Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
File: q8Legg4C88P4bluMnEndxJMlEj8.mft (raw, json)
Hash identifier: OjhEAGhZZ1buugDAoaHhbpWeQOk7T9uXJsYF5DRPbVY=
Subject key identifier: E2:91:44:00:58:96:FC:9D:0B:E0:88:05:BA:56:4E:A1:43:44:32:44
Authority key identifier: AB:C2:DE:82:0E:02:F3:C3:F8:6E:5B:8C:9C:49:DD:C4:93:25:12:3F
Certificate issuer: /CN=abc2de820e02f3c3f86e5b8c9c49ddc49325123f
Certificate serial: 0196594B97D353E4B4C625D0D8DE40E6D7B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 17:00:48 +0000
Manifest this update: Mon 21 Apr 2025 17:00:48 +0000
Manifest next update: Tue 22 Apr 2025 17:00:48 +0000
Files and hashes: 1: 1nJZi9GJ90J5FpzQE_nW1w9Y34A.roa (hash: GVbUZdYnFxfV/6HU/T0jmvYJT+FivYMJd3zG7OwlXB4=)
2: q8Legg4C88P4bluMnEndxJMlEj8.crl (hash: c/Nz5/4+8GH2LNYVkSd/Q/UwHECHscu8v/KZnHDCBWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:4b:97:d3:53:e4:b4:c6:25:d0:d8:de:40:e6:d7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc2de820e02f3c3f86e5b8c9c49ddc49325123f
Validity
Not Before: Apr 21 17:00:48 2025 GMT
Not After : Apr 22 17:00:48 2025 GMT
Subject: CN=e29144005896fc9d0be08805ba564ea143443244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fd:a8:e2:b2:2a:27:f7:46:44:97:d9:0e:03:
b1:0a:8b:af:e3:b6:1d:09:cb:dc:db:c9:b1:a9:a6:
5a:aa:98:1a:de:07:91:88:0b:d5:ff:f0:07:cc:95:
b3:c9:37:b7:bf:3f:76:e7:c2:cf:20:ce:9e:b7:1b:
54:5b:18:81:a7:70:e3:73:aa:0c:8c:00:be:85:4b:
20:da:60:b9:2c:22:0d:3b:aa:3b:29:40:b1:00:2d:
db:23:e3:e9:6b:3f:2f:c7:68:bc:7f:46:0b:0f:98:
11:79:dd:78:58:25:55:f9:bf:63:06:7c:d3:84:19:
cf:c6:ad:db:dd:3c:bc:f1:1d:6d:a8:ce:a6:1c:c0:
12:1b:c9:3a:23:c6:58:db:31:c3:94:3d:ff:a1:8d:
5a:2d:fc:ac:68:e9:a5:7e:38:51:4e:bf:e7:ac:67:
13:f6:d7:36:52:15:a9:dd:3c:af:ba:fc:3c:47:9d:
e0:72:ad:aa:51:cc:1f:46:56:be:55:c4:2f:d4:c2:
4c:e0:f9:0d:cf:77:22:5a:b8:35:81:ef:21:7d:67:
eb:fa:12:9d:db:a4:a5:2f:fd:3b:a0:ad:6b:80:d8:
16:6e:2d:5a:79:62:9f:80:ce:a4:3e:9f:07:15:09:
b5:f8:6a:d1:05:06:4f:9b:30:e6:d6:6c:f7:6f:4e:
ee:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:91:44:00:58:96:FC:9D:0B:E0:88:05:BA:56:4E:A1:43:44:32:44
X509v3 Authority Key Identifier:
keyid:AB:C2:DE:82:0E:02:F3:C3:F8:6E:5B:8C:9C:49:DD:C4:93:25:12:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:a3:ab:64:15:b9:3c:49:3a:71:90:a2:b9:13:d2:31:22:77:
12:04:6e:b4:13:2b:2f:b2:2b:64:98:f6:56:bf:24:6f:68:da:
aa:6d:dd:ed:58:a6:4a:ef:a7:ea:53:d7:54:28:3b:ef:ac:40:
5a:ab:ac:04:ba:18:40:f3:49:cc:91:b9:0e:c0:22:2f:32:6c:
c9:43:16:bf:b8:08:98:94:ca:3f:ce:07:f0:6e:02:82:04:b4:
c5:63:fa:01:47:dc:dc:55:0b:44:c6:a4:e8:5e:b8:99:2c:e0:
ef:ea:0e:67:0f:86:b0:eb:99:53:4e:84:80:73:34:95:32:15:
37:8c:1a:12:6a:08:25:15:c2:97:d6:20:d7:ee:d7:e3:78:18:
f7:76:4b:06:54:65:12:fd:8d:e5:08:97:15:20:dd:2d:e4:dd:
3c:1e:2a:15:ad:33:92:64:91:69:b0:1b:54:56:17:dc:a0:b2:
21:25:44:ee:90:7a:f8:62:31:29:ef:77:64:c5:41:82:c7:68:
ce:70:e5:12:fa:9c:6d:5c:9d:61:2b:27:6d:9d:66:d6:17:c3:
b4:1e:ce:04:66:49:89:15:66:94:c4:3e:f7:c5:c9:0e:8d:7f:
ef:c5:5e:3b:c6:e0:fc:8f:a0:04:e0:47:6b:5f:51:42:f8:9a:
c2:49:24:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:32:08 2025 by rpki-client