Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
File: q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft (raw, json)
Hash identifier: 9zvKO3hDhowdm3ux+K0ksJPTQCJK3F0/G8npQmSzSng=
Subject key identifier: 7D:D9:69:23:BA:54:42:3A:50:4B:FA:46:E0:B8:FF:A9:CA:82:92:CF
Authority key identifier: AB:E2:35:3D:9B:D5:B8:C5:B5:8C:C7:10:21:32:4B:B9:0D:D2:DD:91
Certificate issuer: /CN=abe2353d9bd5b8c5b58cc71021324bb90dd2dd91
Certificate serial: 0196A1D2AF9AC8C5ED270559E90D50CA6CA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 19:01:01 +0000
Manifest this update: Mon 05 May 2025 19:01:01 +0000
Manifest next update: Tue 06 May 2025 19:01:01 +0000
Files and hashes: 1: fc4brGlD2V9aXaMOkj_E0RZ_J08.roa (hash: OhUlbRmFgYOLeHLw8imL9BrjCyNfPZwGRzxzejrVjWo=)
2: q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl (hash: 8GxT/3G6sIHjvjoX9A94XS9qjBKzszR1Y4SzIIJWrqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:d2:af:9a:c8:c5:ed:27:05:59:e9:0d:50:ca:6c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe2353d9bd5b8c5b58cc71021324bb90dd2dd91
Validity
Not Before: May 5 19:01:01 2025 GMT
Not After : May 6 19:01:01 2025 GMT
Subject: CN=7dd96923ba54423a504bfa46e0b8ffa9ca8292cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5c:e3:bc:ad:74:72:fa:29:84:d9:08:08:b8:
26:e3:e2:84:ce:f5:af:bf:95:72:e5:64:a0:16:dd:
b2:5e:ef:03:80:aa:7c:99:02:91:b0:3f:4d:6f:80:
fa:9a:84:41:7f:4b:25:11:ea:e3:6a:a1:ca:d7:7f:
e8:84:e6:61:2f:36:03:10:82:98:9a:35:ef:96:c3:
9f:60:26:97:3f:71:78:60:cc:c8:6d:3a:fe:41:00:
d5:14:38:af:e8:1a:e8:3b:6c:5d:3d:44:a8:ab:d1:
68:40:dd:da:54:3f:cf:b5:69:9c:1f:5f:2e:c5:63:
06:26:0e:d8:11:7c:fb:18:6c:b3:b7:65:48:1b:78:
c3:7a:d9:56:b7:76:90:96:64:cc:fc:13:82:fb:42:
3c:a9:24:e0:7d:df:16:9c:3d:a3:81:a8:6c:88:0d:
0b:62:c8:8b:5b:29:97:a8:42:5a:1c:03:67:26:e8:
22:a6:e1:d5:6b:5f:c5:02:af:b9:a9:3a:79:da:d2:
6d:82:68:9e:10:a9:c7:33:f3:c6:42:e3:d6:2c:e5:
fe:3c:cb:dc:cd:49:fd:1e:a9:16:11:41:f1:4f:8a:
c2:33:84:da:af:ac:c3:c0:29:78:07:68:f8:db:6a:
6d:0a:3d:c6:24:c1:75:71:60:25:f0:f8:12:09:50:
cb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D9:69:23:BA:54:42:3A:50:4B:FA:46:E0:B8:FF:A9:CA:82:92:CF
X509v3 Authority Key Identifier:
keyid:AB:E2:35:3D:9B:D5:B8:C5:B5:8C:C7:10:21:32:4B:B9:0D:D2:DD:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:33:9e:7e:c3:d8:30:53:58:66:a8:e8:cf:f2:f7:33:89:73:
31:85:68:bc:19:a9:a1:fb:81:03:cb:dd:28:10:d3:a7:dd:dc:
aa:69:b0:27:f7:e4:74:8d:0f:43:73:99:b8:67:06:a4:d5:e6:
37:4d:e2:cc:f8:a3:68:93:d9:7b:37:1c:fa:6c:9c:b6:b4:5f:
a2:51:08:6f:22:e0:8a:2c:c0:30:7a:6c:e2:bb:ec:67:5a:96:
f1:26:1c:c4:7f:43:5d:25:f4:5c:81:29:cd:46:45:49:b5:97:
83:d3:55:26:f3:75:3a:77:f8:82:89:73:6a:46:0e:4e:a9:8d:
de:b9:09:3c:df:82:e2:a2:b4:92:13:72:2f:0f:38:45:fa:f6:
70:5f:ad:47:05:d7:ba:17:f6:b6:4e:40:c7:c3:46:64:7f:33:
2c:e5:e9:d9:38:8b:5f:45:73:08:7c:49:40:bd:ad:76:b3:fd:
da:00:31:53:bd:3a:13:75:9e:bb:0b:29:f2:9b:8b:f3:ef:67:
b0:2c:9f:3f:f6:32:4a:de:98:6c:8e:70:a5:06:bb:ad:ea:f5:
8c:0b:2f:24:7e:f5:b8:f2:a9:2d:aa:0c:29:41:51:cb:f8:3e:
80:34:21:37:d2:3a:16:a6:2a:c8:37:bc:1d:42:b5:ff:4c:eb:
90:e9:cf:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:42:28 2025 by rpki-client