Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
File: q5ddtDeN_KfClTuG07GNyLIY7Gs.mft (raw, json)
Hash identifier: oNOmeD8oVdlF2T8YHyP7sjmfUMrvzOCx58HMLIyuqAc=
Subject key identifier: 35:61:D3:C0:2D:8E:16:A9:D8:FB:56:91:1C:33:8B:67:2C:50:83:C3
Authority key identifier: AB:97:5D:B4:37:8D:FC:A7:C2:95:3B:86:D3:B1:8D:C8:B2:18:EC:6B
Certificate issuer: /CN=ab975db4378dfca7c2953b86d3b18dc8b218ec6b
Certificate serial: 01960CB13B111AD54FEFA95FD8F098B94B63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
Manifest number: 0C5D
Signing time: Sun 06 Apr 2025 20:01:03 +0000
Manifest this update: Sun 06 Apr 2025 20:01:03 +0000
Manifest next update: Mon 07 Apr 2025 20:01:03 +0000
Files and hashes: 1: RbouPlrvjxMByw-unVzRP4nNXJw.roa (hash: XJEjUdWYmJvOBDOP+ovs4X9aLXbBgk9gR+EZ+bBT2d8=)
2: f1kmm1viP1JpShChN2T-8khwmCE.roa (hash: oA16peDdFaNYYVYRr7l06EBaQutaxn0Ux8cCt1MZLyc=)
3: q5ddtDeN_KfClTuG07GNyLIY7Gs.crl (hash: ttMF2ptyCFDcJPp8iOfwBwRFWdb6SZ5X4KKJBFEsxvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0c:b1:3b:11:1a:d5:4f:ef:a9:5f:d8:f0:98:b9:4b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab975db4378dfca7c2953b86d3b18dc8b218ec6b
Validity
Not Before: Apr 6 20:01:03 2025 GMT
Not After : Apr 7 20:01:03 2025 GMT
Subject: CN=3561d3c02d8e16a9d8fb56911c338b672c5083c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:74:61:3c:29:3d:6e:39:c1:a1:c4:5d:6d:dd:
20:e3:e7:02:f8:53:3c:09:5a:95:d8:28:29:9f:08:
1c:64:0b:55:3d:51:d6:b8:82:86:f3:ae:bb:74:82:
63:41:99:15:b6:d6:b2:76:46:0d:cd:b4:e4:75:80:
0c:23:37:05:73:31:0f:73:eb:58:53:a5:56:d3:bc:
52:7f:20:6e:dc:b4:78:d9:de:d4:6b:c9:e7:c3:d6:
e3:b2:70:4b:63:7d:c7:f9:7f:83:a4:7d:eb:a4:f1:
1f:2d:7e:08:da:24:21:6a:82:5d:cc:cd:80:d2:14:
92:5e:68:54:79:39:4f:78:43:05:16:8f:50:f0:6b:
94:c3:2d:bf:bf:88:a2:09:fd:d9:01:cf:51:ae:be:
a1:de:3f:56:45:85:9e:36:cf:b2:39:99:17:ed:8a:
59:b9:62:88:6f:fd:42:3f:b5:c9:7c:ca:53:b7:aa:
0c:5c:9c:09:05:53:76:12:5d:93:15:14:2c:31:13:
b3:6a:f1:5f:dc:ea:30:f8:44:75:f3:67:49:17:45:
23:c4:cd:43:c8:20:ad:66:37:d5:ab:91:cc:d3:00:
fb:7f:20:b5:e3:3b:e6:8f:6e:d1:6a:d0:2a:ad:cb:
a7:fc:dd:d2:92:42:92:3b:7c:4b:34:10:14:0e:39:
34:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:61:D3:C0:2D:8E:16:A9:D8:FB:56:91:1C:33:8B:67:2C:50:83:C3
X509v3 Authority Key Identifier:
keyid:AB:97:5D:B4:37:8D:FC:A7:C2:95:3B:86:D3:B1:8D:C8:B2:18:EC:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:7c:87:c3:be:bc:29:d4:13:1c:13:0e:54:72:47:5f:b7:2f:
0f:4f:8c:6a:b1:95:7a:90:88:52:60:0a:d6:26:66:4a:40:ea:
06:ba:07:c1:d8:3c:70:b9:1a:cf:3a:16:f2:b8:1d:93:38:b8:
b1:11:32:60:e4:96:90:0c:8a:78:da:4b:c6:aa:58:de:d4:1f:
22:6c:dd:54:4e:06:e3:14:bc:4b:f1:94:cb:8c:b4:90:a1:d4:
df:d1:f2:e3:00:0e:8f:78:6b:70:b8:3d:fa:91:e6:9f:3c:b3:
50:51:4c:29:1a:d3:7a:52:21:37:bc:18:93:2b:fe:6d:7d:23:
5f:12:5f:fd:07:52:77:df:43:15:2d:c0:b6:63:36:4b:b3:c0:
2f:6c:82:1d:e5:c4:5a:b0:46:99:89:82:5f:d8:7e:83:22:02:
90:28:1b:80:d9:d9:2a:b5:02:38:8c:48:a9:a2:cc:24:5a:67:
66:4e:91:ec:e8:3e:fa:6f:d9:9d:20:04:70:fc:2b:75:7e:2a:
3a:5c:d6:98:cf:33:14:71:9c:11:3e:db:bd:25:16:d0:1c:77:
c2:5d:31:57:79:da:c8:b3:3c:c5:1b:1d:7d:7b:ab:f6:c3:d0:
80:81:b0:19:46:e7:80:60:92:98:e4:2c:38:ef:d8:77:d4:15:
fc:f8:ae:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:01:03 2025 by rpki-client