Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
File: q5z9FXRB9pQo3R9jYcpPSuQss4o.mft (raw, json)
Hash identifier: t3F4Z2cNc/sHjkKf2cwbpL72jV/ccwHvyCsoJZEcoBc=
Subject key identifier: 0F:18:EE:13:AA:F8:F8:EC:7F:FA:7D:69:F2:33:9A:09:FF:EA:4E:35
Authority key identifier: AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
Certificate issuer: /CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Certificate serial: 01969E6356372892972A9D036E0DD451028E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 03:00:32 +0000
Manifest this update: Mon 05 May 2025 03:00:32 +0000
Manifest next update: Tue 06 May 2025 03:00:32 +0000
Files and hashes: 1: dCfTqcxg62Lir67qVkgBChTuqA4.roa (hash: UBu+ymeFM9aQ8J18E3tvVpuPsYqEYn9P+xx2d6+/UxI=)
2: q5z9FXRB9pQo3R9jYcpPSuQss4o.crl (hash: 4x3YoXFUSHCpkcfRg5AT9sLwDShlGoJEzqDCMaRVWjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 03:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:56:37:28:92:97:2a:9d:03:6e:0d:d4:51:02:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Validity
Not Before: May 5 03:00:32 2025 GMT
Not After : May 6 03:00:32 2025 GMT
Subject: CN=0f18ee13aaf8f8ec7ffa7d69f2339a09ffea4e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:be:68:d8:06:1e:94:02:2c:8f:a9:9a:bd:06:
27:8f:37:ad:65:e6:51:d2:f9:3c:c8:49:b6:09:fe:
ce:ea:7a:cf:e6:bc:1c:99:98:1b:39:a1:53:9f:b3:
3f:e0:6d:42:72:c1:ce:97:61:ec:3f:44:4f:8d:ce:
3e:80:4b:ce:50:8b:0d:00:2c:21:26:e3:5a:59:83:
22:fb:d5:95:77:2c:82:fb:91:9c:89:d1:27:93:ba:
0d:59:7e:c4:fd:16:d4:de:95:04:f5:35:41:d5:69:
6c:84:42:44:11:1d:c8:17:f9:c3:8e:65:54:65:a3:
64:7b:86:57:83:bd:74:d7:e2:fd:ca:26:9b:fc:40:
d1:76:c1:8a:5d:92:d1:01:45:cf:41:bc:24:16:21:
ee:21:16:cd:04:06:97:20:58:a0:ef:56:05:fe:1d:
4f:af:5f:37:97:ad:fc:b4:d0:3f:91:fb:d5:14:2e:
eb:62:37:00:e4:b1:42:82:75:49:32:e1:c3:01:84:
5f:d1:7e:90:df:5f:b6:03:1c:30:85:e3:a8:37:5d:
ef:98:8d:4b:8b:83:e1:c4:cb:d5:32:cd:87:02:a4:
95:0c:58:6c:fd:26:97:76:b7:bf:58:bf:92:0d:71:
95:7d:e4:41:fe:ef:32:e5:8d:77:22:53:d4:86:e0:
ac:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:18:EE:13:AA:F8:F8:EC:7F:FA:7D:69:F2:33:9A:09:FF:EA:4E:35
X509v3 Authority Key Identifier:
keyid:AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:6c:ac:32:a2:b1:aa:98:9a:af:f3:24:48:a0:56:a6:8b:67:
69:23:4c:ca:99:7c:fc:61:4a:c4:38:35:7a:49:c7:7f:12:bf:
4e:e6:49:9a:8b:51:04:17:48:af:63:ec:5a:c8:b2:fd:4a:58:
df:ae:be:00:46:4d:a4:f4:ea:e7:cf:e9:d6:c2:13:67:74:bd:
ac:17:96:b2:60:69:0f:1b:49:45:fe:a8:0c:0a:c1:51:ad:8d:
f2:0b:1f:f3:34:c8:fd:4f:76:77:74:22:13:a5:cc:d0:7d:cf:
2e:54:98:d5:8e:8b:aa:f1:44:44:19:20:8f:32:a6:58:0c:26:
74:17:22:09:95:a9:d4:5d:a9:79:15:d7:9e:e3:dc:86:4d:50:
c7:71:cf:c7:23:78:49:ca:65:64:88:60:5c:ea:b2:c9:ce:cb:
e4:89:8c:e7:e0:86:c3:eb:94:ba:58:39:c9:be:cd:53:a7:c4:
fc:98:fa:1d:ee:8b:50:b7:3c:37:03:c2:fc:a2:f0:29:dc:52:
b1:e5:6f:b7:e8:4d:a1:2c:41:a8:e2:d5:3a:fb:3e:e0:72:83:
1a:06:bf:3c:39:cf:19:88:6b:23:9b:88:30:cf:4f:fa:5b:bf:
36:b9:51:36:a7:ed:df:b6:35:0b:41:8d:6a:5b:c2:57:d8:67:
7e:57:a2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:37:56 2025 by rpki-client