Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
File: qBGiyfyN6WebsVhYGxDOrukf95E.mft (raw, json)
Hash identifier: amyuMScQj3cjq0VqeMgqo8QZloqjcjDq70DEQJtU1SY=
Subject key identifier: 0E:EC:95:C5:A7:89:38:59:A3:EF:00:0C:80:D6:FB:E1:37:85:BE:B2
Authority key identifier: A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91
Certificate issuer: /CN=a811a2c9fc8de9679bb158581b10ceaee91ff791
Certificate serial: 01964D7E4111576E1E963F7068C1D410D610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
Manifest number: 150A
Signing time: Sat 19 Apr 2025 10:00:41 +0000
Manifest this update: Sat 19 Apr 2025 10:00:41 +0000
Manifest next update: Sun 20 Apr 2025 10:00:41 +0000
Files and hashes: 1: PPeyKFftPaiVCXNYTK3ZP37-8BI.roa (hash: 1x8aYa43ug+3XZe9x+qmxKaVKmQGYXXQ926Bpo3NKhs=)
2: qBGiyfyN6WebsVhYGxDOrukf95E.crl (hash: D9P2oGc6xjONM0L/jwJ/AqgWqTvM76fEeaqtvrHMPN8=)
3: r7_wV3dzjpVPhKRXt9LOL6uFNoM.roa (hash: eXGrZnOiRM2nkPOyWX+HuDqKFlwEgjMo/lqsZKhSHKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:41:11:57:6e:1e:96:3f:70:68:c1:d4:10:d6:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a811a2c9fc8de9679bb158581b10ceaee91ff791
Validity
Not Before: Apr 19 10:00:41 2025 GMT
Not After : Apr 20 10:00:41 2025 GMT
Subject: CN=0eec95c5a7893859a3ef000c80d6fbe13785beb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8a:a6:3f:04:b4:57:96:b0:ae:9e:81:f9:b9:
9b:96:d3:5f:b3:5f:5f:23:e4:b2:0b:db:dc:d1:e1:
88:5a:d0:05:6d:a1:94:6c:4c:87:e2:bd:b2:c8:78:
3b:eb:7b:39:f7:0b:c8:98:70:29:51:df:2b:42:e2:
36:32:ff:73:de:e9:77:1f:1c:89:d9:52:53:ee:bc:
f1:1b:40:a3:3d:06:f8:54:67:7d:db:7f:85:1e:73:
8b:ac:d1:5c:97:45:40:54:56:5f:4f:b9:c1:89:1a:
7e:4a:b3:aa:6f:bb:50:35:4d:19:7b:7d:6c:19:29:
59:fa:f8:1d:fa:fa:2f:cf:f7:98:24:7c:54:69:5a:
a2:f5:9b:ab:cf:d6:4f:58:7f:61:8d:b4:5a:fd:37:
07:28:2c:63:3f:ad:d4:8f:43:3d:5c:ab:fb:cc:cc:
f0:37:6d:6a:20:dc:af:12:21:12:1c:68:8d:19:b4:
10:a4:5d:2f:3b:41:db:79:96:7b:72:1a:5c:d3:0c:
e2:80:f9:0f:8a:a3:76:ae:42:15:70:d7:ac:ef:9f:
e2:df:ca:ee:73:59:68:59:41:ee:a1:a6:93:f4:ba:
c1:bf:9d:64:d6:40:22:f3:94:14:e7:c5:83:64:34:
4f:99:2e:39:ca:b7:8d:f6:29:2e:2b:5d:b5:38:50:
5d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EC:95:C5:A7:89:38:59:A3:EF:00:0C:80:D6:FB:E1:37:85:BE:B2
X509v3 Authority Key Identifier:
keyid:A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ca:12:c2:5c:5f:ed:d4:9d:d7:f0:2c:9d:be:bb:70:8e:7c:
7e:f5:a4:a8:9a:40:0d:cb:b3:56:98:8a:f6:79:ef:50:e2:39:
a5:47:d0:6b:4b:96:75:e6:ef:cb:b8:39:b5:11:8a:6c:f6:f7:
25:a4:a1:96:ba:78:b4:f8:93:26:7f:c9:ca:ab:71:c5:77:7a:
fb:f8:f9:97:70:2e:3d:7d:20:ae:94:a4:8c:51:d0:64:e9:5e:
32:8e:a3:95:9c:67:18:ea:f7:77:82:24:4a:aa:4d:bf:41:08:
93:9d:44:65:00:29:c4:fa:ba:e6:b3:30:ac:99:4a:0a:65:69:
b3:a1:ad:2f:3e:7b:f5:fb:d2:bf:74:45:34:50:29:ad:f1:23:
49:4f:15:10:9a:f1:a5:e6:8e:89:c8:7c:05:2d:15:e1:b4:1d:
94:40:c9:35:1c:89:fc:61:01:73:9d:b0:60:0d:88:8a:a0:25:
88:ab:27:a7:6d:19:0d:9e:01:10:35:5f:83:3d:b6:8d:3c:12:
92:8d:b4:42:9e:9b:f0:8e:e2:ec:7e:07:93:03:3c:49:bd:cc:
5d:0d:9e:00:42:7c:40:57:a6:7b:73:e6:78:aa:76:12:2c:b7:
38:31:1d:21:29:50:4e:6e:91:76:5c:ae:38:1f:df:57:a9:43:
ac:14:01:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:06:57 2025 by rpki-client