Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
File: quibwwl3aKzWfC3XR9O-Gtty6Zc.mft (raw, json)
Hash identifier: 1mD8tFgXXzfflaOAYDBhLPov4Xt7VN3QfRBqaZ3mQEc=
Subject key identifier: 15:8F:E3:D5:81:08:C6:09:5D:30:F2:A6:6C:8C:C5:04:D8:52:26:72
Authority key identifier: AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97
Certificate issuer: /CN=aae89bc3097768acd67c2dd747d3be1adb72e997
Certificate serial: 01958F2AB77A1E41E5274DB9FF4DEEFAE290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
Manifest number: 149A
Signing time: Thu 13 Mar 2025 11:01:36 +0000
Manifest this update: Thu 13 Mar 2025 11:01:36 +0000
Manifest next update: Fri 14 Mar 2025 11:01:36 +0000
Files and hashes: 1: Se8jY-LoM2MVsZ37wmyygWUdZqw.roa (hash: 460xRSiSARjue5TmuazrIkrxiYolcj28Woj0bWcIVJo=)
2: quibwwl3aKzWfC3XR9O-Gtty6Zc.crl (hash: +0y/mdckICYvbgIE2075pOMmisVYSuxh6I/xCf+/cWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 11:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:2a:b7:7a:1e:41:e5:27:4d:b9:ff:4d:ee:fa:e2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae89bc3097768acd67c2dd747d3be1adb72e997
Validity
Not Before: Mar 13 11:01:36 2025 GMT
Not After : Mar 14 11:01:36 2025 GMT
Subject: CN=158fe3d58108c6095d30f2a66c8cc504d8522672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:85:56:25:2c:b1:4a:59:4e:98:ba:53:ca:10:
f7:0c:ec:8d:15:b1:3e:09:da:47:cf:a6:d1:19:6a:
e7:39:2e:f5:08:1f:7c:09:31:f0:27:ba:1e:08:87:
34:83:12:9a:d0:ee:e1:90:16:fc:80:96:c0:23:09:
64:c6:60:22:f4:d9:f1:90:55:78:43:77:37:3c:42:
f3:21:93:1a:dd:28:a1:9e:04:a2:46:5e:33:d2:c3:
c2:db:2d:0e:05:f6:54:24:a9:e4:06:a2:97:ca:20:
c7:80:97:3c:ac:cc:d0:9f:7e:8e:bc:e5:27:9d:bc:
54:71:1a:57:70:d9:77:1a:80:02:f0:46:7c:39:55:
2e:d9:77:4b:96:a7:12:a1:64:af:43:d3:86:77:44:
b4:f0:77:1d:59:e4:ea:90:a9:4d:12:93:68:d0:50:
80:13:47:8e:7f:40:f8:9d:ec:9f:20:39:43:c1:6e:
59:63:a4:cc:1f:c2:94:ee:71:41:4a:bc:19:48:e5:
24:05:3f:3f:6b:d3:9b:ca:88:bb:63:31:92:ab:f0:
6f:ab:a8:d8:c1:3d:6f:f6:bf:1a:09:31:1e:f0:f7:
9b:4e:52:8b:44:f2:6f:2b:d1:d5:e9:5f:bc:48:39:
fa:27:cf:8c:1b:4f:d0:e5:78:3e:6b:66:b4:f9:23:
c3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8F:E3:D5:81:08:C6:09:5D:30:F2:A6:6C:8C:C5:04:D8:52:26:72
X509v3 Authority Key Identifier:
keyid:AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:32:1d:51:e0:5a:91:e6:de:c3:9b:6e:65:d4:a8:32:77:cb:
e3:63:2e:5b:80:5e:eb:16:54:11:69:be:b4:14:51:d5:db:55:
4e:30:28:a5:93:dc:4e:9b:f2:7d:b5:19:16:70:f0:f3:c8:d4:
b5:f3:fc:85:57:45:bc:38:a1:88:a7:52:94:7f:ec:4f:08:fe:
2e:2d:ed:83:ba:03:34:21:05:cf:4b:b8:9c:17:50:3b:15:a8:
d6:f1:ef:bd:6e:67:4a:95:1d:a6:4b:66:72:0c:0b:ed:93:65:
ce:19:26:c0:50:11:d5:4e:b7:8f:51:c6:8e:8c:34:77:bc:bc:
63:f2:73:c8:ae:39:f8:30:26:38:94:75:4d:a0:1a:8b:0e:17:
bd:ba:07:bd:49:54:84:68:e7:b3:9e:51:54:88:b8:76:2c:59:
38:0b:19:6d:fd:30:6b:35:94:4a:a0:1b:7d:d2:7e:6a:c3:9a:
78:63:b5:40:2b:52:4f:8d:83:21:47:0d:01:22:4c:23:7b:5e:
1c:38:60:fc:0b:5a:5d:7c:60:cd:c2:ee:11:0a:46:07:fc:6c:
c6:e0:57:5f:4f:99:72:8d:9d:bc:ba:a5:1b:9d:36:6a:a0:94:
e4:80:73:6d:6e:a2:66:4a:ce:ba:16:cb:fe:27:9b:d0:58:30:
d3:09:19:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:34:17 2025 by rpki-client