Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
File: qx0OfoGLr5p6-5hmEkKSphqvuMo.mft (raw, json)
Hash identifier: rzQBZiXKWG3da6uWfIUlZ6YnSoh/1WPc7oVU0gV4KvY=
Subject key identifier: 7C:B2:D0:BD:EA:48:15:55:65:60:F0:8F:F6:0E:8A:2F:E4:43:68:DD
Authority key identifier: AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
Certificate issuer: /CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Certificate serial: 0196556EC703BB4699594F3E077A3AC1489F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
Manifest number: 1503
Signing time: Sun 20 Apr 2025 23:00:45 +0000
Manifest this update: Sun 20 Apr 2025 23:00:45 +0000
Manifest next update: Mon 21 Apr 2025 23:00:45 +0000
Files and hashes: 1: 3rk6DTXzfhXnDvH7YjIIV0HcXhY.roa (hash: 8yMBicvXGg6+UMP8iKzu3+exUVvDmdmba1/S47z8Uyk=)
2: qx0OfoGLr5p6-5hmEkKSphqvuMo.crl (hash: m9eF1sFXhV6tVhvBb3h6RUnf0R6U5p4BiLQF19abZY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:c7:03:bb:46:99:59:4f:3e:07:7a:3a:c1:48:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Validity
Not Before: Apr 20 23:00:45 2025 GMT
Not After : Apr 21 23:00:45 2025 GMT
Subject: CN=7cb2d0bdea4815556560f08ff60e8a2fe44368dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:21:5f:48:76:fb:93:33:cc:62:68:1f:49:bf:
22:79:6e:f1:78:6b:22:23:b6:1c:a1:51:31:e5:9a:
ad:56:fc:12:39:c3:f0:b0:90:b9:b6:3a:4c:ec:7d:
68:05:3f:26:d6:bf:3d:15:6d:46:dc:a1:1f:92:2d:
10:c8:7e:8e:2b:f2:c2:8e:32:06:6e:7e:e9:cf:aa:
fd:30:ab:b2:bf:fa:15:9d:b9:68:05:09:53:65:34:
80:e7:79:89:f4:2f:bf:ae:8e:49:de:53:62:9a:da:
5a:a3:e3:6d:46:ae:b3:be:4c:5e:8e:4b:b3:a4:1e:
a7:8b:46:30:53:06:60:f8:a3:e2:de:3c:5e:bb:bd:
08:b2:b4:47:cb:dd:3c:58:da:88:5c:1d:27:55:ce:
35:31:18:a2:f0:bc:b7:10:84:c0:53:73:bc:97:84:
e1:50:34:9e:2c:6b:e5:39:20:6c:77:af:f4:9d:32:
4e:f4:aa:fd:6e:ed:9d:f2:d4:b0:44:7c:83:5c:7d:
53:66:19:3f:70:72:1b:99:f4:0f:b8:63:c9:da:6a:
1b:23:30:28:be:03:a8:45:99:79:71:65:5f:cd:12:
20:1d:83:9e:74:b2:86:0a:c0:cf:9a:db:29:2f:ae:
3c:f9:a5:e6:84:ae:8a:bf:18:a2:2a:ea:28:10:bc:
97:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B2:D0:BD:EA:48:15:55:65:60:F0:8F:F6:0E:8A:2F:E4:43:68:DD
X509v3 Authority Key Identifier:
keyid:AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:9e:f2:dc:8e:71:92:bc:80:dd:c4:6a:47:65:7a:8d:ea:44:
83:9d:d0:3b:cd:31:7a:17:29:7f:74:7a:75:57:df:bf:1f:fe:
e2:f5:c7:c1:f5:1c:2e:a2:53:2e:5c:f6:cf:82:1a:13:be:8d:
e9:90:0a:06:46:8e:8f:d5:f7:ee:74:c6:47:52:4d:f5:44:6f:
0f:70:7d:8d:6b:f9:34:c0:bc:df:a0:4e:01:47:5d:55:ed:a6:
d9:8c:13:4d:95:60:ab:c8:19:27:40:3d:e6:33:29:28:d1:2c:
d8:e2:12:0c:d6:41:98:ce:75:f5:e6:94:69:f7:29:b8:a7:d9:
c2:8b:07:b8:ea:86:ab:90:90:96:a7:3c:ce:77:9d:ce:c5:37:
02:f9:7a:f9:d4:ac:6e:f0:5a:ea:0a:54:da:80:ac:27:bb:c1:
e6:99:04:20:19:e7:37:49:1d:5f:63:32:88:ba:7d:e4:c8:c0:
15:f4:6a:de:67:60:68:35:28:76:ea:4d:aa:75:7f:48:2c:92:
ae:e9:56:10:86:59:1d:ea:4a:b5:2e:87:b9:bd:00:51:b7:a9:
07:16:c0:65:9c:2f:3f:20:5e:a0:05:08:fb:25:40:7f:34:f2:
5b:74:78:10:5d:86:3f:b3:13:c1:1b:19:69:65:40:9a:48:6d:
2a:a8:13:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:38:31 2025 by rpki-client