Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
File: q838GnxSDPjRdykgjoXosZfErf8.mft (raw, json)
Hash identifier: dnaQlJcUpbrj7MZF4AdX7E8ie4lWdtlm3G9oPMd05uw=
Subject key identifier: 01:9B:5B:72:DE:04:F7:9D:3D:A4:04:B6:5E:8D:1F:19:96:1B:C0:D0
Authority key identifier: AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
Certificate issuer: /CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Certificate serial: 0196722FDD008FC81C64E50C99759BBB07CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
Manifest number: 0B3F
Signing time: Sat 26 Apr 2025 13:01:01 +0000
Manifest this update: Sat 26 Apr 2025 13:01:01 +0000
Manifest next update: Sun 27 Apr 2025 13:01:01 +0000
Files and hashes: 1: 1HhNu8sG2l0hcVfkxopBJPM0AJA.roa (hash: Qt4OCtipxtwIwXuC2KjZFTe3zgqaRe5IKbtJYrVBUxM=)
2: hJbHpAPOiNkNScuafVbq5FNZ7D4.roa (hash: /FjzkSwns/04Wx3/dyzKMt8M5RMeRjhJm2fdzZxup8w=)
3: q838GnxSDPjRdykgjoXosZfErf8.crl (hash: qjp0FQF3+hB9ULTw91okVxSb9vH8bh8oDGU0ad2tvA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:2f:dd:00:8f:c8:1c:64:e5:0c:99:75:9b:bb:07:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Validity
Not Before: Apr 26 13:01:01 2025 GMT
Not After : Apr 27 13:01:01 2025 GMT
Subject: CN=019b5b72de04f79d3da404b65e8d1f19961bc0d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fe:5f:aa:95:41:88:94:a4:f3:04:a1:66:f0:
30:ba:29:ed:84:ad:13:c2:0f:a0:c6:e1:ec:65:db:
08:8d:75:e2:0d:d1:fc:5b:fa:f0:82:76:cf:04:fd:
f7:0c:4f:96:3c:1d:fa:0a:ed:3d:2d:03:69:22:61:
8b:97:d8:eb:38:76:19:af:40:ca:cd:28:72:e9:81:
23:7f:97:8c:64:01:e1:02:e6:06:f8:54:76:b3:ea:
3a:bb:6f:f1:19:43:28:16:13:2e:12:f6:e3:2e:c8:
fd:04:0c:b1:64:01:68:15:95:d7:87:91:84:04:dc:
f3:04:46:ed:5e:15:f8:d3:84:58:d6:6e:06:07:6e:
3b:fd:59:30:4f:17:6f:a8:79:9b:0f:6f:a0:16:35:
f6:86:cc:db:c2:3c:46:74:1d:5d:5f:db:8e:e4:80:
32:a7:81:db:58:0c:70:df:3d:f0:af:47:e5:e9:e4:
d5:c4:4f:8f:3f:9a:db:aa:3e:6a:c0:a1:78:88:6b:
31:9b:9f:51:69:64:fb:04:07:e7:95:43:91:8e:6f:
ae:8b:09:2a:e4:f7:44:51:93:76:84:c5:09:a8:3b:
e1:3a:9e:17:f0:ed:c3:49:54:95:ae:3d:b7:50:1d:
69:6c:d9:81:e0:4e:a9:09:6f:1d:f5:8d:f9:a2:bd:
41:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9B:5B:72:DE:04:F7:9D:3D:A4:04:B6:5E:8D:1F:19:96:1B:C0:D0
X509v3 Authority Key Identifier:
keyid:AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:6a:3c:17:96:d5:27:05:63:0c:49:37:6d:0c:24:ae:cf:7d:
a8:22:3b:47:d7:8c:2f:b4:92:4e:e3:07:4e:fb:95:c1:f4:95:
98:66:0f:73:e0:45:d5:64:07:61:f0:13:8d:90:ac:a8:e9:61:
aa:04:6d:23:6e:36:4b:c2:27:e0:a3:4e:d7:2e:48:66:4e:10:
2a:00:3b:82:9f:66:2c:13:18:67:ea:a0:a8:4d:8e:16:b0:11:
80:c5:02:b3:56:48:9e:2a:ff:db:a5:6c:78:b8:d0:b0:46:ed:
6e:4a:83:32:36:f5:d6:46:88:66:b9:7e:f1:c4:34:97:af:4d:
ca:32:ac:94:7d:27:75:e8:76:41:a1:2d:67:23:37:33:5d:92:
23:2a:a9:69:37:d8:bf:e8:5f:3f:a6:99:2f:3e:c6:98:3a:71:
1d:37:cb:cb:4f:11:38:ce:21:4c:e3:35:0d:69:25:e6:1a:50:
b8:59:b7:9a:f6:a0:e6:5f:2f:a1:84:c8:c4:75:87:e0:fe:5c:
1c:d4:4b:d2:7f:12:6d:e4:0f:15:39:21:de:be:65:8d:7d:99:
ee:1d:aa:d8:84:ee:c8:65:10:49:88:ed:2c:78:ec:81:75:ca:
df:2b:6c:d3:9b:dc:1f:68:74:be:2e:19:c1:72:69:71:92:01:
16:c9:5f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:03:49 2025 by rpki-client