Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
File: qD8d69XUeEhD-qKIsuAciFBsHMk.mft (raw, json)
Hash identifier: igfAH4r1h5pXXlH6chPS23sDvGPa9pKWE5HKbWKK0xE=
Subject key identifier: 2A:BE:BF:5A:F1:61:C1:8D:EB:60:84:4C:DA:77:AD:7D:77:18:D5:65
Authority key identifier: A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9
Certificate issuer: /CN=a83f1debd5d4784843faa288b2e01c88506c1cc9
Certificate serial: 01967A57779E6B01EF66C7FC7F2FF3CFE13E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
Manifest number: 136E
Signing time: Mon 28 Apr 2025 03:01:14 +0000
Manifest this update: Mon 28 Apr 2025 03:01:14 +0000
Manifest next update: Tue 29 Apr 2025 03:01:14 +0000
Files and hashes: 1: BZ13VNeYDJ675QrTvza6Su89fFQ.roa (hash: 1LD0YSVmtKovTGtmhUY3CjQg1PtKAp7I1QWK9ijZOII=)
2: qD8d69XUeEhD-qKIsuAciFBsHMk.crl (hash: CYQNHgia6pK1Pjf/OraSzl1ePfHuwsMNy0PBQtaGPns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:57:77:9e:6b:01:ef:66:c7:fc:7f:2f:f3:cf:e1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83f1debd5d4784843faa288b2e01c88506c1cc9
Validity
Not Before: Apr 28 03:01:14 2025 GMT
Not After : Apr 29 03:01:14 2025 GMT
Subject: CN=2abebf5af161c18deb60844cda77ad7d7718d565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:40:00:82:70:3d:6c:b2:86:c4:58:9e:02:45:
f2:9e:22:cd:ec:e2:dd:b9:c0:a4:ba:1c:49:ba:ee:
2c:95:f6:cf:1c:1a:db:10:11:13:b6:b1:b2:50:8e:
74:f9:96:c8:7a:e5:44:5f:4b:d6:64:ba:50:04:f2:
6e:e2:64:2a:f6:f9:9d:73:e8:63:47:c3:8f:79:d4:
6b:bb:ff:47:c8:17:ac:85:db:ae:0f:86:b7:bf:cc:
d5:fb:3f:b0:5d:c8:9a:35:3c:a1:ea:24:5d:7f:c9:
44:95:93:19:1b:48:fe:2b:3a:3d:e4:29:62:cf:c5:
55:b7:9b:70:c3:c4:a3:bc:0a:f9:49:cb:66:4c:d3:
8d:7f:cb:a0:63:3a:e8:2b:cb:4d:77:87:99:9a:76:
82:29:3b:25:23:b0:35:3e:ac:7f:4f:ac:77:80:bc:
4e:14:65:af:f9:c5:cd:d5:b5:2e:02:7d:ae:18:cd:
70:77:67:02:cf:87:76:45:55:e2:e9:cc:2e:bc:56:
85:14:3b:96:c7:e2:bd:4e:be:d9:73:85:09:3b:af:
11:06:7f:87:59:75:c1:c5:2a:89:fc:70:8b:d7:03:
f1:29:95:47:fd:5e:c5:8c:9c:69:c3:c2:a6:f1:ea:
46:f5:2e:74:58:b3:ac:56:ad:b1:d7:c1:41:14:aa:
51:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BE:BF:5A:F1:61:C1:8D:EB:60:84:4C:DA:77:AD:7D:77:18:D5:65
X509v3 Authority Key Identifier:
keyid:A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c3:e7:1d:9d:d7:2a:cf:be:8a:82:8c:5f:73:97:10:e5:9f:
cf:69:ce:3e:99:ed:80:7e:f2:7a:a7:a1:34:5b:d5:65:84:47:
46:2d:fd:06:1e:71:9b:75:25:f1:a5:2c:5a:c3:5e:2e:0c:2b:
04:92:8f:d7:ab:89:4a:78:3e:9a:3a:f7:1c:a7:0b:fc:46:01:
e9:28:5f:4b:b8:87:ff:22:2c:81:38:e4:a9:bc:a9:7f:c1:17:
8a:f7:8d:e8:0f:61:38:7f:d5:3b:78:36:d3:01:e7:8a:36:21:
81:00:65:eb:01:3f:a6:fe:a0:40:d9:3f:70:c8:37:53:28:96:
fe:f3:9b:04:80:5c:e8:20:72:f6:93:ca:6d:1d:b2:ff:0d:a4:
61:73:04:71:0b:c1:b7:4e:a7:24:8f:b0:35:0b:4f:3d:95:52:
4a:e2:a8:33:a9:0d:0f:ff:b6:79:d2:8e:97:0f:9c:5f:5d:ae:
4a:16:af:41:7f:4e:0c:d6:cb:55:f0:14:82:a5:67:d9:53:83:
51:6c:b4:75:c1:25:ad:07:8a:f5:da:e8:65:fe:4c:4b:8b:ce:
da:12:d0:27:a2:f2:65:1d:82:89:ed:82:25:ab:8a:0c:34:46:
21:37:41:7c:cc:c5:51:c2:63:8e:06:e0:b4:0e:6e:db:36:63:
ba:f0:91:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:10:25 2025 by rpki-client