 04:01:14 2025 GMT
Subject: CN=b6611dbeed33a49a31fc4610842189020a07dda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f8:92:1b:e0:96:2a:99:11:21:ba:9e:46:00:
67:d4:6c:b5:bd:83:10:b0:48:5b:cc:4f:39:ab:e1:
7e:92:7d:93:fc:8b:82:73:89:47:ab:07:3a:72:06:
83:99:06:5d:78:86:9c:50:d1:34:7c:38:c6:b6:8f:
8a:72:92:93:df:ed:76:a0:01:ae:4d:ec:b2:46:26:
89:bd:f7:4f:82:12:c8:18:2c:21:a0:b4:5a:5d:03:
04:c5:a2:b5:7e:8a:18:e7:b8:1e:f5:21:c3:ff:1f:
a6:83:00:86:be:29:2f:3c:7d:11:63:2d:8b:9d:4e:
cc:6c:0c:62:ca:a4:74:e4:c0:ec:63:76:25:3b:0f:
07:05:ad:d0:38:f4:30:b5:b5:e3:9d:d2:6c:79:cc:
c3:0b:1e:c7:ad:29:e6:44:da:94:5f:60:37:9f:3d:
21:90:f1:90:9d:b4:fe:f8:96:9a:6f:ae:91:49:55:
f5:12:21:3c:15:6a:e6:07:1c:77:bc:72:ec:1a:45:
63:70:90:e8:11:2d:25:c9:de:85:c3:7b:de:27:38:
f5:93:ef:06:a4:81:19:e9:74:10:6f:8c:f4:5c:71:
0a:dc:9f:31:02:51:33:66:44:a1:61:71:6b:07:64:
90:04:3b:c0:6c:16:11:bb:29:ea:ef:e6:00:3a:f7:
93:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:61:1D:BE:ED:33:A4:9A:31:FC:46:10:84:21:89:02:0A:07:DD:A2
X509v3 Authority Key Identifier:
keyid:AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:6f:b7:ee:f3:cc:34:9e:87:aa:79:6d:9b:3f:3d:1f:b3:85:
39:11:f2:2b:80:93:e7:37:e2:27:5e:9f:61:a8:56:cb:99:6a:
cf:1e:ae:38:65:76:b3:a3:e7:46:80:e8:a1:af:75:80:d5:b7:
dc:41:cd:48:e9:51:5a:72:d5:48:90:8d:4b:e1:cd:76:9f:bb:
4d:5a:27:c4:b9:23:f7:f0:99:da:30:25:15:a1:78:fc:4e:ce:
1f:8b:14:bf:dd:5c:ae:da:6d:ba:f4:46:52:1d:48:dc:7b:e6:
ec:6b:be:8f:31:be:4b:61:ff:88:13:4f:1f:89:fa:57:d9:f5:
fd:14:d4:cf:e5:0f:4e:14:cb:01:8b:c0:72:43:b2:56:a8:06:
3d:9f:3d:01:2f:f7:fe:43:20:06:d9:a3:34:76:e8:7a:70:b2:
e7:3c:95:08:d4:c9:0f:ec:3a:36:19:e9:20:8f:f2:97:dd:e2:
00:3b:07:de:fa:ca:f8:8b:f6:e7:bf:b1:65:03:a4:b6:d4:5e:
fa:f3:01:ca:7b:87:88:8d:ec:39:9c:b8:2d:ee:82:ca:e9:3d:
45:c3:46:f4:f1:de:d2:2e:db:50:10:72:80:c9:a2:6e:09:c3:
53:04:07:c2:ca:f5:10:09:9e:54:c0:d0:41:a5:60:0f:19:d9:
5d:fc:35:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 09:51:05 2025 by rpki-client