Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
File: q2TJrlviZApf1pRYanBMo0wgh78.mft (raw, json)
Hash identifier: plcB3jXelAfSMFxuTvBsSRrylNW/TCGP1Z7TuOpuPNw=
Subject key identifier: 69:6F:1D:34:2F:44:37:F5:3E:2E:ED:9A:E4:41:78:46:DE:CB:5A:44
Authority key identifier: AB:64:C9:AE:5B:E2:64:0A:5F:D6:94:58:6A:70:4C:A3:4C:20:87:BF
Certificate issuer: /CN=ab64c9ae5be2640a5fd694586a704ca34c2087bf
Certificate serial: 0196BF6ECD8F77C8D6C883059A432703B682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 13:00:31 +0000
Manifest this update: Sun 11 May 2025 13:00:31 +0000
Manifest next update: Mon 12 May 2025 13:00:31 +0000
Files and hashes: 1: JLsWf4ypDqy3C3Vznf4c_jhkWzQ.roa (hash: W+Y7OMJT6eANPHdTBze3RK40F6OnPRrXmssah9nRki0=)
2: q2TJrlviZApf1pRYanBMo0wgh78.crl (hash: ekL+2EabouIdKlUGH6YLKmXh/vyZku5W3G6wprfHRAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6e:cd:8f:77:c8:d6:c8:83:05:9a:43:27:03:b6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab64c9ae5be2640a5fd694586a704ca34c2087bf
Validity
Not Before: May 11 13:00:31 2025 GMT
Not After : May 12 13:00:31 2025 GMT
Subject: CN=696f1d342f4437f53e2eed9ae4417846decb5a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:60:58:71:12:52:77:7d:20:de:10:24:a3:03:
ac:18:97:59:f0:f8:98:b9:d8:68:d4:01:58:23:00:
46:fb:99:1c:c0:3c:55:c4:19:3a:e0:ea:c1:f4:96:
c4:32:52:a8:9d:c6:b1:5f:74:7a:31:e0:d6:88:ad:
3d:e6:81:41:f2:c2:13:fc:73:f8:82:50:5b:dc:33:
ea:42:da:1d:58:d7:2a:d7:a2:56:8c:13:31:6a:ba:
f5:3e:12:7f:5f:1d:25:fa:93:e4:5d:19:61:bc:65:
29:62:42:29:3f:53:1c:e9:a3:08:48:4d:98:a1:92:
2c:32:8a:f0:fd:a2:ec:79:31:1b:32:66:1b:95:45:
c3:1b:b1:6f:f1:28:de:dc:9e:20:b6:40:c6:42:97:
04:02:bc:ac:b3:93:21:a3:dd:6d:ef:97:8a:d6:1d:
93:8c:b3:9e:a8:f9:a0:2a:64:87:6b:6f:e1:98:55:
fc:3c:ce:5c:6d:52:75:9c:49:51:a8:c7:78:32:6d:
54:5b:bf:d1:77:13:f5:13:4a:40:e1:23:49:f9:5b:
cd:bc:f7:e0:ba:f9:08:d4:f1:30:15:6e:08:80:0d:
6e:15:cc:6a:51:aa:22:35:cf:4f:a3:ab:06:88:df:
7c:44:5c:51:47:ce:9b:55:2f:c2:cd:65:d4:71:5a:
a9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6F:1D:34:2F:44:37:F5:3E:2E:ED:9A:E4:41:78:46:DE:CB:5A:44
X509v3 Authority Key Identifier:
keyid:AB:64:C9:AE:5B:E2:64:0A:5F:D6:94:58:6A:70:4C:A3:4C:20:87:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:12:09:65:c3:38:d5:5c:da:51:63:6a:1c:10:00:1b:7d:ff:
b8:ad:a2:c2:1c:87:d8:11:a7:80:b2:48:37:e1:7e:99:de:e7:
74:07:af:26:d8:c2:d4:0f:c7:23:6f:68:64:8c:00:40:e4:d6:
51:d2:40:a6:12:39:9d:2f:5c:b7:b8:b3:0b:0a:02:1c:a2:1d:
ca:50:6f:62:b4:93:df:cd:b0:22:36:4a:b8:d8:ce:6b:80:1b:
ea:e2:fb:be:52:10:16:e3:ae:10:26:b4:2b:69:56:ea:e5:bb:
07:6b:29:d4:3c:6c:2d:3e:c4:e8:b5:20:6c:7b:18:30:a8:87:
06:ea:7b:0e:0f:5d:ff:ad:c6:1f:9a:9d:73:6f:6e:c2:74:f9:
56:9b:21:8b:e3:7d:1b:32:1d:e8:bc:3f:1a:93:e6:e0:05:70:
98:ec:c9:5d:2e:ef:49:6d:e0:1f:f3:6d:5f:03:51:47:9d:7d:
e8:ea:bb:83:e8:db:cc:99:7b:be:e6:26:db:73:e7:e3:f0:c4:
09:fb:39:45:98:be:be:61:04:d5:79:54:3d:06:16:e7:98:34:
2e:0c:b1:1d:97:df:8b:78:26:0b:de:93:31:5f:93:2c:22:a4:
65:7d:07:a7:ec:80:8b:ff:4b:48:62:4e:a0:ac:0f:0d:a9:bb:
58:d7:6f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:00:28 2025 by rpki-client