Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
File: q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft (raw, json)
Hash identifier: ODLf5qSDj2Ui3uYwhA9Y8a1RNTRYGQBFHZUerFFH16w=
Subject key identifier: 28:F9:71:C5:AC:02:BA:31:E8:FD:E5:EC:BD:65:67:4D:74:23:1E:04
Authority key identifier: AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58
Certificate issuer: /CN=ab87734368d88315f11b329386cc5ef2bb875858
Certificate serial: 0196BAB605C4F84F4AF95E74D1853C16AEF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 15:00:13 +0000
Manifest this update: Sat 10 May 2025 15:00:13 +0000
Manifest next update: Sun 11 May 2025 15:00:13 +0000
Files and hashes: 1: q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl (hash: +YGW1YncXDAU2MlHiqYp0ShIcZ2nXL9/GQvTzryg7nw=)
2: sqo5PLdWdHMa-3THIwpzThX3MIQ.roa (hash: mkeWzT4DWdeQx69gMonfC3UIQ6XY4x+08EOS1mbWBlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:b6:05:c4:f8:4f:4a:f9:5e:74:d1:85:3c:16:ae:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab87734368d88315f11b329386cc5ef2bb875858
Validity
Not Before: May 10 15:00:13 2025 GMT
Not After : May 11 15:00:13 2025 GMT
Subject: CN=28f971c5ac02ba31e8fde5ecbd65674d74231e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f1:21:cb:ea:97:8d:de:4d:61:a2:83:ad:6e:
0a:73:aa:5d:4b:96:97:e1:d7:99:eb:ef:74:ba:6b:
6c:e1:af:be:6b:a1:86:5b:9f:4f:bc:3f:2f:7d:a9:
20:8b:46:38:fc:4c:0f:15:77:d8:81:fb:5d:ad:00:
28:8d:99:47:69:80:57:4e:10:c0:b6:8d:63:24:34:
b6:b4:7c:de:0a:5f:cd:0b:ef:73:7b:80:57:b2:71:
21:2e:a8:08:47:5e:6a:3c:17:da:44:4e:ad:b7:aa:
e0:1e:5b:f3:85:be:c5:bc:25:25:fb:f0:27:b4:f2:
a5:55:44:88:9e:3b:8c:9f:39:8c:79:1f:d1:ff:2f:
44:cf:dc:06:28:bf:e1:70:56:33:0a:08:f4:7a:ff:
09:4f:12:fa:d9:92:4c:53:f2:11:0f:eb:d1:50:cb:
4c:8d:a0:ef:bd:4e:1e:ed:46:e2:3c:e2:6f:56:d1:
fc:c2:67:13:80:32:4e:f8:b6:e4:82:2e:94:d8:66:
08:23:16:9a:e2:af:55:70:16:24:c9:b9:3b:89:69:
74:56:0c:b0:c7:be:65:aa:50:59:1d:ff:d4:6c:54:
45:02:79:53:68:03:20:22:13:4a:64:5b:4b:57:14:
31:fd:a5:68:fb:37:f2:d4:31:0a:af:c8:0f:b6:4c:
58:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F9:71:C5:AC:02:BA:31:E8:FD:E5:EC:BD:65:67:4D:74:23:1E:04
X509v3 Authority Key Identifier:
keyid:AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a2:42:ad:aa:a6:4a:b8:ad:02:3a:d4:e3:78:02:f5:70:ed:
50:73:9a:1e:a0:99:29:85:dd:18:88:e5:2a:6d:cc:c8:57:5c:
82:21:42:9b:dc:ce:5f:72:93:54:c0:3d:f9:03:7d:fd:3b:d4:
48:7b:25:b8:13:a8:66:00:b9:d4:d2:0c:32:70:37:c6:e3:d6:
97:d3:52:a5:3b:51:2b:8f:56:30:16:85:ec:a8:83:5e:69:e7:
81:a1:3f:0a:52:fc:12:b8:bd:f7:38:29:62:cf:70:08:fc:cc:
71:12:73:37:8a:cb:80:78:2a:ab:93:ba:de:6b:45:36:ce:59:
94:ec:ba:fb:4d:f7:34:ff:8d:80:74:82:2a:de:e6:6e:3b:e1:
cf:b0:94:35:3f:95:34:6a:df:d4:05:00:b4:29:30:a7:90:5c:
8c:19:23:2d:8b:d6:6f:84:f9:4e:be:0b:e7:fd:c1:1a:fd:13:
5f:c3:d4:be:df:41:ed:83:ff:85:55:40:b9:c0:54:86:7c:13:
37:4c:47:e3:85:78:ed:c8:39:3e:db:e9:91:5c:31:75:1b:9f:
fd:a7:bb:d9:d8:2b:46:f6:3a:67:65:81:cc:06:8b:57:d2:79:
1b:35:dc:da:82:15:cd:e6:2b:cf:98:dd:99:11:79:cb:83:a8:
d1:ba:dc:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:26:54 2025 by rpki-client