Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
File: q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft (raw, json)
Hash identifier: yijXHzDm/4X6b5HQolxLHwxdbGO1lG/6PGz4nfWIZTA=
Subject key identifier: FA:8F:8A:95:D1:A1:30:AB:19:49:16:99:F0:D3:D3:19:D8:D4:C5:45
Authority key identifier: AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2
Certificate issuer: /CN=abb060166d64cead0e295797e8d27c55d8898bc2
Certificate serial: 01968B4A6D5364E8BC13030ADA51FEF1B60F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
Manifest number: 151B
Signing time: Thu 01 May 2025 10:00:32 +0000
Manifest this update: Thu 01 May 2025 10:00:32 +0000
Manifest next update: Fri 02 May 2025 10:00:32 +0000
Files and hashes: 1: ZVdKIHMCZIgZmO29HfZuK9KianY.roa (hash: 2kGDIO6FKG2t3hXhHnF2iU2nfmaxGFRQZKaQHnUSkxM=)
2: q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl (hash: 6ywep4dp8+BsMWTgiC42NsBEHLLv8u87ouv95mhqaWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:4a:6d:53:64:e8:bc:13:03:0a:da:51:fe:f1:b6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abb060166d64cead0e295797e8d27c55d8898bc2
Validity
Not Before: May 1 10:00:32 2025 GMT
Not After : May 2 10:00:32 2025 GMT
Subject: CN=fa8f8a95d1a130ab19491699f0d3d319d8d4c545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ba:12:de:13:5b:0b:b7:51:34:0b:46:77:74:
ab:04:62:09:59:55:16:89:93:82:74:5d:a0:6d:0a:
db:61:a2:47:4c:5b:88:af:5e:50:6c:78:9d:3f:2f:
8c:b5:96:e1:ee:c0:7f:30:43:e2:90:17:c8:f7:2d:
e3:03:20:6f:5d:69:ec:30:34:bf:b4:d7:6f:e7:d1:
62:14:0d:d4:5e:60:5d:ae:52:97:ad:cc:22:ae:0d:
28:5d:9b:3a:ba:6e:1d:aa:bd:cf:bc:63:ca:12:42:
75:71:46:81:3d:2c:10:cb:5a:ff:1a:a0:5b:6d:c1:
11:7d:a7:7e:e1:cc:a0:21:dd:e6:1a:f6:e4:46:43:
7e:7f:51:c0:46:69:58:47:44:64:66:cc:71:3a:b0:
f7:55:a4:1d:20:40:91:35:40:b1:75:e8:36:ff:02:
3c:58:d9:ca:9e:14:f1:ba:15:11:3a:75:27:84:7a:
ab:33:68:bb:e4:c1:8e:94:51:78:a2:ca:25:f3:ac:
51:ab:57:9a:cf:cb:4a:09:9f:86:c2:d6:20:7d:09:
91:76:06:83:27:fb:c9:19:54:7b:04:e3:36:85:4f:
25:ed:62:82:f8:5d:ff:31:8a:a2:fe:82:88:cd:32:
c9:0a:d6:56:62:e1:0c:4f:ea:88:a5:62:75:dd:78:
3a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8F:8A:95:D1:A1:30:AB:19:49:16:99:F0:D3:D3:19:D8:D4:C5:45
X509v3 Authority Key Identifier:
keyid:AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:71:25:43:6b:85:a4:16:d7:26:a0:d3:c7:fa:0c:a5:51:d3:
3a:ae:b9:30:07:9e:31:db:9b:52:78:4f:c3:2e:27:d2:37:f1:
0d:a7:68:a7:7b:64:64:e4:63:76:7e:b3:e9:67:ad:56:80:66:
fc:50:12:52:fa:02:aa:02:55:0c:da:e6:3d:cb:86:b2:60:01:
5b:04:fd:20:f2:bc:be:d5:17:84:42:32:b1:07:6f:34:84:ec:
ce:b7:18:83:7d:9f:f4:20:78:f2:6b:18:3d:1d:7b:74:13:28:
88:77:69:c9:42:16:85:12:1d:02:c8:cf:f2:9f:6f:a0:e4:6f:
db:f6:bf:67:d6:d1:38:0f:04:06:3e:9e:43:d5:a2:ea:c5:bf:
8d:10:06:03:77:1f:24:92:4d:08:ea:cc:12:78:74:21:7d:22:
10:4b:5c:83:98:bb:99:52:99:f3:a3:11:b9:f6:3f:66:d9:8a:
22:cb:f1:e1:3a:43:6c:99:97:50:c7:3c:cd:94:ae:3c:cd:fa:
8e:77:8c:70:59:1b:6f:4e:dc:6b:da:e4:cb:b7:43:92:60:f5:
12:73:18:06:a4:ef:62:72:0e:b5:c0:13:8f:a5:d7:58:9d:91:
90:54:3f:ab:2c:36:0d:f9:78:9a:b4:37:64:6d:87:03:38:f1:
5a:76:76:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:03:26 2025 by rpki-client