Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
File: q8GRjB9F5uwX2spnp60ZPK8Et7I.mft (raw, json)
Hash identifier: aXkuZopx3bOSpJGmNfGQ7bF083tXUOUZ1zeCR9qeRx0=
Subject key identifier: AD:2A:C0:33:FE:B2:C6:01:7F:DB:0F:99:A8:51:F1:CC:1A:61:44:0F
Authority key identifier: AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2
Certificate issuer: /CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
Certificate serial: 019684DAD2403D05DF7840C1F04E2309C98F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
Manifest number: 038B
Signing time: Wed 30 Apr 2025 04:00:55 +0000
Manifest this update: Wed 30 Apr 2025 04:00:55 +0000
Manifest next update: Thu 01 May 2025 04:00:55 +0000
Files and hashes: 1: 2-PCYSmoRYP78bU8-tuVZLZOhCE.roa (hash: aSC0E7m4wW6P1G+DA0HfmnfnwGNL/CMWhL2kiTYQvoc=)
2: L4RKq9blDuun-Ov7h4-EXCJDU7o.roa (hash: rV2ghgo1vc0bF0beR2sZL8zKS4novhD+fyLSyA4fGEk=)
3: TKYCIQIu4F23JxsEDfGIzBctkEc.roa (hash: EAnr/9lW4r6/S4hhnfhRdmsx8JCo45r2zRW9cF9kcLo=)
4: q8GRjB9F5uwX2spnp60ZPK8Et7I.crl (hash: rfayYzTApaMBcVIP/lk3XDuPz+NMW2thn0fmvm4vChI=)
5: qvNjDJ9eS48JlV1R7hV7YEei3s0.roa (hash: 7WHrrqOQZDnykzDETa13+ZYZFeNzxM1H1+r8MstF8cE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:d2:40:3d:05:df:78:40:c1:f0:4e:23:09:c9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
Validity
Not Before: Apr 30 04:00:55 2025 GMT
Not After : May 1 04:00:55 2025 GMT
Subject: CN=ad2ac033feb2c6017fdb0f99a851f1cc1a61440f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:cb:c4:c2:97:15:d1:17:d5:32:ef:d5:3e:
a7:32:a7:69:02:94:8c:21:ad:7b:5a:1d:5e:ed:5d:
14:26:84:57:01:91:18:46:e3:d8:ed:9d:86:e9:6d:
26:64:57:79:e3:61:fa:2e:03:e4:bc:ef:ff:0e:83:
81:61:fc:ba:d1:59:42:33:c9:06:82:22:67:97:33:
57:5d:4e:12:06:6b:0a:8e:b4:d5:31:ee:90:fc:8c:
c3:40:42:fb:95:ae:af:ca:39:43:1f:fc:a0:b6:1b:
7c:47:d3:aa:3c:54:55:00:c1:2d:f7:55:42:67:d5:
2a:76:93:ad:10:7a:89:56:de:bd:77:0d:b7:12:d3:
3f:24:b7:81:72:a7:5a:75:79:a8:f6:67:20:c2:2c:
5e:dc:8a:76:97:6f:f6:75:6f:e5:56:3f:35:38:d8:
07:a8:70:ae:94:90:63:70:78:44:7a:7f:83:7c:bb:
85:41:42:a5:ec:94:ee:ba:84:91:ec:14:35:6a:d6:
26:c1:15:a7:cc:fa:a3:0f:4d:16:16:1b:33:e0:14:
9d:a0:65:b1:62:e4:69:24:7d:03:c4:1e:43:93:60:
e0:b2:c3:83:c1:6a:65:d8:7e:22:95:cc:f0:ff:19:
dd:30:43:83:2b:57:b0:94:39:ee:39:48:06:13:59:
9b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2A:C0:33:FE:B2:C6:01:7F:DB:0F:99:A8:51:F1:CC:1A:61:44:0F
X509v3 Authority Key Identifier:
keyid:AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:bd:b6:a6:ce:3b:af:0f:89:97:b1:13:77:8f:10:60:9b:58:
5b:b8:07:f5:f7:b4:a8:8b:07:41:7c:e8:b1:6c:bb:b2:28:dd:
d4:51:90:a2:ef:19:41:7d:d0:80:2a:83:ee:d6:28:86:45:82:
f6:39:11:9c:5b:f3:e6:2b:af:4e:85:04:98:2d:99:6b:d6:2c:
66:83:d6:ec:53:84:f2:99:92:cb:eb:98:2f:de:59:16:db:04:
28:eb:80:7c:d9:d7:df:50:3f:ff:1f:27:2a:95:e9:20:9c:51:
a0:2f:e0:77:f7:c5:e3:6b:5a:35:6d:d5:5a:6a:a1:d5:38:85:
6c:4c:e7:31:37:e6:c6:cd:ed:b2:af:cd:0f:8d:87:96:69:9a:
e9:65:86:2a:41:d6:50:0e:19:7a:b8:32:af:ea:d4:6a:ff:c9:
d6:62:28:4e:c5:89:ad:49:80:47:5a:a7:47:a3:6d:53:c7:ec:
c3:33:8b:41:ab:d6:b6:52:82:b2:3c:d6:07:6b:4a:fc:42:1e:
07:db:8c:26:f7:5f:5d:6d:c3:f2:08:e3:73:8b:40:4a:28:6d:
95:e1:b7:f2:4d:72:3b:05:4f:1d:a7:f8:10:a5:00:3b:a8:a1:
28:f4:11:69:2b:62:59:b9:f2:c4:cc:18:d3:5b:38:d9:51:63:
d5:97:ce:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:34:20 2025 by rpki-client