Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
File: q8ETx66mtxSgYOn3w-cVaeYD05U.mft (raw, json)
Hash identifier: qH20Ue8723E5TEh8CUW+gTSEiTXAO1Aief4GX5SV6Cs=
Subject key identifier: 4B:FC:C6:5B:8F:85:E4:3D:F7:73:19:24:EA:20:91:21:93:FE:FA:41
Authority key identifier: AB:C1:13:C7:AE:A6:B7:14:A0:60:E9:F7:C3:E7:15:69:E6:03:D3:95
Certificate issuer: /CN=abc113c7aea6b714a060e9f7c3e71569e603d395
Certificate serial: 019678313BDE95AC3A6A3512D2CC65A36D26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
Manifest number: 0BFF
Signing time: Sun 27 Apr 2025 17:00:14 +0000
Manifest this update: Sun 27 Apr 2025 17:00:14 +0000
Manifest next update: Mon 28 Apr 2025 17:00:14 +0000
Files and hashes: 1: Q7n8gF3ZYVbGL83zzh2dQnmawHc.roa (hash: nZCFM7j2sE+1KCmTTykVW0xazn9X/ppTbL+++Wr3NQI=)
2: q8ETx66mtxSgYOn3w-cVaeYD05U.crl (hash: rjYbL98HCDAQRJEzcgxF7fkFYRodvfrmSMZT9X360Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:3b:de:95:ac:3a:6a:35:12:d2:cc:65:a3:6d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc113c7aea6b714a060e9f7c3e71569e603d395
Validity
Not Before: Apr 27 17:00:14 2025 GMT
Not After : Apr 28 17:00:14 2025 GMT
Subject: CN=4bfcc65b8f85e43df7731924ea20912193fefa41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:18:6f:85:4d:c5:72:75:c1:bc:d3:96:22:8f:
4d:a3:3f:f3:cf:0b:c9:eb:c8:95:b4:11:96:fc:e0:
43:93:e6:89:37:df:ea:f0:fe:fb:1b:21:1f:f2:13:
2d:07:4c:9e:02:3b:e2:51:59:4c:0c:9b:e9:af:de:
44:21:18:f0:42:b4:41:49:05:58:c2:28:23:d7:d0:
6a:27:e9:c0:2c:b4:ae:19:72:bd:57:67:20:0a:17:
40:02:f9:ab:d4:a7:1a:ca:92:91:c0:74:e6:db:ca:
9b:9e:f8:cf:f7:6d:93:3a:cb:90:e0:2a:fd:1f:cb:
d2:f0:04:4b:a3:65:af:f1:16:13:8c:68:fe:90:9a:
d1:cf:13:1e:74:5c:67:ed:e6:fc:ce:4e:b2:dc:9b:
23:b2:ae:81:c6:9d:66:fa:dd:c3:ea:e8:12:f2:9b:
e1:6e:7c:a6:9f:bd:f6:92:b1:ae:55:9c:af:0f:62:
8e:69:28:2e:db:55:10:66:7a:68:e4:fc:6e:39:7d:
e5:8d:15:73:12:98:4c:9f:56:a4:f0:51:73:48:16:
ee:ed:af:ca:2b:86:71:35:55:23:4e:f6:88:18:1d:
75:c4:2c:45:0c:cc:98:fd:08:54:e4:7d:ba:76:a5:
cc:cc:4d:d5:65:77:01:5e:3c:7d:6a:80:ce:fb:62:
3d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FC:C6:5B:8F:85:E4:3D:F7:73:19:24:EA:20:91:21:93:FE:FA:41
X509v3 Authority Key Identifier:
keyid:AB:C1:13:C7:AE:A6:B7:14:A0:60:E9:F7:C3:E7:15:69:E6:03:D3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b1:6f:a1:90:d3:57:cd:71:c0:33:0d:10:f1:4e:2f:bb:3b:
16:f2:da:ea:4d:ff:6d:51:51:a2:8e:eb:bd:62:b7:c1:00:f3:
64:57:6b:2c:d7:8e:96:04:ee:2f:ea:f8:8e:7a:6c:fb:87:b1:
74:93:99:ef:43:55:af:73:78:f7:02:d9:bf:83:ed:8e:73:df:
ea:0c:1d:5e:3e:d2:0a:ef:7e:38:53:5e:b7:79:9a:15:63:60:
be:0f:bd:72:07:b9:ce:11:84:b4:e4:0a:74:e2:5f:2a:24:97:
5f:82:d1:f6:6b:39:83:1f:e4:49:28:69:73:0f:13:eb:9c:84:
59:31:e0:30:a8:5f:8e:bf:d6:bd:4e:ca:a8:8d:e9:eb:57:df:
7f:66:cf:03:fc:81:bb:72:2b:5e:48:50:9b:26:77:ff:68:27:
1f:a4:65:e9:a2:6c:8d:c1:d9:a1:e1:8e:99:f9:1a:3f:01:14:
a1:59:4a:1f:3c:0a:ce:ba:7c:cd:3e:15:67:b4:f7:a7:85:5b:
f6:ba:06:56:05:cd:25:32:b0:46:38:1a:85:43:fb:5b:66:69:
cb:df:3d:84:6d:17:9d:be:05:2a:cf:0b:cc:e9:45:52:d0:19:
55:bc:c9:c3:0a:94:23:03:92:13:7e:eb:99:79:26:3e:58:72:
70:cf:76:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:13:36 2025 by rpki-client