Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
File: sq-PF3TgWSXyTkHe5p5bYj2axj0.mft (raw, json)
Hash identifier: BHytIVQRLjarS9XIIVR2TQ0cMObCt0eMHc0KldLsGTc=
Subject key identifier: 7E:20:22:67:C6:B4:4D:DD:DE:FC:51:46:A9:FF:A5:33:6B:38:FE:80
Authority key identifier: B2:AF:8F:17:74:E0:59:25:F2:4E:41:DE:E6:9E:5B:62:3D:9A:C6:3D
Certificate issuer: /CN=b2af8f1774e05925f24e41dee69e5b623d9ac63d
Certificate serial: 01967F45FC8D08A56E667293FD573FB8D5DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 02:00:15 +0000
Manifest this update: Tue 29 Apr 2025 02:00:15 +0000
Manifest next update: Wed 30 Apr 2025 02:00:15 +0000
Files and hashes: 1: dHmQJZqThrz58J_TSvHl_H-39E8.roa (hash: lBrrDh2GaFmnqywSNW3PsD5utU5WNEXu75PvBG3VZjI=)
2: sq-PF3TgWSXyTkHe5p5bYj2axj0.crl (hash: dS7tktLkJN48I9saHY75KXobVEAmnSjwO001jqLyDhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:45:fc:8d:08:a5:6e:66:72:93:fd:57:3f:b8:d5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2af8f1774e05925f24e41dee69e5b623d9ac63d
Validity
Not Before: Apr 29 02:00:15 2025 GMT
Not After : Apr 30 02:00:15 2025 GMT
Subject: CN=7e202267c6b44ddddefc5146a9ffa5336b38fe80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:b6:c4:25:ff:26:d1:00:5d:f2:d4:89:5c:
32:5a:09:07:b5:5a:65:3f:06:e5:66:2a:27:64:4b:
d8:20:ea:d4:91:79:b2:2c:f6:04:cf:07:ee:34:1e:
e5:7c:03:4b:85:20:40:68:db:62:b2:58:75:02:bd:
53:07:01:b2:a2:0c:b5:ea:4c:0d:75:11:9a:79:89:
e4:e4:56:2b:61:ac:ab:f0:b8:b1:76:fb:aa:f0:22:
92:7b:a1:41:af:38:43:e6:38:fc:a6:b4:a5:51:7c:
e1:e6:15:37:97:84:29:c4:0f:78:e2:14:86:e8:9e:
05:da:e5:38:f6:8f:da:f5:c7:cf:0f:19:cf:0d:b6:
6c:8a:14:46:e4:f1:59:73:ae:99:c7:19:0c:35:81:
28:2c:76:7f:e7:82:16:53:be:ee:ca:14:2c:06:9b:
b0:d3:63:31:a2:8c:21:63:a8:cb:cc:a5:70:c1:5c:
13:e4:f0:68:6b:92:7d:eb:0a:bd:7f:7e:4b:df:6d:
00:ad:90:52:9e:6e:f0:da:31:fa:d7:04:13:db:c4:
42:6c:8c:6b:bb:8f:a8:c6:f7:33:ee:b6:78:d4:ed:
62:6a:88:68:f0:0c:95:88:f4:b8:b3:53:e9:08:24:
ad:e7:9e:59:1f:64:4d:ff:39:8b:c6:48:34:97:ed:
c0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:20:22:67:C6:B4:4D:DD:DE:FC:51:46:A9:FF:A5:33:6B:38:FE:80
X509v3 Authority Key Identifier:
keyid:B2:AF:8F:17:74:E0:59:25:F2:4E:41:DE:E6:9E:5B:62:3D:9A:C6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d9:d2:47:fa:68:05:09:d0:73:b4:7f:f3:be:27:d9:51:f7:
b6:81:b0:d8:7e:7d:69:42:f5:24:89:45:c6:97:d4:2b:f7:ae:
70:a5:6b:2c:21:0a:56:2c:d4:bb:6b:26:02:8a:d6:16:85:f8:
10:90:71:b0:91:ed:b5:d3:b1:46:8d:cf:c5:09:b8:79:1c:65:
c9:82:60:2b:f5:23:0a:ae:c7:8a:3f:29:ca:5e:87:eb:1c:f2:
fa:43:f6:fc:e0:e5:94:ac:92:8e:70:7d:23:b6:29:14:79:d1:
38:95:7a:b5:8d:6e:93:7c:ce:3a:0e:97:60:1a:ad:3c:a2:f1:
5f:e0:2b:91:b1:26:fd:22:62:ff:2c:bf:a1:25:55:0f:e9:0c:
5c:b2:8a:3e:73:73:0b:6a:68:1c:80:a4:66:69:1a:4f:cf:f6:
7a:e7:71:7f:29:08:ef:a1:31:c8:8d:64:2d:c7:23:37:9b:6c:
00:e5:4d:a1:4f:b3:bd:cc:a8:cc:9e:dc:c1:f4:f8:9b:4f:57:
ab:d2:00:ad:4c:19:57:d5:d2:3b:cb:89:6e:84:1a:08:d0:22:
c4:7c:e4:b9:b9:14:60:79:27:f9:87:0d:ff:1e:4c:18:cc:6b:
50:79:30:e7:7e:fe:ab:55:f2:f6:11:fe:96:d0:b0:e7:25:e3:
46:ea:25:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:44:09 2025 by rpki-client