Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
File: sq-PF3TgWSXyTkHe5p5bYj2axj0.mft (raw, json)
Hash identifier: CFN7wl+o+6haYRFgCtVEezKE6vV8DOEgyyu/lLypu/A=
Subject key identifier: 83:15:A0:90:D3:99:3F:81:1D:D6:DB:43:7E:C7:96:2C:31:C3:9E:8F
Authority key identifier: B2:AF:8F:17:74:E0:59:25:F2:4E:41:DE:E6:9E:5B:62:3D:9A:C6:3D
Certificate issuer: /CN=b2af8f1774e05925f24e41dee69e5b623d9ac63d
Certificate serial: 01963BAEFA042ECB38D2B883FA50CA8CD7F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
Manifest number: 14F2
Signing time: Tue 15 Apr 2025 23:00:44 +0000
Manifest this update: Tue 15 Apr 2025 23:00:44 +0000
Manifest next update: Wed 16 Apr 2025 23:00:44 +0000
Files and hashes: 1: dHmQJZqThrz58J_TSvHl_H-39E8.roa (hash: lBrrDh2GaFmnqywSNW3PsD5utU5WNEXu75PvBG3VZjI=)
2: sq-PF3TgWSXyTkHe5p5bYj2axj0.crl (hash: gwU1CD7QlEpcR645ou3wLniSXPNUjP3AwzShStmMJGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:ae:fa:04:2e:cb:38:d2:b8:83:fa:50:ca:8c:d7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2af8f1774e05925f24e41dee69e5b623d9ac63d
Validity
Not Before: Apr 15 23:00:44 2025 GMT
Not After : Apr 16 23:00:44 2025 GMT
Subject: CN=8315a090d3993f811dd6db437ec7962c31c39e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:00:74:5e:82:86:fd:08:78:9a:2a:86:f5:65:
32:09:00:97:d6:cd:35:d4:06:19:c6:f5:d1:69:54:
e1:60:d0:31:63:22:b8:a7:77:6b:1d:94:f5:be:a7:
4d:a4:24:19:36:e0:e2:71:53:ea:aa:7b:35:e8:c5:
06:07:cb:fe:6e:9f:a6:1d:38:3b:1e:84:45:de:cc:
fb:5e:89:72:3b:6b:2a:7d:cb:34:ba:84:14:43:78:
74:47:11:83:1b:34:0d:d1:80:a2:44:6b:13:74:d9:
e6:3e:a6:10:42:07:22:f0:c1:aa:c3:b8:16:c8:eb:
ea:12:18:07:89:a0:cc:24:17:94:54:06:70:20:15:
c0:be:7b:e5:9c:9f:43:51:2f:b3:37:ae:eb:13:8b:
b2:98:7e:cb:6e:06:0c:98:00:73:47:f4:b6:3b:15:
cf:55:f4:8f:18:98:e7:8c:89:3d:23:0c:6a:a5:52:
72:68:0c:99:20:64:e2:33:14:c4:aa:32:19:8b:3e:
83:83:71:4c:27:bd:a0:8a:5a:23:c0:01:05:f3:d2:
6c:6b:f8:e8:88:ef:3a:b1:c3:20:a4:0d:81:b4:58:
0f:18:b5:7a:d2:e2:4f:d1:67:b9:d8:f2:d4:28:ee:
e1:ef:5f:e8:8d:fc:8e:c1:03:7e:80:6d:38:e8:a0:
c4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:15:A0:90:D3:99:3F:81:1D:D6:DB:43:7E:C7:96:2C:31:C3:9E:8F
X509v3 Authority Key Identifier:
keyid:B2:AF:8F:17:74:E0:59:25:F2:4E:41:DE:E6:9E:5B:62:3D:9A:C6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ea:4c:c1:de:ad:3b:2a:73:fb:a3:1d:73:97:36:ae:e5:52:
2c:4f:58:35:71:32:43:e3:c3:bb:ba:a6:2e:3f:8f:dc:f7:61:
77:d2:b1:c4:b3:56:77:70:0a:2e:cb:ca:00:a9:0f:fc:1f:e9:
18:d8:fa:44:ca:d2:64:d8:8f:2d:80:5e:51:ac:3d:05:0a:53:
8d:dc:7d:2f:68:76:87:d1:f7:ec:ed:91:1f:c4:20:5e:e2:f0:
8c:d7:ce:bd:b7:23:88:77:1c:36:bc:6e:5b:34:90:b7:79:2c:
68:3e:17:28:ed:62:ed:d2:10:d0:4f:5e:50:62:47:08:ce:7c:
6d:e2:55:1c:f9:ce:33:e3:95:06:6f:bb:bd:59:54:6e:ac:47:
f2:e5:91:57:b9:30:cb:ae:da:69:38:3d:d4:30:95:56:a5:20:
be:38:00:3d:40:63:92:9b:75:19:9c:02:3c:df:00:70:50:02:
c2:65:bf:ef:a7:05:12:0a:1e:42:94:03:13:65:9f:78:1c:e5:
d2:5c:24:6a:39:e1:d3:52:d1:a2:fb:5d:77:76:d5:1c:eb:66:
46:22:bd:b0:43:77:9f:52:ab:09:a3:d5:7e:f6:b1:a4:ad:92:
bd:89:90:40:73:3c:53:fe:5a:d0:4b:39:de:37:11:c5:43:7f:
73:72:dd:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:35:33 2025 by rpki-client