Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
File: _qJ-2VhOB8dA_utA17nlfMrF6VA.mft (raw, json)
Hash identifier: 6hMHvr7PZjvBeTp1QxSjRgNGp4Fb2SK1jDZrXdRbMKk=
Subject key identifier: A8:39:2A:F6:89:A2:93:3F:3B:B4:C4:0E:F8:AB:2E:2D:90:D0:7C:6F
Authority key identifier: FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50
Certificate issuer: /CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
Certificate serial: 019657263D17DCB781FC097B7188ACEBB8B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
Manifest number: 0F81
Signing time: Mon 21 Apr 2025 07:00:45 +0000
Manifest this update: Mon 21 Apr 2025 07:00:45 +0000
Manifest next update: Tue 22 Apr 2025 07:00:45 +0000
Files and hashes: 1: 8Ua36sQPiROOdvji9D_u-a0zjio.roa (hash: D8ltqCdiAwJv/weW61AlTvYiDIAQY9oit7+M2ExP4Bs=)
2: _qJ-2VhOB8dA_utA17nlfMrF6VA.crl (hash: 3olndAyju5AqYvzF8j58tsaQLfxhbcYN1Eh+4fuBFK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:3d:17:dc:b7:81:fc:09:7b:71:88:ac:eb:b8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
Validity
Not Before: Apr 21 07:00:45 2025 GMT
Not After : Apr 22 07:00:45 2025 GMT
Subject: CN=a8392af689a2933f3bb4c40ef8ab2e2d90d07c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:3a:8e:cf:89:13:86:1a:e1:bf:7e:7d:68:
51:cf:d3:67:f5:e5:2f:74:a4:45:b2:ff:6b:03:d5:
7a:71:d2:08:f3:e3:eb:74:cf:91:29:8a:55:31:f5:
a7:87:fe:92:d6:b2:5b:16:de:d1:ef:71:5c:49:79:
a5:0d:b9:b5:e6:e9:76:12:4f:87:b8:2a:26:0a:86:
a0:fa:b5:0a:14:d8:08:c5:0a:36:99:ae:88:c6:48:
37:6c:6c:7d:b6:6a:32:ab:f7:34:44:2a:b3:d7:26:
65:83:b9:ec:17:2f:78:dd:ac:a9:fc:ca:65:4e:e0:
37:dc:ed:f3:b5:26:5c:25:21:bb:1e:74:48:a6:72:
22:ce:28:43:27:55:e5:eb:c1:68:03:69:4c:7d:b0:
92:4c:4c:dd:ef:7b:d3:43:05:6a:33:22:75:f5:2d:
f9:c9:be:cf:bd:00:81:38:f7:fb:48:7a:1b:3f:0c:
93:b6:cf:66:37:5c:9c:87:ba:85:74:93:60:0b:64:
6f:e7:1c:15:bb:48:ef:25:8d:dd:d7:f7:90:f0:e2:
a8:88:ad:c5:3c:b8:f9:3a:5d:a8:75:a1:f2:93:28:
9d:4d:21:ab:f4:61:07:ba:6c:2b:57:14:b5:ca:41:
81:14:94:22:21:49:16:c6:22:e5:db:bc:56:29:cf:
7f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:39:2A:F6:89:A2:93:3F:3B:B4:C4:0E:F8:AB:2E:2D:90:D0:7C:6F
X509v3 Authority Key Identifier:
keyid:FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:90:db:8a:71:4c:ca:97:cb:fc:80:8a:bb:d7:1d:a8:53:3d:
1a:41:e3:86:46:51:a9:67:fe:d9:07:1e:fa:47:f1:bb:aa:44:
a1:42:c7:b2:42:28:1d:83:ad:d3:34:bd:f1:e2:05:42:8a:b1:
a1:41:2b:a0:d4:b9:d4:c7:25:b6:90:80:a9:eb:b9:16:74:11:
23:15:fa:bc:50:2a:03:f5:27:e3:70:2a:04:19:a5:b7:c7:99:
f7:6f:26:22:bd:eb:9e:e5:e6:60:fe:0b:21:03:11:0d:31:46:
8d:32:10:dc:3b:95:7f:b6:a7:9d:25:8d:ac:9a:d9:82:0e:17:
f5:82:c0:f2:80:32:eb:70:9e:55:66:ee:c6:10:67:a7:aa:4d:
35:6b:f1:b4:f3:a6:1d:07:ce:83:29:60:7d:18:95:7b:ca:63:
8c:af:f1:ca:b1:4f:38:17:a7:bf:a4:6c:d1:d7:f1:84:8c:82:
85:71:de:ad:3d:0b:4b:17:a1:64:43:c2:1b:80:49:e4:9d:39:
58:bc:5f:b4:8d:9a:bc:49:04:04:4f:5a:00:9f:96:01:ae:14:
cc:cd:02:23:44:a4:3f:f1:3b:0d:a7:c9:2a:8e:38:8c:bc:e8:
0d:c6:c2:0c:5b:84:e2:85:c4:d3:79:5d:61:80:3e:87:44:2c:
51:62:d2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:14:45 2025 by rpki-client