Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
File: qJbB4UyG5u9bFnJPcRdnbschSVc.mft (raw, json)
Hash identifier: kZE1Y+4RPxqScNtwKdtE3p3t41eRxFRvY0INXbVPnX4=
Subject key identifier: 2C:0C:E1:0C:CF:0A:C0:65:FF:AD:CC:4D:76:5C:24:F7:70:BF:63:DA
Authority key identifier: A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57
Certificate issuer: /CN=a896c1e14c86e6ef5b16724f7117676ec7214957
Certificate serial: 01964A464A249DE41FFFD6C45A2E9B91D64B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
Manifest number: 14FB
Signing time: Fri 18 Apr 2025 19:00:42 +0000
Manifest this update: Fri 18 Apr 2025 19:00:42 +0000
Manifest next update: Sat 19 Apr 2025 19:00:42 +0000
Files and hashes: 1: nHAl3SgY4EfLu7utGVmeJZcr1_s.roa (hash: lrIHVcXwhi/Eq6CWKi+Aq4ByD1FHp2btPHqZK4Ez+BE=)
2: qJbB4UyG5u9bFnJPcRdnbschSVc.crl (hash: yPTgjfdEAlSCkiW9rhdf69ZWa4OkTFHqxPX5hh2TTM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:46:4a:24:9d:e4:1f:ff:d6:c4:5a:2e:9b:91:d6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a896c1e14c86e6ef5b16724f7117676ec7214957
Validity
Not Before: Apr 18 19:00:42 2025 GMT
Not After : Apr 19 19:00:42 2025 GMT
Subject: CN=2c0ce10ccf0ac065ffadcc4d765c24f770bf63da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:29:c8:9e:7e:53:fb:31:16:f9:9d:dc:28:52:
3e:3b:64:b8:e5:b3:79:50:02:0d:42:29:f7:6a:22:
e9:b8:55:e1:4d:62:c4:d3:38:4a:0e:c8:09:78:81:
7e:f9:23:89:68:33:21:26:42:dc:dc:18:70:e5:5b:
da:46:87:2e:cd:6d:3c:7e:17:7d:f4:31:d8:d4:c1:
cf:e5:a5:6f:27:65:f8:5e:33:e4:c6:27:56:cb:96:
d2:27:94:c1:62:d1:84:fd:1c:4d:5a:b5:2a:e3:28:
e7:03:db:7d:47:86:71:7d:29:4b:ec:b5:34:4d:5e:
3e:60:3b:9c:25:ab:ed:41:22:08:0a:6b:87:3a:a7:
0a:f1:5c:2a:31:3d:eb:b8:0a:f8:23:88:28:7e:14:
47:7a:b7:67:01:88:3c:eb:b1:6b:cf:5e:f0:43:59:
47:d6:f7:7d:7c:c0:43:fb:ed:46:c0:08:f2:ea:31:
32:d2:bf:a1:3d:07:e8:f4:6e:e9:51:c6:77:fe:eb:
21:6a:50:2e:f4:76:e3:44:9b:fe:7c:50:2f:37:9c:
de:96:60:e9:4d:1c:61:6c:39:e9:00:50:8a:db:ba:
37:3f:fe:64:b1:9f:c4:6f:4e:2a:75:0d:b7:ff:18:
6e:26:29:6c:cb:9d:47:84:c6:13:cd:82:f3:19:51:
0d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0C:E1:0C:CF:0A:C0:65:FF:AD:CC:4D:76:5C:24:F7:70:BF:63:DA
X509v3 Authority Key Identifier:
keyid:A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:be:38:85:91:1b:d7:54:d6:03:0b:59:dd:1a:0b:a0:95:ba:
eb:13:0b:89:f3:b8:fa:84:e8:d4:a5:0f:ef:fe:f2:50:59:6c:
eb:f3:aa:f3:3f:47:41:73:72:38:13:d4:bc:2a:26:fb:0a:cf:
e5:64:62:68:9e:e4:af:16:74:ae:bb:f9:fe:48:c9:b0:56:1a:
7d:b5:05:ba:a5:a2:f9:21:63:75:42:3d:af:4c:02:c7:b8:58:
b2:14:fa:b7:5b:01:4b:8c:53:43:9c:ba:09:37:4b:c2:b0:d0:
b4:ce:9f:c8:4f:62:ca:a3:09:32:95:c8:79:af:75:fc:f6:52:
3e:16:48:5d:d8:00:4c:03:dc:3d:4f:8e:9a:dd:90:e4:ba:fc:
fe:0c:b8:d3:74:9a:4a:5f:32:fd:d9:c5:00:b3:35:9b:77:75:
ef:d7:21:ff:ad:69:cc:77:b7:a8:2b:5e:3f:0f:cc:b8:00:7c:
af:ae:4e:d1:42:ab:e2:e0:c2:cd:5e:96:60:39:c3:b1:52:52:
ad:76:fb:71:e5:00:24:2a:e9:6c:40:df:b9:5c:92:ea:5f:77:
ae:29:12:6a:db:84:56:c8:5e:f9:97:06:d6:e6:d4:55:3d:58:
cd:98:e4:79:1f:d8:b1:39:98:b2:64:0e:42:99:a1:e0:4a:f1:
7f:f4:35:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:21:20 2025 by rpki-client