Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
File: q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft (raw, json)
Hash identifier: Bs1LoqfnjbM5LasSRfWA2OGWXZBXCBQ9Wce2GA2IhcI=
Subject key identifier: 92:02:62:F0:4D:CB:53:F9:C6:3A:4E:8D:36:06:D7:37:8C:30:7B:3E
Authority key identifier: AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
Certificate issuer: /CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Certificate serial: 0196CA974EFA675FE9F1A4BBE6FD4770EE1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
Manifest number: 153D
Signing time: Tue 13 May 2025 17:00:35 +0000
Manifest this update: Tue 13 May 2025 17:00:35 +0000
Manifest next update: Wed 14 May 2025 17:00:35 +0000
Files and hashes: 1: MvXI14tDwVTEk5R-D7-LraqIO4w.roa (hash: 3BHAzhEhaXiTqmDVNfIXzHzlk0Nw0qhzvKzpdNvcPCU=)
2: q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl (hash: Y0wYXsaro8QXhBfVsReCjxmSwbByPR974OxajNxnhXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:97:4e:fa:67:5f:e9:f1:a4:bb:e6:fd:47:70:ee:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Validity
Not Before: May 13 17:00:35 2025 GMT
Not After : May 14 17:00:35 2025 GMT
Subject: CN=920262f04dcb53f9c63a4e8d3606d7378c307b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:2c:5e:91:52:43:68:42:fa:a5:e1:e5:30:fa:
9a:77:3f:5a:1a:fc:14:59:a9:e1:f8:28:c5:39:6d:
fb:e0:ad:a7:51:ad:7b:8b:5b:76:a6:24:0c:15:a9:
95:75:5a:b0:dd:95:3b:ad:2d:1c:97:d8:58:1f:c5:
83:5f:50:b6:77:71:f8:f8:58:56:30:33:b6:3d:ee:
17:26:e2:21:1a:c5:34:d1:79:82:01:cd:62:d6:df:
6a:35:d5:d4:98:7d:57:69:0f:d2:43:31:bc:f0:ed:
0a:d2:67:0c:91:ee:9f:78:66:c2:e9:5c:e5:43:2a:
1b:07:67:17:17:e9:33:1d:15:dd:66:c6:34:d7:1c:
65:e3:e7:a1:be:31:43:0a:af:d8:23:b9:98:0b:7d:
2d:fc:ad:5a:e3:85:67:0f:de:17:22:45:57:21:e2:
e9:d7:23:04:7c:20:78:12:62:5f:7d:b6:71:95:66:
0c:5d:75:e9:f9:2e:61:d6:35:68:62:42:f5:7f:76:
99:82:ff:4f:24:9f:cd:2e:dc:38:17:f6:35:f1:ba:
95:4e:da:58:40:44:18:d8:8f:17:f7:ef:7d:31:c7:
f8:c9:65:2d:4b:a2:84:71:a9:cb:05:46:8c:55:8b:
aa:9c:a5:06:a5:0b:7d:5f:5a:c0:c4:7c:32:d2:a5:
e4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:02:62:F0:4D:CB:53:F9:C6:3A:4E:8D:36:06:D7:37:8C:30:7B:3E
X509v3 Authority Key Identifier:
keyid:AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:55:95:3f:37:64:60:07:85:8b:40:5a:90:f3:04:b4:2d:43:
64:a7:8d:59:6d:27:d9:a9:f6:d7:dd:ae:d8:59:f6:de:b5:6a:
8d:01:3a:95:52:5a:11:3e:7a:bd:3f:8f:0d:5f:b1:c4:39:77:
cf:64:7d:42:3b:7c:99:50:33:63:1f:2d:42:a4:87:0f:05:89:
75:97:2a:72:76:fb:1f:77:c1:eb:3c:a5:4f:3e:c8:db:b7:fa:
2d:1b:d6:e3:25:f0:52:70:9a:e6:2f:89:d8:bf:16:ff:67:0b:
fe:46:e4:90:bb:0c:69:a3:c6:f1:6e:b9:f3:db:6c:37:c5:0a:
5c:86:6e:33:4c:fb:f6:29:fb:85:60:51:51:8b:f6:ba:af:45:
68:e7:8e:22:b2:35:cb:62:3c:9e:ba:81:fd:70:46:92:4f:5a:
4d:a0:c7:46:9b:7c:7c:2c:97:51:c7:32:c7:8f:b4:12:95:c0:
96:8e:c6:f5:9d:85:a7:47:78:e0:fc:33:31:f5:9c:20:02:cb:
f6:88:f3:ad:07:19:cb:c0:21:ac:6a:7a:43:22:61:06:ac:a0:
c5:56:cb:92:a3:de:3a:83:f1:ab:a8:cc:28:c4:a4:b9:d6:4b:
82:9e:9c:a6:84:7d:b3:64:86:e1:5f:25:87:3a:13:7b:68:00:
34:6c:9d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:58:40 2025 by rpki-client