Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
File: q0ZoYAiowQHoTqh4MYrljrcc7II.mft (raw, json)
Hash identifier: INjhwAZ4KmxQOmzs5CPyJDu5Ge86qEUru/ZwZAlWFwY=
Subject key identifier: D4:D3:8F:D9:8A:D7:29:D2:81:85:F2:0F:56:F2:58:93:02:3C:08:0F
Authority key identifier: AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82
Certificate issuer: /CN=ab46686008a8c101e84ea878318ae58eb71cec82
Certificate serial: 01965047F8A7EC3FF9FA6AFC82B702103475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
Manifest number: 0BDC
Signing time: Sat 19 Apr 2025 23:00:15 +0000
Manifest this update: Sat 19 Apr 2025 23:00:15 +0000
Manifest next update: Sun 20 Apr 2025 23:00:15 +0000
Files and hashes: 1: EMySEwRrF4bq2LUNRJSbJLGHINA.roa (hash: DrdEgmoEeO2eKUnBVDonWL4YHyVw8zsXK3sYKFvyya8=)
2: q0ZoYAiowQHoTqh4MYrljrcc7II.crl (hash: pyBft3CvrkJ1+ZAgk4Pp3117xWMqaaylCD6jcoh9PK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:47:f8:a7:ec:3f:f9:fa:6a:fc:82:b7:02:10:34:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab46686008a8c101e84ea878318ae58eb71cec82
Validity
Not Before: Apr 19 23:00:15 2025 GMT
Not After : Apr 20 23:00:15 2025 GMT
Subject: CN=d4d38fd98ad729d28185f20f56f25893023c080f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:24:79:b2:df:2d:38:3b:4a:69:da:6a:52:27:
7e:99:d9:9a:59:d2:67:44:1d:db:9b:f8:47:0a:e6:
63:ac:ad:2e:df:f2:20:75:e0:81:2c:e1:db:24:c2:
11:62:94:b1:59:d3:80:70:af:dd:b9:ca:30:14:59:
81:b9:eb:f6:20:bc:85:17:76:c4:29:c9:a6:f3:0e:
10:ed:5a:c4:87:32:48:e4:84:dc:a4:1c:5a:96:1b:
b4:97:c1:3a:19:b9:79:52:88:d1:3a:4c:83:d3:a1:
6e:64:0a:09:55:97:50:ea:26:38:6f:6b:59:55:9d:
78:ca:40:45:d0:a8:29:b5:23:93:85:55:71:a2:5d:
10:7b:13:2a:21:8d:be:50:14:7d:28:43:78:a7:30:
8d:9f:02:62:cc:b4:dc:2a:65:a6:55:c2:b4:31:0e:
50:38:2d:a5:59:1b:97:eb:be:9c:e6:07:f7:d6:97:
d8:69:ed:71:ba:e5:ef:ad:1e:c9:ac:ca:4c:c0:1a:
95:40:48:d1:d1:39:44:78:f0:16:a1:d1:5f:15:94:
3f:88:e8:91:d3:b8:0e:10:35:51:cd:46:e3:32:ec:
18:0a:f2:08:c5:89:ae:10:0c:03:da:32:fe:ea:57:
df:f5:e8:0a:99:96:2c:34:e2:82:67:ad:a1:20:55:
fb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D3:8F:D9:8A:D7:29:D2:81:85:F2:0F:56:F2:58:93:02:3C:08:0F
X509v3 Authority Key Identifier:
keyid:AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:12:9b:0e:ae:f3:2a:dd:5b:35:89:cc:9b:8f:47:b3:8e:4b:
ed:e2:71:52:06:26:fa:af:97:25:98:5d:d5:5d:f6:3f:c4:79:
53:93:c0:25:58:ce:74:49:29:03:41:db:ac:d9:d2:25:b1:ea:
bb:c6:5a:77:ec:8a:2a:7a:2d:2c:94:ae:3f:66:d2:f8:72:03:
ce:2d:c4:68:fb:92:3d:36:06:b2:98:10:49:c1:1a:82:9d:b6:
e0:72:eb:32:62:31:0c:51:f9:f1:17:fa:02:79:81:7f:08:68:
d3:00:fd:21:ac:24:31:47:aa:a7:d4:65:77:1f:eb:d5:ae:bb:
65:e3:d4:bb:d1:ea:dd:0b:02:18:6b:e6:00:17:0a:d7:13:15:
89:cc:aa:15:f2:cd:38:24:b4:85:09:3a:95:41:c2:43:c1:9f:
c0:09:84:14:e1:34:67:f9:7d:11:93:70:bf:5d:5a:99:52:fb:
92:f2:5c:31:42:0c:e5:11:11:13:e0:8a:31:47:dd:94:a3:dc:
1c:e1:47:28:e3:90:95:17:04:a2:62:87:99:fc:b4:63:0f:69:
21:4b:9e:8a:40:ff:c6:3e:60:26:04:4a:82:88:04:ef:94:77:
7d:a3:0b:0f:ae:82:c5:ba:16:ad:48:de:25:16:09:e5:76:f5:
98:f2:fd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:18:57 2025 by rpki-client