Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
File: p2q9qQNG0MrSXcpvdFC8z40I53E.mft (raw, json)
Hash identifier: FGRbpkpfoyMg8KqygJLrN08RfY67Q+/2cGzAsiSCB1M=
Subject key identifier: FF:03:84:A3:BD:23:C1:60:43:FD:DA:FC:BE:84:45:CA:A8:2E:4E:67
Authority key identifier: A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
Certificate issuer: /CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Certificate serial: 019672668774F67F384E77D0AA6DE61D8642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
Manifest number: 0BEF
Signing time: Sat 26 Apr 2025 14:00:43 +0000
Manifest this update: Sat 26 Apr 2025 14:00:43 +0000
Manifest next update: Sun 27 Apr 2025 14:00:43 +0000
Files and hashes: 1: MzC4INKIsgRwDzo9x7bkUxRAB1c.roa (hash: Uid11k3HN0TXoHFcev6gIuzNP6/XOwG1nE/1TIUrcps=)
2: p2q9qQNG0MrSXcpvdFC8z40I53E.crl (hash: IoQH649wxWHXnsMe8JSns9+ywVmmyECxIxhJhTyQi6A=)
3: qo2a4lO3f4INhuJwHg-a_kb1Uw0.roa (hash: Mq/0MPb+8DLoVQSsA/LmGY9yMeYe1hfS1EX+C5wkfg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:66:87:74:f6:7f:38:4e:77:d0:aa:6d:e6:1d:86:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Validity
Not Before: Apr 26 14:00:43 2025 GMT
Not After : Apr 27 14:00:43 2025 GMT
Subject: CN=ff0384a3bd23c16043fddafcbe8445caa82e4e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a1:38:5e:a5:4a:a0:46:37:50:9d:66:ea:c0:
87:6c:23:2a:0d:fc:f4:24:f5:23:95:cc:5c:e2:ca:
aa:b8:c8:5a:d3:06:af:d2:28:1d:a9:88:e7:5a:31:
0d:21:20:51:ee:b0:a9:10:46:7d:40:87:be:97:4e:
97:cb:12:a1:30:b7:67:bb:be:03:56:f3:56:cc:cd:
ed:a8:a7:12:a5:dd:7c:cc:08:01:9f:d2:ab:61:1a:
5a:9e:c4:3a:a9:40:0a:15:d7:63:c1:58:74:e6:0c:
8d:14:4a:c5:89:79:5f:1a:58:40:e6:85:65:7e:f6:
24:5a:c1:2d:dc:b9:a0:2e:71:51:4c:70:e8:77:c5:
48:69:89:4b:b7:b1:c1:d5:32:a7:2a:e6:25:91:cb:
e7:c6:0d:f5:bf:af:e1:65:84:a2:62:3f:bb:12:ff:
a3:08:09:3e:20:c4:fb:68:18:87:69:91:11:f3:dc:
0e:c5:ee:d5:fe:7e:27:de:70:2d:80:a8:d8:5a:76:
f9:71:a4:10:ec:89:45:02:fd:80:5e:22:bf:dd:e3:
21:6c:d1:0a:ca:23:ed:2c:0d:8e:ad:b1:48:63:fa:
b0:73:fb:cc:12:57:f1:be:f7:fe:3b:32:66:46:1d:
12:a2:26:ce:a3:ab:d1:fd:84:29:db:96:6f:8a:9f:
8b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:03:84:A3:BD:23:C1:60:43:FD:DA:FC:BE:84:45:CA:A8:2E:4E:67
X509v3 Authority Key Identifier:
keyid:A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:cd:41:cd:50:b0:87:90:cd:c7:7f:32:e4:9e:3a:23:9e:2a:
c9:05:8b:88:fa:b9:90:26:a6:9e:9c:be:8b:b3:46:5c:fc:5a:
d2:a7:b0:15:d9:4f:8c:48:c9:f3:4a:33:70:d5:59:fe:d9:13:
cd:40:bf:47:f3:41:fe:05:63:46:bd:cd:d8:3f:b8:25:a4:0f:
7d:6c:f2:70:43:7c:b4:48:9f:6b:80:2b:2c:aa:f4:46:56:cf:
05:57:0d:cb:b1:15:f7:57:f5:f9:6a:9e:a6:65:98:2f:17:16:
28:ef:52:b7:94:6e:2d:21:1e:ff:07:03:ac:5f:a3:f6:9c:da:
ed:0d:1c:2d:16:86:a8:a3:d4:46:4a:2a:f9:53:96:af:d8:ed:
25:e5:b2:dd:d3:e8:51:d8:93:17:92:f5:0f:4b:de:a3:f4:74:
bb:72:da:f0:2b:79:d8:2c:3d:55:b5:3e:50:9a:c5:7d:71:72:
3d:f8:37:fc:a1:e8:f8:48:f8:71:cb:87:31:90:22:34:c2:62:
0e:1f:d5:1b:ba:4b:69:ad:5f:42:50:a6:fc:23:0d:4b:94:3f:
c7:41:e7:bd:68:66:60:32:fc:7b:0e:ad:2c:37:ec:3e:26:20:
3b:95:ae:f0:3b:63:3d:c9:64:dd:8b:5a:cf:e5:e6:98:a8:74:
bc:e2:ab:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:00:50 2025 by rpki-client