Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/0c4ad1-439a-4e61-a8b6-3fdd61f6852f/1/ABBUeN79UTt9iCKn2SBPh17VR9g.mft
File: ABBUeN79UTt9iCKn2SBPh17VR9g.mft (raw, json)
Hash identifier: zeO99ObsnC62r/nGNxY3KiBICZRPkb8uypc5zGdV3Vg=
Subject key identifier: 23:F8:EB:74:07:5F:84:8D:9C:01:99:C0:98:C1:72:40:18:80:96:B7
Authority key identifier: 00:10:54:78:DE:FD:51:3B:7D:88:22:A7:D9:20:4F:87:5E:D5:47:D8
Certificate issuer: /CN=00105478defd513b7d8822a7d9204f875ed547d8
Certificate serial: 019674FA36BBCCB28EB81E27876558557438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABBUeN79UTt9iCKn2SBPh17VR9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/0c4ad1-439a-4e61-a8b6-3fdd61f6852f/1/ABBUeN79UTt9iCKn2SBPh17VR9g.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 02:01:17 +0000
Manifest this update: Sun 27 Apr 2025 02:01:17 +0000
Manifest next update: Mon 28 Apr 2025 02:01:17 +0000
Files and hashes: 1: ABBUeN79UTt9iCKn2SBPh17VR9g.crl (hash: KB75ZQhVnx43o5gkfvTZbfqFUcu/p2Vn3lRC52ZzDz8=)
2: dS05zkL9CP3GUqpj0_iCe3wFLlY.roa (hash: 1LEnQ3M0NnIsQstsFHtx+z0Hxt2rdc1JklK+0G91crQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/0c4ad1-439a-4e61-a8b6-3fdd61f6852f/1/ABBUeN79UTt9iCKn2SBPh17VR9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/0c4ad1-439a-4e61-a8b6-3fdd61f6852f/1/ABBUeN79UTt9iCKn2SBPh17VR9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABBUeN79UTt9iCKn2SBPh17VR9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:fa:36:bb:cc:b2:8e:b8:1e:27:87:65:58:55:74:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00105478defd513b7d8822a7d9204f875ed547d8
Validity
Not Before: Apr 27 02:01:17 2025 GMT
Not After : Apr 28 02:01:17 2025 GMT
Subject: CN=23f8eb74075f848d9c0199c098c17240188096b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:da:31:68:99:ea:77:cb:5c:5a:3c:7d:0f:1c:
c8:2a:6e:ab:aa:f7:58:e2:e0:ba:3e:3d:01:dc:9a:
7b:0d:5c:f3:b4:e9:6b:50:b8:f7:11:f6:7f:77:b2:
41:36:80:6c:e7:d7:b7:77:f5:52:dd:26:ac:ab:86:
54:ce:08:9c:5e:f1:fd:a5:e0:69:02:6e:29:4a:aa:
f1:b2:fb:58:7a:9b:89:fe:61:f2:0c:01:89:68:1b:
35:b7:c9:5f:10:30:ce:0e:7b:cd:91:3b:c0:72:c9:
59:1b:56:5b:9b:12:8b:0a:fa:a4:34:b5:d8:e4:69:
04:90:8d:d3:5b:b5:41:c7:38:0e:cb:c2:4d:bd:63:
16:70:5a:52:17:41:f4:6d:38:cd:2c:c7:8b:41:fc:
14:db:ce:0f:3a:c4:03:cf:53:90:57:0a:4b:e0:bc:
d2:d7:65:0b:f6:be:89:08:d5:7f:7b:51:58:9a:20:
98:b0:c1:90:fc:fe:df:4b:6f:be:a6:aa:ed:9b:53:
67:cf:45:5f:31:80:d2:dc:f8:7e:37:97:65:24:74:
60:07:fa:87:da:d5:ae:69:5d:e2:d0:af:57:c3:e1:
75:b8:46:ad:7b:02:87:1b:a1:e2:b8:62:4a:bc:4f:
2e:93:99:4a:de:34:aa:39:5b:3f:f1:bb:c1:9d:f1:
c5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F8:EB:74:07:5F:84:8D:9C:01:99:C0:98:C1:72:40:18:80:96:B7
X509v3 Authority Key Identifier:
keyid:00:10:54:78:DE:FD:51:3B:7D:88:22:A7:D9:20:4F:87:5E:D5:47:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABBUeN79UTt9iCKn2SBPh17VR9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0c4ad1-439a-4e61-a8b6-3fdd61f6852f/1/ABBUeN79UTt9iCKn2SBPh17VR9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0c4ad1-439a-4e61-a8b6-3fdd61f6852f/1/ABBUeN79UTt9iCKn2SBPh17VR9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:df:53:d2:7e:1e:17:e8:a4:23:63:6f:22:15:7c:32:ac:40:
9a:48:4c:db:e7:a5:d1:3d:40:26:64:cd:9f:a3:c2:a5:dd:8f:
10:46:6d:c3:b7:e3:7f:74:5c:a0:c3:9b:c5:66:06:11:64:6c:
df:51:ac:5e:57:cd:6e:c5:5c:b0:ff:19:18:60:94:80:cd:f3:
92:b8:0b:b7:1c:bd:7b:18:4c:4e:70:e1:5e:70:9b:7e:89:65:
1c:09:e1:28:76:0d:3d:74:a3:8e:d1:53:76:e2:a9:ed:90:31:
40:14:95:55:87:e4:39:58:92:3e:54:d9:18:b0:bc:6c:ae:c1:
41:4b:93:8a:c8:f6:6e:a8:26:cb:c1:b5:b5:18:96:18:a9:8b:
46:16:ee:ac:bd:a9:b4:6e:c9:67:08:43:b0:e0:de:13:e0:09:
d6:1a:57:fb:8d:ac:fe:e1:dc:de:59:4e:01:e9:80:24:e7:0b:
76:0e:bc:e9:ae:cf:ee:0d:36:11:29:cb:78:08:c2:3f:0b:a4:
72:e4:09:a5:7f:83:93:ab:36:8d:53:ad:b6:c4:e0:e9:57:60:
2a:4f:42:ee:6c:c4:55:a7:5a:21:bb:90:4e:cf:dc:64:fe:d6:
80:7d:f2:c7:61:01:c5:15:43:1c:00:b8:98:64:7c:52:6c:ee:
17:4f:eb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:43:59 2025 by rpki-client