Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
File: qJbB4UyG5u9bFnJPcRdnbschSVc.mft (raw, json)
Hash identifier: isbj861M/uZsuiHnwkEiGfuf5GKb0L+N8vGdGTA3HMg=
Subject key identifier: BB:7A:E4:EB:3D:BF:72:49:BF:8E:D1:78:89:B3:89:21:77:42:5B:C3
Authority key identifier: A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57
Certificate issuer: /CN=a896c1e14c86e6ef5b16724f7117676ec7214957
Certificate serial: 0196862412410D8469EB26784BCC0D405362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
Manifest number: 151A
Signing time: Wed 30 Apr 2025 10:00:32 +0000
Manifest this update: Wed 30 Apr 2025 10:00:32 +0000
Manifest next update: Thu 01 May 2025 10:00:32 +0000
Files and hashes: 1: nHAl3SgY4EfLu7utGVmeJZcr1_s.roa (hash: lrIHVcXwhi/Eq6CWKi+Aq4ByD1FHp2btPHqZK4Ez+BE=)
2: qJbB4UyG5u9bFnJPcRdnbschSVc.crl (hash: GqGV+dyFCBDLKGdwUxg2Mx1+/EGVXKUsvk3pQQis+G8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:24:12:41:0d:84:69:eb:26:78:4b:cc:0d:40:53:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a896c1e14c86e6ef5b16724f7117676ec7214957
Validity
Not Before: Apr 30 10:00:32 2025 GMT
Not After : May 1 10:00:32 2025 GMT
Subject: CN=bb7ae4eb3dbf7249bf8ed17889b3892177425bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7a:96:f4:47:a5:ed:67:47:06:59:e9:2a:26:
a1:77:cf:a1:37:7d:94:3a:16:7f:f7:f6:eb:95:cc:
20:cd:3f:d9:fc:08:89:6f:e3:33:eb:2f:a3:5a:e1:
f3:91:65:d9:78:b3:aa:1f:4f:4f:9b:af:ef:75:8f:
4c:2c:78:e8:17:fe:60:7a:88:be:26:16:7a:12:6b:
61:3a:d4:a0:28:41:05:ac:d7:6f:3c:26:6d:04:78:
81:f5:ed:60:2f:2f:91:f7:03:b1:ea:6b:4d:aa:a7:
db:b5:36:ba:bb:4c:03:45:68:3a:4a:fe:16:43:0f:
4b:1a:13:3e:a5:07:a5:3d:fe:74:2b:bd:37:66:f7:
d2:bb:86:da:b5:08:10:80:12:55:f9:dd:30:62:10:
dc:28:58:fd:a2:56:32:51:9c:09:f4:5b:4b:ad:0f:
c3:09:4a:39:2b:ec:5e:c5:83:68:34:5b:4c:af:5e:
82:2e:a5:64:ed:8e:7a:b3:28:e1:62:c2:1d:36:11:
70:a9:32:fc:b1:49:ab:17:41:01:59:d5:1d:3a:34:
ee:92:3a:54:10:99:de:68:5a:02:14:96:9c:d0:ba:
0f:ed:ee:78:57:0f:eb:2c:ad:39:c8:7e:93:fd:8a:
65:d4:e8:a8:d7:f3:d2:e8:a9:52:59:8c:b9:d7:21:
16:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7A:E4:EB:3D:BF:72:49:BF:8E:D1:78:89:B3:89:21:77:42:5B:C3
X509v3 Authority Key Identifier:
keyid:A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:55:3a:9d:db:4b:92:c3:78:40:9e:d3:a3:01:4d:29:43:e5:
b6:98:81:7f:81:e8:80:90:8c:11:6e:08:ce:9f:c4:cc:79:21:
93:bf:f9:9f:79:92:e2:cd:b2:80:06:2a:8f:4d:0a:70:e3:58:
3b:ee:d5:88:f0:85:7b:c6:4e:98:53:61:8c:12:e0:6b:b5:30:
af:53:9a:15:17:74:74:2b:92:0b:81:6e:46:6d:94:98:f0:83:
ac:63:96:aa:a7:78:71:8d:68:17:29:34:d4:29:f7:60:67:f0:
f2:29:6c:74:19:d7:2c:6e:78:cf:a5:dd:e9:2f:52:7b:e1:5e:
78:2a:4f:64:e4:36:a8:55:95:55:84:30:24:ff:09:28:f3:78:
ac:6b:77:c1:a6:e6:24:e1:8e:ea:ff:84:7c:91:7c:8b:53:c6:
55:4e:a8:34:7b:f9:6a:87:e5:c1:62:f8:82:1c:26:12:46:6a:
ed:71:82:23:8c:1f:2f:ce:a2:e5:8e:60:3e:02:5c:b2:b1:61:
b8:5e:25:5d:60:05:f2:dd:38:d9:32:8a:6c:a9:b0:85:14:e7:
84:be:33:ca:7a:8c:06:14:f3:2b:6d:6a:52:6f:2a:74:26:bb:
8d:a3:4a:06:21:4b:27:cf:04:19:b9:f2:f4:d0:90:01:a8:20:
18:06:02:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:24:50 2025 by rpki-client