Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
File: q8Legg4C88P4bluMnEndxJMlEj8.mft (raw, json)
Hash identifier: qznobTY02jHOzk6jlc5UtP0gAVkKwpfS/MJseu2uE5o=
Subject key identifier: 3A:2C:EB:EB:FD:DB:88:7D:1F:46:2F:41:8B:F0:3C:3D:88:51:25:BF
Authority key identifier: AB:C2:DE:82:0E:02:F3:C3:F8:6E:5B:8C:9C:49:DD:C4:93:25:12:3F
Certificate issuer: /CN=abc2de820e02f3c3f86e5b8c9c49ddc49325123f
Certificate serial: 0198499C1BB7C5F666180AF9B57857197F7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 02:00:24 +0000
Manifest this update: Sun 27 Jul 2025 02:00:24 +0000
Manifest next update: Mon 28 Jul 2025 02:00:24 +0000
Files and hashes: 1: 1nJZi9GJ90J5FpzQE_nW1w9Y34A.roa (hash: GVbUZdYnFxfV/6HU/T0jmvYJT+FivYMJd3zG7OwlXB4=)
2: q8Legg4C88P4bluMnEndxJMlEj8.crl (hash: mJIJLqfORI/SLKb9OJmkZYguBRs/t8RF34kOhRgQKfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:1b:b7:c5:f6:66:18:0a:f9:b5:78:57:19:7f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc2de820e02f3c3f86e5b8c9c49ddc49325123f
Validity
Not Before: Jul 27 02:00:24 2025 GMT
Not After : Jul 28 02:00:24 2025 GMT
Subject: CN=3a2cebebfddb887d1f462f418bf03c3d885125bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:90:72:63:c5:27:b0:71:e0:d9:e1:87:70:e7:
69:e9:fa:ad:23:51:89:84:58:57:99:8d:91:9e:7c:
f5:77:08:ac:07:70:1c:95:ae:36:d8:50:b0:94:09:
55:52:33:1d:c2:98:d4:2e:31:a3:31:9e:04:9a:18:
e4:95:4a:9d:f2:55:30:44:f1:ec:c3:6b:c8:a0:17:
d2:26:45:b7:5a:ca:e9:64:d4:a9:b9:d2:43:4c:ca:
56:1d:05:3f:fd:00:cc:c3:d8:3e:f5:07:08:82:70:
c5:41:5f:4e:e0:43:13:b3:8e:d2:0b:27:0b:46:1d:
b1:5b:ef:c6:e4:27:b8:54:0d:ee:4e:72:ff:22:69:
52:07:e7:77:38:17:69:8c:9b:9b:55:f7:e2:1f:af:
52:89:24:cc:fa:ab:38:ed:8f:ad:28:d3:da:03:63:
ab:e2:3f:a4:c8:8a:36:ac:48:ce:d2:75:12:8f:c9:
87:83:f2:b9:98:32:e4:83:c7:83:36:e1:f7:02:0b:
ef:8c:fe:db:68:50:17:d0:10:7e:62:04:fa:fb:ef:
42:8e:99:72:bb:5f:65:6c:9e:58:30:bc:87:3f:81:
ea:c8:bb:a6:63:da:a4:3b:0b:f8:97:eb:b7:63:e8:
ee:58:ba:7e:73:cd:2d:2f:dc:5e:16:a6:86:ed:48:
ed:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2C:EB:EB:FD:DB:88:7D:1F:46:2F:41:8B:F0:3C:3D:88:51:25:BF
X509v3 Authority Key Identifier:
keyid:AB:C2:DE:82:0E:02:F3:C3:F8:6E:5B:8C:9C:49:DD:C4:93:25:12:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a3:7d:8d:5d:90:e1:b2:08:ca:33:79:e5:58:0c:f9:f6:31:
49:fa:e4:49:26:bb:bf:7e:a0:da:09:53:86:2a:1a:43:f1:9c:
17:56:29:28:51:c5:fd:73:ca:6d:9a:0b:52:d4:96:24:76:6f:
46:57:3e:03:6f:dc:1c:9d:94:d0:ae:4a:a5:de:32:82:cf:df:
69:9c:ee:86:fd:f7:4b:e2:64:88:a4:d5:a3:2e:e2:a3:22:a5:
29:11:0d:7c:a4:b2:c7:ef:62:5a:31:a5:c5:98:2d:2a:c1:29:
75:b9:7f:64:eb:85:0e:57:b1:ff:58:c2:ce:fe:da:fc:bc:61:
2a:da:7d:7d:1b:4b:f1:54:ed:ca:86:2f:66:24:1d:e4:f8:d4:
f6:b7:41:88:a1:8d:24:0f:e8:e3:a8:fb:71:b1:1d:3c:8f:f8:
10:7c:17:af:64:97:35:0f:90:8c:13:f6:5d:44:75:9a:32:fc:
fe:f5:d4:62:24:4b:a8:0f:de:08:7b:4a:57:81:24:fe:72:8c:
7b:b5:5b:37:64:2b:b8:f2:ad:68:0d:b2:27:02:b7:94:b3:63:
4c:d8:77:6b:5c:95:e9:50:d5:94:48:43:1c:68:98:5d:08:8e:
02:ff:1e:c6:dc:40:f2:61:86:b4:33:db:0f:bd:dc:43:c1:54:
b9:b4:5a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:42:20 2025 by rpki-client