Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft
File: q67fL4Eo9I64ETv69NZ9kBBJCTo.mft (raw, json)
Hash identifier: Rwx9me5NjHU3frqZgCBO4nQUqin7n9PyZq4MyFBrxcM=
Subject key identifier: D4:7E:33:AD:30:42:9E:0E:48:03:96:14:29:AF:CC:DB:C0:6D:30:02
Authority key identifier: AB:AE:DF:2F:81:28:F4:8E:B8:11:3B:FA:F4:D6:7D:90:10:49:09:3A
Certificate issuer: /CN=abaedf2f8128f48eb8113bfaf4d67d901049093a
Certificate serial: 0196531210C13AEC4274AEE8DAB295C48EB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q67fL4Eo9I64ETv69NZ9kBBJCTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft
Manifest number: 0648
Signing time: Sun 20 Apr 2025 12:00:14 +0000
Manifest this update: Sun 20 Apr 2025 12:00:14 +0000
Manifest next update: Mon 21 Apr 2025 12:00:14 +0000
Files and hashes: 1: 0Q9DyYJq4YbBL7IBZhMWf3HhzbA.roa (hash: 4213R6OjAd56bVYP7rVqWPE8P8Ej5z/x2DZxc07Sx3o=)
2: q67fL4Eo9I64ETv69NZ9kBBJCTo.crl (hash: 5W9NVDPeJPARbHIoQHS0tntz3OXbrF25z+/7J70v5bQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/q67fL4Eo9I64ETv69NZ9kBBJCTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 12:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:12:10:c1:3a:ec:42:74:ae:e8:da:b2:95:c4:8e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abaedf2f8128f48eb8113bfaf4d67d901049093a
Validity
Not Before: Apr 20 12:00:14 2025 GMT
Not After : Apr 21 12:00:14 2025 GMT
Subject: CN=d47e33ad30429e0e4803961429afccdbc06d3002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ad:6f:8c:37:4d:71:e6:59:50:c0:c9:0c:bb:
76:25:0f:7e:f6:de:b1:ba:07:b6:3b:91:5f:c6:5a:
62:ce:40:07:34:45:19:bf:fd:77:fb:1a:2e:e6:96:
84:a1:84:5b:b3:69:31:82:60:b6:59:79:85:e6:b5:
bc:fe:79:da:13:ac:b4:f4:41:83:1f:67:b2:c2:1d:
7d:a8:d8:80:62:ba:95:76:e3:40:f4:15:8c:cc:92:
dd:6b:29:3d:da:c7:85:f3:de:09:fd:68:04:af:ea:
42:29:72:b1:35:87:d2:f8:0e:64:5c:d5:c8:72:50:
5a:8f:81:06:a6:ba:10:0d:53:fd:f0:e4:5d:ee:ca:
b5:96:7d:c4:2a:46:f0:d2:d7:7c:8e:fc:25:be:a3:
31:24:fb:4e:65:af:cd:f2:d6:4b:1c:d9:b9:f9:4a:
cf:9f:2d:af:c5:3f:b9:02:be:86:b2:8d:4f:04:f4:
0b:88:31:c1:46:2b:d3:c2:b2:6e:8c:57:93:b6:d6:
a4:e5:d4:b3:1d:79:8f:e5:a8:87:cb:bb:f8:3c:94:
8f:ef:86:b7:42:8b:25:b9:18:90:5e:93:8f:27:42:
1b:eb:0b:ae:65:fd:8d:7f:ee:57:a4:60:61:4a:fd:
33:ec:f5:ec:69:50:c6:fc:c8:25:1c:c2:84:ad:01:
d6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7E:33:AD:30:42:9E:0E:48:03:96:14:29:AF:CC:DB:C0:6D:30:02
X509v3 Authority Key Identifier:
keyid:AB:AE:DF:2F:81:28:F4:8E:B8:11:3B:FA:F4:D6:7D:90:10:49:09:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q67fL4Eo9I64ETv69NZ9kBBJCTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:84:97:67:1d:11:fc:0c:e6:a9:96:30:47:d6:df:98:a6:d1:
16:5e:82:1d:65:2d:e6:56:68:45:f5:f1:82:81:80:2d:41:77:
20:6d:72:ad:b7:fb:97:6f:74:96:63:d3:ac:35:e5:94:ec:ac:
9a:6f:b5:a6:f4:0e:68:07:70:26:12:f7:13:78:ad:17:7d:c2:
31:2d:81:4a:09:03:ef:42:02:e3:d0:8c:59:15:25:d9:3f:b8:
7e:7b:0a:3b:7e:50:94:a6:f8:2a:f9:cb:0f:6e:2a:e2:3b:45:
0a:1e:b2:51:b6:ea:b5:81:35:fe:a0:56:07:32:f1:d6:86:77:
8b:02:90:00:12:b4:5e:ed:2d:f7:b6:53:d4:61:c8:58:ed:ba:
77:b0:86:8f:54:9f:1d:d6:e1:a4:14:31:6c:e4:2c:7f:ea:73:
fa:19:ec:e9:be:d5:2e:1a:b1:94:7c:c1:97:22:81:29:d0:09:
13:ed:45:c9:6c:d4:c7:bc:b1:1a:e3:58:e4:ce:1d:3e:1a:25:
70:c6:02:72:c1:e5:57:32:9e:d9:3a:b9:38:82:6a:bd:fb:69:
de:f3:dd:17:e6:b5:5f:1f:bb:95:1c:41:08:44:5e:ee:ad:48:
ac:c8:6c:c5:1b:45:7e:36:72:53:7d:05:33:09:39:d0:16:80:
4e:7d:ca:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:54:59 2025 by rpki-client