Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
File: q3dzqhxxoCJlFGujNszC5Y3q24g.mft (raw, json)
Hash identifier: Dr2NzXcwqqPd8uQDvMz8MJFiUtJi8t1k3fMCK44oBFs=
Subject key identifier: 4F:7E:F2:C0:7D:AA:6B:E0:ED:C3:13:E2:69:05:78:26:FE:BB:28:1D
Authority key identifier: AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88
Certificate issuer: /CN=ab7773aa1c71a02265146ba336ccc2e58deadb88
Certificate serial: 0196BECA603C2CB5B18EEE14446AD10476D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 10:00:56 +0000
Manifest this update: Sun 11 May 2025 10:00:56 +0000
Manifest next update: Mon 12 May 2025 10:00:56 +0000
Files and hashes: 1: cyFUaiualt3wMiC5gtz5aMOvlGc.roa (hash: RoAUS0DbrFV1sDA69agJ/hjEE06MIOfXgztHL0bgXao=)
2: q3dzqhxxoCJlFGujNszC5Y3q24g.crl (hash: rJ8rm22Y2QNDtIzHLh2Ejr1nGj0SjUmsC3MqHJ/RZF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:ca:60:3c:2c:b5:b1:8e:ee:14:44:6a:d1:04:76:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7773aa1c71a02265146ba336ccc2e58deadb88
Validity
Not Before: May 11 10:00:56 2025 GMT
Not After : May 12 10:00:56 2025 GMT
Subject: CN=4f7ef2c07daa6be0edc313e269057826febb281d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:29:b2:5a:89:5d:a9:e2:85:a5:4a:d2:8d:a8:
db:62:86:d8:8c:24:6b:d3:93:2c:f5:d2:ba:a8:98:
45:7e:58:a5:ab:e1:24:46:25:94:49:55:75:88:0c:
e9:87:f4:e1:39:88:8f:fe:d0:9f:69:4c:52:7a:8b:
86:64:e5:1c:e0:b8:80:16:61:6b:d8:08:ed:2d:d7:
81:99:d2:15:02:3d:a1:ee:83:7d:9b:b7:32:82:30:
01:c9:6e:fa:d5:f6:c3:f8:29:cb:e5:6e:b8:32:de:
e5:eb:33:d4:53:1f:09:a1:25:7c:19:41:83:eb:8d:
f6:e7:a1:19:a4:e2:eb:d7:ff:d4:75:19:84:c7:0f:
ca:ef:22:42:42:89:1c:a1:60:b2:01:a1:5d:43:6c:
f9:dc:30:64:40:44:da:a9:04:03:ef:aa:ea:65:e1:
a8:b8:f7:3f:34:b3:94:86:7e:d1:f5:f7:ae:f5:ce:
b2:37:47:e5:e7:d7:c4:fc:c9:f5:68:95:fe:a6:25:
e2:fd:d6:d6:88:a9:c7:a8:97:67:9a:21:0e:20:40:
1f:27:21:86:75:39:37:ed:3e:f5:7f:bb:70:88:d3:
91:26:38:0d:60:83:99:97:5c:9f:71:e0:63:b2:d2:
75:61:b2:45:27:0f:92:50:fd:bb:4d:d7:15:c6:bc:
da:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7E:F2:C0:7D:AA:6B:E0:ED:C3:13:E2:69:05:78:26:FE:BB:28:1D
X509v3 Authority Key Identifier:
keyid:AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ef:a4:df:fc:ec:18:99:a8:f3:70:85:dd:9e:a9:ba:d7:3d:
7a:70:0c:9a:e9:ca:5b:28:2a:a4:c1:c6:15:ed:c2:85:4b:42:
2a:e8:83:e9:56:dc:51:59:cc:b7:38:c7:02:fc:bd:50:03:27:
87:16:d2:95:ad:a8:17:65:da:cc:dd:7d:ba:db:3c:3f:be:f6:
89:4b:07:64:8c:0a:51:73:03:32:82:3b:1c:ca:79:9e:67:71:
33:98:39:f2:8a:73:e9:0d:fa:89:40:2a:1a:f4:05:16:ce:2f:
d7:3e:a8:2a:4d:1c:2c:fe:1a:b4:ed:73:b4:80:9b:9f:06:7c:
92:e1:3c:d8:f3:22:f1:59:17:0c:8b:a2:83:5d:8f:e2:2b:66:
fd:cc:db:a0:b6:82:53:92:f0:05:1e:d1:4f:97:15:9f:9c:41:
e4:5b:48:bf:60:40:ea:9e:bd:71:76:30:96:b8:95:6b:c5:7e:
f3:46:e0:45:14:7f:48:fa:f3:9b:65:41:e9:4b:10:84:83:5f:
4a:98:52:39:ad:01:6d:bb:96:4c:f9:52:13:d2:f7:35:a7:d8:
89:1c:96:c9:26:d5:73:1c:00:a4:cc:2e:f7:84:5f:20:f8:75:
c3:b5:2e:bc:97:f2:ae:60:ca:4f:5b:c6:5c:a6:57:bf:f5:1c:
d6:df:64:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:45:42 2025 by rpki-client