Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
File: q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft (raw, json)
Hash identifier: yOPgks3FILUZOuAMnZwoEaRlQs9fq4qzsZd574Qa8ls=
Subject key identifier: A6:8A:F8:2F:F4:17:E2:9E:00:99:52:32:E4:44:7A:3F:6D:00:57:F4
Authority key identifier: AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58
Certificate issuer: /CN=ab87734368d88315f11b329386cc5ef2bb875858
Certificate serial: 0196545C580BC2FD1E23558194E9FA5A267A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 18:01:00 +0000
Manifest this update: Sun 20 Apr 2025 18:01:00 +0000
Manifest next update: Mon 21 Apr 2025 18:01:00 +0000
Files and hashes: 1: q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl (hash: k5aI0BQM8TYi4XA9v7I56fib0TuAOwKZsYHKFSZdoYY=)
2: sqo5PLdWdHMa-3THIwpzThX3MIQ.roa (hash: mkeWzT4DWdeQx69gMonfC3UIQ6XY4x+08EOS1mbWBlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:58:0b:c2:fd:1e:23:55:81:94:e9:fa:5a:26:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab87734368d88315f11b329386cc5ef2bb875858
Validity
Not Before: Apr 20 18:01:00 2025 GMT
Not After : Apr 21 18:01:00 2025 GMT
Subject: CN=a68af82ff417e29e00995232e4447a3f6d0057f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c5:8f:14:98:63:a2:20:05:de:f0:a0:da:77:
3e:32:db:e1:00:aa:fa:24:0d:2d:19:42:4b:51:82:
35:d7:34:7b:e5:15:f9:d7:d7:06:c9:44:38:98:54:
e8:ec:7d:22:31:39:d8:ab:e9:33:8b:f7:3b:9c:da:
22:1c:57:cb:77:d4:47:79:6b:96:18:c8:bb:3a:f0:
d4:2f:e6:c5:23:ae:13:ee:46:9d:66:e3:fd:a5:3b:
29:fa:fa:f3:35:bb:ae:3b:aa:c6:3d:04:69:02:73:
90:1f:f0:55:4d:0b:d9:e2:48:a6:7b:37:a3:a8:d9:
45:5a:90:28:45:c7:74:0d:3a:ed:33:c4:6d:bb:50:
9d:0f:ee:04:a6:d9:66:35:52:93:6f:6a:eb:5b:0b:
b2:31:6d:0b:71:b1:b2:9b:4d:b8:d1:47:c5:82:df:
85:43:91:14:5c:72:df:ca:87:6d:26:d8:0d:9b:54:
a6:d9:2d:ea:ad:08:3b:11:2e:b0:68:61:e0:7b:11:
19:53:c9:8f:d0:07:d5:11:76:eb:0c:3e:e2:c5:05:
99:a3:17:72:89:d7:cc:f7:92:bb:da:32:e5:dd:b5:
25:ce:64:83:b0:52:6b:49:ee:01:1e:78:a4:42:a8:
b4:78:9d:5f:01:52:46:43:ca:e9:02:73:c1:6c:33:
f5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8A:F8:2F:F4:17:E2:9E:00:99:52:32:E4:44:7A:3F:6D:00:57:F4
X509v3 Authority Key Identifier:
keyid:AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f7:0f:e3:3d:40:55:54:97:1f:9d:a4:2c:8a:75:f6:b1:5b:
2a:a8:77:8b:6a:e2:81:45:e8:c3:f8:df:b2:69:59:34:bd:21:
83:a0:3a:75:11:c2:86:e2:07:7c:86:65:e4:55:4f:74:f4:84:
d5:f3:83:2e:57:72:8a:2b:a2:db:92:85:2b:67:f4:a8:95:79:
cb:6d:8f:88:42:ec:77:46:8d:ba:4f:9a:ae:56:64:7e:d6:c0:
06:b4:5f:92:0b:e0:9f:76:fe:5e:f7:77:63:a2:db:3e:43:4c:
b9:fa:17:dd:71:db:ad:49:b2:95:7d:ed:f3:0b:c7:a2:3a:e2:
47:89:d9:6c:77:74:80:51:88:1e:b2:54:8a:14:e0:53:71:25:
94:95:4b:d0:6d:d0:90:7a:5b:e5:41:37:9b:f4:37:7d:70:de:
8f:ce:5a:05:23:c3:e2:b3:df:00:da:86:3d:36:26:f5:b9:74:
f3:4d:a5:6a:cc:e4:82:fb:cf:20:60:7c:68:32:c0:07:b8:75:
eb:0e:8f:7a:76:4a:62:b7:92:88:7d:88:e0:bb:b5:d3:f0:07:
d1:4f:3f:dd:40:d9:b4:74:79:69:e9:60:6f:4b:3d:84:99:7e:
b1:8b:31:c5:e7:cf:b7:dd:ac:3e:3c:40:55:47:b1:81:6f:bd:
dd:32:97:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:11:21 2025 by rpki-client