Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
File: q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft (raw, json)
Hash identifier: w9UlR/h9etazSdPaKIj/1tqirNUQ8uoorkXKSQtme+s=
Subject key identifier: FF:72:7C:DA:BF:BF:EE:9C:A6:54:09:15:3C:CC:8C:96:30:AF:84:95
Authority key identifier: AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2
Certificate issuer: /CN=abb060166d64cead0e295797e8d27c55d8898bc2
Certificate serial: 01964F6C9A67C76059090C13998D795E2C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 19:00:39 +0000
Manifest this update: Sat 19 Apr 2025 19:00:39 +0000
Manifest next update: Sun 20 Apr 2025 19:00:39 +0000
Files and hashes: 1: ZVdKIHMCZIgZmO29HfZuK9KianY.roa (hash: 2kGDIO6FKG2t3hXhHnF2iU2nfmaxGFRQZKaQHnUSkxM=)
2: q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl (hash: p2w54U3EQMJx7XJjyb7twZyEK1rQWZQqL1mnBqLGUSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:9a:67:c7:60:59:09:0c:13:99:8d:79:5e:2c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abb060166d64cead0e295797e8d27c55d8898bc2
Validity
Not Before: Apr 19 19:00:39 2025 GMT
Not After : Apr 20 19:00:39 2025 GMT
Subject: CN=ff727cdabfbfee9ca65409153ccc8c9630af8495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cc:d1:91:b8:8c:fb:65:1f:8e:ca:2e:c3:53:
96:c3:2b:9b:0c:bd:35:ec:09:5c:b0:63:c1:28:37:
7f:32:83:1c:b7:c4:3c:ae:80:4c:33:e5:84:b7:56:
cf:97:9c:d4:88:67:c1:fc:3e:96:7b:99:4c:0d:4c:
58:47:6f:fc:ee:d3:fc:76:21:f7:15:eb:b8:bb:21:
17:47:ca:2c:76:a5:df:c0:e1:84:18:15:ff:dd:5e:
c8:ea:7b:54:cd:c4:a6:db:1d:81:e8:f5:8e:1e:b1:
1a:2e:cd:05:87:44:75:4f:b5:3a:e4:4d:a0:37:b8:
39:7d:e9:41:6c:14:65:85:c9:28:2c:e8:ed:7a:60:
93:48:06:37:7d:7d:41:18:37:51:6c:7a:fd:c6:32:
ff:b3:ff:28:07:3b:0e:83:65:4a:e1:d2:fa:78:70:
c2:81:c2:44:e4:b0:4c:c4:c4:ba:c3:92:fe:9b:6f:
af:3f:69:93:d7:a7:cb:15:df:72:e9:e4:81:a0:7e:
44:9f:64:c9:89:29:98:ba:c5:fd:86:1b:54:10:34:
ed:50:92:9e:ad:61:df:6f:a7:5c:dc:5d:92:4e:4a:
63:90:19:3d:ee:e1:cc:ac:50:c5:3d:c0:85:8f:4c:
5c:f3:4b:97:d5:2b:80:82:d7:9e:e2:b0:e1:d2:4b:
0a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:72:7C:DA:BF:BF:EE:9C:A6:54:09:15:3C:CC:8C:96:30:AF:84:95
X509v3 Authority Key Identifier:
keyid:AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:4d:ff:c7:8f:c5:03:4a:65:60:39:1a:b6:4b:f9:a2:33:da:
08:49:23:5b:86:b2:36:32:f1:74:ec:90:1c:df:f9:88:d7:47:
de:27:6c:48:04:bc:f4:da:45:ea:3a:e1:6a:f2:41:24:c8:74:
b7:07:8b:22:b9:26:da:d4:2c:8b:6f:df:88:b3:98:a5:a0:70:
ce:03:5e:e0:c8:1f:91:59:57:d3:9c:82:59:47:8d:24:61:ff:
4b:3b:96:a7:ee:80:fc:52:71:d4:cc:56:32:8d:60:30:5a:ea:
71:e1:f1:7c:01:95:db:75:1b:b3:02:cf:73:56:4b:80:f0:c9:
f8:a3:db:0c:22:a9:4b:7f:c1:6a:79:1a:ca:14:7e:f5:88:0a:
ea:1b:67:b0:08:99:71:8f:42:c7:52:81:95:41:c8:df:9d:6a:
14:0c:e7:91:bd:12:6e:62:62:d8:70:64:5e:39:66:39:59:55:
10:ff:6d:c2:b2:76:f3:08:f0:e6:20:f9:4f:90:1f:5d:e4:3a:
70:9c:ad:69:de:a8:39:2b:4e:61:0f:42:43:47:03:66:07:36:
c2:b2:83:42:4b:c5:b0:80:79:51:c7:a4:ed:d6:be:1e:83:fa:
af:ba:04:b0:0a:14:2b:9f:d0:79:79:e5:92:47:5d:e2:54:3d:
2c:ca:a8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:35:35 2025 by rpki-client