Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
File: q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft (raw, json)
Hash identifier: qzFQxVPdR63MyxNrGKd9TH/xFpTmc5aIutNGgKV+4cQ=
Subject key identifier: CB:83:00:6D:83:8D:F5:7C:C3:2C:A3:01:E4:1E:01:BE:5E:BF:89:23
Authority key identifier: AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
Certificate issuer: /CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Certificate serial: 01965E3AEE745656C264A7EAAC698CE6B23F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
Manifest number: 1504
Signing time: Tue 22 Apr 2025 16:00:42 +0000
Manifest this update: Tue 22 Apr 2025 16:00:42 +0000
Manifest next update: Wed 23 Apr 2025 16:00:42 +0000
Files and hashes: 1: S0sJgeFKsSQM_Y24-bMbEEazWOE.roa (hash: y7ujKOOyPaVjZL4Z2dl77e4qeqFzdcjNTXADyZzs44w=)
2: q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl (hash: Z2PoTu6DsdtVdQ8BhWgNbwCiW/IiXz46zbN3OYhRgFI=)
3: r-ygRbjtxxgO3t3aGjdEJ1nnCcw.roa (hash: WR2yF8mNXvC7JDBK3ZnnxThACZnLlRj8L9WEQd6jnY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:3a:ee:74:56:56:c2:64:a7:ea:ac:69:8c:e6:b2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Validity
Not Before: Apr 22 16:00:42 2025 GMT
Not After : Apr 23 16:00:42 2025 GMT
Subject: CN=cb83006d838df57cc32ca301e41e01be5ebf8923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a6:07:c8:6b:4c:f0:bb:84:d9:cd:17:bf:18:
7b:2d:bb:c8:d3:20:32:22:88:5b:91:c4:f3:1e:58:
e1:64:00:45:54:78:76:27:33:34:50:3d:31:15:d8:
59:97:a1:23:d0:36:ca:1f:f0:5f:0b:83:e1:d1:c9:
8f:ac:ab:e8:18:2b:0b:a3:14:a2:29:97:a1:86:39:
a1:dd:21:08:4d:c8:7b:96:37:4a:63:7e:11:80:6f:
db:1e:e6:ba:0f:ec:9f:cf:a4:46:eb:82:2d:78:c2:
38:c2:b7:55:a3:0e:3a:65:a8:1f:40:c5:08:81:1f:
39:a4:0d:53:b6:17:a4:dc:85:c1:6d:c5:7b:a6:0c:
62:29:34:a7:1c:8f:9b:9e:8d:37:11:ee:ad:07:ab:
9e:4c:8f:89:d3:01:de:60:85:42:ad:f2:21:87:55:
a9:63:bc:e0:32:ed:8b:de:f8:f8:7e:26:81:c3:90:
40:4d:98:ff:4f:88:7a:56:32:88:2f:be:6f:3a:45:
c4:93:27:54:33:63:d7:86:8d:1c:8b:7d:d4:d0:79:
78:70:9d:8d:b3:b7:39:bc:d6:c8:71:88:0c:41:f3:
8b:27:cf:5f:ff:15:57:ff:84:8e:26:fb:44:75:df:
d8:91:33:7b:b4:0b:ac:2e:4c:ef:6d:37:5c:a8:fc:
fa:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:83:00:6D:83:8D:F5:7C:C3:2C:A3:01:E4:1E:01:BE:5E:BF:89:23
X509v3 Authority Key Identifier:
keyid:AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:43:bf:69:40:25:b6:35:3c:52:76:1e:99:b8:42:71:b6:40:
9f:19:ce:44:a0:65:c6:ed:b0:15:66:ae:c3:85:a7:bb:03:13:
3a:aa:80:21:bc:a0:54:df:f0:ab:a6:42:5d:77:ce:56:08:f1:
cf:56:0a:43:ca:08:c4:68:c1:4a:8c:2a:90:ec:e3:03:83:4c:
cc:dd:0f:23:a3:3c:22:a7:93:4c:39:08:ca:58:28:e0:65:8a:
22:6c:83:5f:e8:2f:38:ef:3d:5e:bf:44:e9:3b:0e:06:3e:7b:
9f:49:c3:05:f1:f0:f5:e7:e1:84:7f:c1:9b:01:7c:c4:69:64:
ed:1a:a1:2e:22:79:44:30:e7:31:8e:e6:c7:cd:22:59:b0:60:
e8:ca:30:c0:cc:48:55:b1:4f:38:d5:e1:81:b6:db:6a:1b:2d:
d5:55:7b:02:62:5b:57:90:4c:fe:af:54:e5:08:cc:4d:96:21:
55:df:d3:ee:8e:89:f6:a1:18:8e:23:d7:93:3c:a5:7c:fc:bf:
16:ca:3f:db:c5:8d:29:66:ec:5f:62:db:d8:5f:3e:e6:6d:cb:
c7:cc:fb:54:13:bc:60:48:fd:c5:8d:93:88:55:fd:ba:bc:1d:
25:ac:18:6b:42:0c:62:bd:a0:b1:45:7a:f0:d0:62:e1:d4:52:
c3:f3:c8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:04:02 2025 by rpki-client