Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
File: q4PmT3LdWIn7E9whjGg_bi-s9bI.mft (raw, json)
Hash identifier: 5fgXF3KdUTSSG1ggLo2SuNLbWYDEgnSIyVYyXz9qwNU=
Subject key identifier: 54:0F:12:7D:D9:67:F2:FF:9B:5C:5D:13:A5:E8:30:0F:1F:F1:51:B5
Authority key identifier: AB:83:E6:4F:72:DD:58:89:FB:13:DC:21:8C:68:3F:6E:2F:AC:F5:B2
Certificate issuer: /CN=ab83e64f72dd5889fb13dc218c683f6e2facf5b2
Certificate serial: 0196440CDD983D4AA14500748771A1479F03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
Manifest number: 14F7
Signing time: Thu 17 Apr 2025 14:00:15 +0000
Manifest this update: Thu 17 Apr 2025 14:00:15 +0000
Manifest next update: Fri 18 Apr 2025 14:00:15 +0000
Files and hashes: 1: UI5NClozL7N-roh3gFDdU89Og_s.roa (hash: 16lVaEuPmCyL0CMlUsRZ43ZBzj6hUjHan0Mt9THux/o=)
2: q4PmT3LdWIn7E9whjGg_bi-s9bI.crl (hash: rhHgXU2CNt7f2VG3g4B+CtJkR5xBO2bTrMrG5dZfsVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:0c:dd:98:3d:4a:a1:45:00:74:87:71:a1:47:9f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab83e64f72dd5889fb13dc218c683f6e2facf5b2
Validity
Not Before: Apr 17 14:00:15 2025 GMT
Not After : Apr 18 14:00:15 2025 GMT
Subject: CN=540f127dd967f2ff9b5c5d13a5e8300f1ff151b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:84:2e:36:bb:f9:f1:7d:db:40:67:b2:65:4e:
30:5b:a4:34:4b:c6:5e:d2:e7:96:17:03:8a:82:72:
52:cf:68:c3:59:a5:e7:f2:f5:7c:eb:c9:0b:0c:da:
cb:cd:a3:3c:52:a5:1c:15:9c:a1:80:3a:d2:24:64:
2b:e0:37:a0:aa:97:4c:3d:b6:0a:bc:7a:47:c1:47:
22:61:18:99:04:cb:91:5b:78:83:93:64:ce:04:c1:
a1:c5:24:24:a8:32:24:51:ea:3a:f7:a9:1c:0e:88:
74:9d:da:3d:c4:06:2e:bb:04:c8:f6:f3:41:84:a5:
c9:46:18:89:05:74:79:af:15:fe:0e:58:78:50:07:
90:68:9f:6d:25:47:cb:50:8f:e9:72:d9:22:39:b2:
f5:a3:e8:3d:23:cf:fc:c7:00:e1:45:5a:f3:bf:37:
c8:21:27:71:47:af:47:6c:52:fc:9b:a8:94:96:b1:
69:77:70:3a:90:ba:49:ef:6d:f1:85:9e:a7:a2:9b:
59:30:01:cd:f3:a7:89:56:4b:72:f8:30:38:d0:28:
59:4c:ca:ae:76:c5:82:05:37:dd:c6:34:37:af:37:
39:b4:9d:84:ac:59:de:b8:db:0d:ac:f8:d9:8f:be:
e8:5a:5b:14:2e:d6:84:2e:35:b2:dd:33:b2:a6:70:
7a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0F:12:7D:D9:67:F2:FF:9B:5C:5D:13:A5:E8:30:0F:1F:F1:51:B5
X509v3 Authority Key Identifier:
keyid:AB:83:E6:4F:72:DD:58:89:FB:13:DC:21:8C:68:3F:6E:2F:AC:F5:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c2:ae:2e:a5:9e:01:14:85:f6:60:ad:58:1f:aa:21:82:9b:
6c:8d:8c:70:be:3e:91:d9:64:cb:c2:76:13:fb:e8:45:c5:fb:
9c:3c:a0:ba:9b:93:73:8e:7d:93:73:36:20:3e:7b:f0:5e:5e:
c8:66:49:37:ed:22:e5:a6:ba:61:00:19:1c:7d:cc:12:2f:8a:
6d:6a:12:50:95:d8:71:fa:57:ff:ad:c3:47:df:50:33:08:ab:
8f:dc:e4:8a:8d:db:c8:96:c6:42:b1:b9:3d:07:f0:39:4f:74:
af:55:78:18:a1:fb:ff:3b:dc:c3:f3:a5:34:7e:d1:6f:b9:31:
b6:2e:fa:2e:f9:11:52:e5:73:cb:95:fc:a2:9a:19:b5:a9:90:
45:41:2b:06:d9:c8:93:1f:7d:91:c4:22:4e:74:7e:e1:55:10:
89:61:7a:3d:df:3e:c3:45:18:2d:e0:2f:90:08:0f:a9:72:6b:
d1:e5:3f:6f:26:18:3a:35:41:86:d7:bd:f4:f2:7b:c4:de:60:
b3:b3:95:57:7e:8c:25:1f:1c:ef:e9:99:9b:68:64:41:a5:e0:
05:02:fa:8e:e3:4b:7a:e8:e3:8c:3c:d1:1f:c8:7d:90:98:ba:
fc:07:46:11:ea:2a:f2:f5:15:24:aa:35:20:2d:d4:6c:e7:d7:
05:74:ea:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:30:23 2025 by rpki-client