Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
File: q3dzqhxxoCJlFGujNszC5Y3q24g.mft (raw, json)
Hash identifier: caFUPnDhx00ZZjonwm0p1bw1jnW14InGWpELvAX4HCo=
Subject key identifier: 19:B9:A2:E5:AE:84:29:42:6B:6A:17:43:74:FD:00:52:AD:8A:E7:8A
Authority key identifier: AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88
Certificate issuer: /CN=ab7773aa1c71a02265146ba336ccc2e58deadb88
Certificate serial: 019660294949ED9EF807D3C5BCB46D4F82E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
Manifest number: 1504
Signing time: Wed 23 Apr 2025 01:00:40 +0000
Manifest this update: Wed 23 Apr 2025 01:00:40 +0000
Manifest next update: Thu 24 Apr 2025 01:00:40 +0000
Files and hashes: 1: cyFUaiualt3wMiC5gtz5aMOvlGc.roa (hash: RoAUS0DbrFV1sDA69agJ/hjEE06MIOfXgztHL0bgXao=)
2: q3dzqhxxoCJlFGujNszC5Y3q24g.crl (hash: L/tVa65dBnkcKxmL+zo0DixD6FbUKtYoWUZCeLXVw7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:60:29:49:49:ed:9e:f8:07:d3:c5:bc:b4:6d:4f:82:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7773aa1c71a02265146ba336ccc2e58deadb88
Validity
Not Before: Apr 23 01:00:40 2025 GMT
Not After : Apr 24 01:00:40 2025 GMT
Subject: CN=19b9a2e5ae8429426b6a174374fd0052ad8ae78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:93:33:da:07:76:be:0e:4f:71:79:ad:8f:cf:
d7:80:2a:b4:f7:13:8d:c7:eb:77:fe:d1:5c:b9:93:
b7:94:7c:aa:91:32:82:d6:37:40:87:64:c6:52:65:
93:7e:3c:de:21:f0:b2:45:6c:25:d5:22:3c:9a:ec:
1d:fc:d7:41:1a:40:1b:76:b3:84:37:ba:39:d0:58:
20:e6:57:28:1b:2d:0f:d7:bc:1b:61:fd:04:81:6c:
73:17:da:08:c6:eb:41:a7:71:8c:0d:52:97:80:12:
83:e1:07:1d:54:11:9d:3b:b9:ca:aa:71:0b:d2:00:
51:5d:3a:f2:bf:20:b2:57:f2:6d:ff:46:22:14:00:
cd:af:64:f3:ac:bf:19:84:23:19:41:98:cf:cf:7c:
27:55:67:3a:e6:2b:7d:14:59:21:a6:fa:b0:10:20:
dd:8c:9e:6f:89:f2:79:5b:80:40:99:6f:26:5a:6b:
07:19:2f:51:ce:de:4a:d0:37:13:c9:6c:94:87:a9:
ca:00:ea:e2:a4:b3:be:6d:11:e9:32:14:5b:fa:63:
16:2e:24:4c:b8:7d:3b:74:de:40:39:9d:5e:18:0a:
83:3b:5d:75:b0:57:3f:c0:36:e0:1b:b8:e0:1b:bd:
a4:94:15:d4:f5:2d:95:a5:02:d1:89:5d:f7:09:33:
e8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B9:A2:E5:AE:84:29:42:6B:6A:17:43:74:FD:00:52:AD:8A:E7:8A
X509v3 Authority Key Identifier:
keyid:AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:93:70:be:be:20:ee:b3:8c:2f:f1:77:d6:e8:f8:04:11:d1:
1e:87:7e:0b:c4:dc:06:aa:28:e4:3f:86:70:53:41:b0:0b:f0:
dc:85:f1:f1:1d:68:2b:ac:33:ab:cb:cf:81:1c:93:01:b0:ab:
cd:fb:aa:4b:53:2d:0d:1b:6e:cd:39:70:30:6c:d0:d5:32:9d:
41:8c:0e:5d:9f:8c:90:0d:85:84:a0:15:31:76:bd:91:68:d3:
85:40:02:6f:fd:88:d7:55:c7:d1:b8:db:02:2a:5c:99:85:75:
ee:af:d1:60:7b:1c:1a:a0:2d:22:60:85:45:92:d6:5d:52:74:
00:a7:b0:55:0d:61:5a:fa:bf:5b:9f:16:e6:31:41:3e:20:15:
6c:48:2c:b9:49:6d:ca:41:0b:28:0f:18:2d:d2:b0:07:cd:91:
41:9c:29:0b:19:ad:ec:c6:3c:cb:6f:89:76:1e:5f:48:02:40:
ec:62:78:f9:7d:df:48:4b:80:07:c0:df:23:2d:a7:bf:64:20:
94:97:5e:3a:71:02:2a:ce:22:f7:fb:55:06:fb:a4:c5:08:9e:
bb:70:ff:6c:b8:4a:ed:8c:76:9a:b7:88:51:cc:98:ab:63:52:
7d:01:6a:f0:86:c0:c8:2b:83:b8:0c:9e:bc:0b:79:9d:f2:5d:
ce:10:52:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 08:37:56 2025 by rpki-client