Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft
File: q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft (raw, json)
Hash identifier: KblpZ3jjDjoZmGYYK+HTnj36apOBVaC+r4V+xVfij2s=
Subject key identifier: 89:77:44:7E:8E:E7:5B:E0:3F:18:AE:94:EB:E6:78:31:F3:0D:A0:E5
Authority key identifier: AB:E4:43:F9:AE:98:AC:AF:DD:D6:16:2D:5C:8E:B0:F9:41:9A:05:F7
Certificate issuer: /CN=abe443f9ae98acafddd6162d5c8eb0f9419a05f7
Certificate serial: 0196440D07095ED45B61B0DC6C2A0D1E6E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft
Manifest number: 11A1
Signing time: Thu 17 Apr 2025 14:00:26 +0000
Manifest this update: Thu 17 Apr 2025 14:00:26 +0000
Manifest next update: Fri 18 Apr 2025 14:00:26 +0000
Files and hashes: 1: OQ-BUjiM-4ZYICksoUde6ONei7U.roa (hash: nuZwAEc9XGaRcjHMhQRLcOzGazeKsZ0/3EUvFc3DPLU=)
2: q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl (hash: 0zF4V0/pCc+E+FymCoYY+mLseI+2GCaQLL4pq425N7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:0d:07:09:5e:d4:5b:61:b0:dc:6c:2a:0d:1e:6e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe443f9ae98acafddd6162d5c8eb0f9419a05f7
Validity
Not Before: Apr 17 14:00:26 2025 GMT
Not After : Apr 18 14:00:26 2025 GMT
Subject: CN=8977447e8ee75be03f18ae94ebe67831f30da0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5b:4b:90:0d:e9:8e:28:e9:c9:28:c6:60:30:
df:ab:b1:05:3b:56:06:d5:d4:b8:10:3b:e0:ea:78:
87:15:7c:e2:9f:1e:15:da:cb:69:7f:6b:82:5a:be:
77:1c:81:ad:35:b9:db:93:3c:07:12:f0:c1:e7:57:
b9:c1:63:a6:07:dd:9d:39:b3:36:e8:0b:bb:58:bb:
c1:1b:af:ef:bc:b1:b7:a1:22:db:d5:f5:b2:41:49:
58:3b:14:75:61:02:ed:db:a7:f1:6b:fc:54:6f:af:
02:7b:9f:17:ba:67:8e:33:52:99:a6:64:76:20:b2:
a8:3b:00:f0:96:f1:41:29:f6:f9:a7:62:5e:41:0c:
05:a7:fa:7f:d0:51:01:ac:80:a9:c8:78:6b:61:59:
b0:b9:f8:29:e3:69:7b:56:83:b9:b2:43:56:b0:8e:
2a:2d:78:6a:e0:c8:c0:e8:78:d5:bc:0f:4e:83:84:
20:36:b5:22:e3:8f:20:31:51:03:50:93:86:5d:dd:
d0:cf:38:31:8e:02:b7:68:00:d4:74:ff:05:c8:73:
5b:5b:57:9c:b1:a7:7a:60:aa:97:35:37:bb:a9:ac:
59:b9:b0:83:3c:ca:e1:d3:dc:42:72:0e:3b:05:3e:
f5:d3:1a:b1:86:55:71:d8:85:f2:61:44:34:70:fc:
df:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:77:44:7E:8E:E7:5B:E0:3F:18:AE:94:EB:E6:78:31:F3:0D:A0:E5
X509v3 Authority Key Identifier:
keyid:AB:E4:43:F9:AE:98:AC:AF:DD:D6:16:2D:5C:8E:B0:F9:41:9A:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:24:4a:c0:ee:e9:d2:35:ce:0a:88:ca:6c:fd:41:8e:e3:5c:
24:e8:32:35:d8:85:51:13:f5:b6:f5:1b:6c:25:8f:db:2a:ed:
5a:a9:5e:bd:55:a4:3c:0d:31:8d:49:75:21:ae:1e:28:4d:78:
f9:ff:ee:3f:5d:72:ae:3f:cc:35:2b:82:e7:1f:58:0e:95:1e:
2e:de:b2:3b:80:02:4e:82:36:a8:86:d6:90:a8:32:66:cb:30:
96:ea:f9:47:0c:a8:39:2a:88:35:eb:fa:c5:18:af:f0:48:94:
e3:99:4e:97:c2:96:fb:16:2e:bc:43:9a:77:bb:4e:36:fe:1b:
f9:3d:93:c9:24:44:f3:0e:89:e0:3c:7e:a9:51:18:14:f4:24:
25:d0:9d:71:ef:f6:7a:76:8d:62:8d:67:bf:bb:1e:89:cc:f1:
f9:c9:6b:ec:a0:f0:6b:32:c7:08:b5:28:ab:47:24:d2:4f:30:
e2:fb:ad:1f:8d:7f:5d:29:60:5b:76:74:f7:a9:f2:08:f5:3e:
62:e6:cb:2b:54:cb:2d:60:ae:cc:31:d1:2b:c1:ab:bf:29:ce:
82:26:67:61:72:27:7f:f6:0f:d0:ea:21:8f:b4:b3:71:60:a7:
c6:14:be:44:92:0d:80:67:e4:c5:55:8f:af:d2:10:b7:be:4f:
a6:cb:90:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:50:35 2025 by rpki-client