Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.mft
File: q7lESdTSRidxdzvAimJFB9pRKw0.mft (raw, json)
Hash identifier: pJenwZsFf6nTnhK7RIIFYSuErA73YbJH3uBwSN2Ii8k=
Subject key identifier: B0:F2:70:34:5F:6B:2E:02:1A:CA:0C:71:BE:5B:0E:6E:7E:D6:5B:F7
Authority key identifier: AB:B9:44:49:D4:D2:46:27:71:77:3B:C0:8A:62:45:07:DA:51:2B:0D
Certificate issuer: /CN=abb94449d4d2462771773bc08a624507da512b0d
Certificate serial: 01967EA1547DF7A3B9D604F22E2B89E91372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7lESdTSRidxdzvAimJFB9pRKw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.mft
Manifest number: 05F8
Signing time: Mon 28 Apr 2025 23:00:24 +0000
Manifest this update: Mon 28 Apr 2025 23:00:24 +0000
Manifest next update: Tue 29 Apr 2025 23:00:24 +0000
Files and hashes: 1: q7lESdTSRidxdzvAimJFB9pRKw0.crl (hash: P+0CBosru6tP+pSoYmCsTy2G5eMbTyTQ/xoXbRL+9hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7lESdTSRidxdzvAimJFB9pRKw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:54:7d:f7:a3:b9:d6:04:f2:2e:2b:89:e9:13:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abb94449d4d2462771773bc08a624507da512b0d
Validity
Not Before: Apr 28 23:00:24 2025 GMT
Not After : Apr 29 23:00:24 2025 GMT
Subject: CN=b0f270345f6b2e021aca0c71be5b0e6e7ed65bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1d:8b:d7:df:02:d8:30:5b:0f:f9:8f:98:ae:
4b:89:96:ed:7f:89:a1:45:49:5f:dd:6a:c2:53:37:
5e:bb:46:c2:f9:d0:bf:8d:ab:b7:9c:6c:62:a3:cd:
aa:0a:3a:02:01:7a:06:b5:c0:f9:c6:85:43:e4:d0:
4b:e9:be:4d:1e:ca:73:ca:a9:36:d0:82:5a:98:6b:
fd:0c:6c:4f:c3:1c:c1:cc:b4:5a:e5:40:3c:26:d9:
0a:cd:80:ec:0d:95:f1:0d:3b:c0:20:00:68:f6:78:
9b:3a:bc:e0:39:c0:e6:2a:6c:47:15:64:3c:29:c8:
65:6d:43:b1:f6:f8:8e:db:91:a0:95:3b:0a:41:a2:
0c:31:ea:3e:4d:67:09:4e:76:06:fe:6f:8a:83:c9:
88:7d:85:6c:04:14:dc:84:ea:82:af:a5:e7:21:30:
d3:f9:b8:25:92:bc:c6:d3:96:e7:d3:57:6f:3d:c3:
5a:f8:f1:f9:bc:8e:de:16:bd:e6:62:60:4e:28:44:
15:e5:ec:61:af:47:62:a5:1d:6d:f5:a0:0d:4e:db:
44:14:98:71:e4:92:8e:fc:7c:4e:f1:55:84:5a:95:
11:c7:41:c2:89:34:24:00:9d:98:b0:ad:1f:9d:d5:
19:81:dc:a3:6e:b9:3a:af:3e:8e:63:34:db:ef:b0:
c0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F2:70:34:5F:6B:2E:02:1A:CA:0C:71:BE:5B:0E:6E:7E:D6:5B:F7
X509v3 Authority Key Identifier:
keyid:AB:B9:44:49:D4:D2:46:27:71:77:3B:C0:8A:62:45:07:DA:51:2B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7lESdTSRidxdzvAimJFB9pRKw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9a:e7:33:67:3d:c3:16:5b:3a:29:ba:00:2b:ac:12:18:e3:
64:b9:77:52:e1:91:de:fd:20:b8:5e:aa:64:15:71:4f:03:a0:
51:92:96:72:12:16:14:fa:16:e4:61:d1:50:12:7b:85:ca:0b:
31:47:80:26:db:f4:1e:9a:12:ce:e7:82:5b:ed:a2:c7:41:20:
69:4d:7c:71:c5:59:af:62:b3:bb:b4:75:36:be:94:eb:92:c7:
99:07:e3:03:2f:42:e2:81:6a:9f:24:01:6e:4e:83:0d:f7:7b:
c2:f8:fc:9a:26:01:1e:cb:05:45:7c:d4:2c:68:0d:a0:ae:76:
68:47:1c:ae:03:c3:7c:4d:57:ff:a8:fa:bf:c4:39:1c:a4:4a:
47:61:f2:8a:73:26:e6:2c:67:59:d9:37:cb:35:bf:a0:52:98:
09:34:7b:07:50:3c:d2:fa:20:bb:7d:aa:3b:ce:62:1a:46:ca:
47:0b:6b:13:d6:a2:5e:46:2d:8c:53:1d:71:59:23:72:d2:bc:
6e:59:0b:b1:4e:db:b5:0f:38:88:a3:0c:25:4d:07:9c:b9:d5:
18:52:67:b8:c1:77:71:c0:85:54:59:e8:dc:ee:8c:ea:a3:28:
14:1f:20:72:81:ef:8b:64:c0:c2:98:88:29:c5:88:ad:7d:01:
9d:64:b8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:19:53 2025 by rpki-client