Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
File: q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft (raw, json)
Hash identifier: qdpGU7SOnaIws3XJkZl5czju6PacwQ80N7hODoFm+C0=
Subject key identifier: B1:63:FB:04:F9:A3:2A:74:41:84:E6:AC:53:19:69:64:E3:D3:59:62
Authority key identifier: AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20
Certificate issuer: /CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
Certificate serial: 0196512426807F0BD2025587B6A501852CDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
Manifest number: 113E
Signing time: Sun 20 Apr 2025 03:00:45 +0000
Manifest this update: Sun 20 Apr 2025 03:00:45 +0000
Manifest next update: Mon 21 Apr 2025 03:00:45 +0000
Files and hashes: 1: U0noiLh-k1UXMkIIKBzlJl8anFA.roa (hash: elwLD+4HU2f37SzvunJF3t0pDH8qA22yevc6clLdIHM=)
2: q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl (hash: syF1UnpPZje/aVxWKuqroVVAZxyT0kZnAyByVxkoIxI=)
3: yWfF0scZVTP5CTfvSN5AZLRV8Wo.roa (hash: lubmpITrOYefbF4JNbcAm7bQPDyIFYxHEuPyUf330UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:24:26:80:7f:0b:d2:02:55:87:b6:a5:01:85:2c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
Validity
Not Before: Apr 20 03:00:45 2025 GMT
Not After : Apr 21 03:00:45 2025 GMT
Subject: CN=b163fb04f9a32a744184e6ac53196964e3d35962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f4:b2:d8:fa:14:ea:d1:06:da:21:e3:7c:10:
fe:f8:eb:a5:13:61:05:bd:17:60:54:b0:78:61:9b:
b3:16:93:d9:0c:7f:31:e0:7f:dd:75:b9:9e:c2:b2:
d8:5a:01:41:3c:8d:9b:1a:96:7c:98:4a:fe:85:7f:
05:ec:d2:ca:e4:3a:74:5f:c0:bf:30:df:a6:9d:e5:
40:98:74:0e:94:ef:c7:a5:f4:f4:19:f1:ae:55:49:
8f:28:3e:d9:d4:6c:11:c1:41:30:82:24:ef:b4:c1:
93:45:38:6a:75:d6:84:7d:ed:92:f5:9f:85:c1:41:
af:ba:ad:76:97:be:4a:e3:40:d7:89:c6:01:b5:13:
12:c4:c7:42:c8:c7:92:1b:ce:fc:d9:92:0e:ff:bb:
cf:f9:be:c7:a2:a2:f0:0f:e7:63:a3:bf:ee:6b:9d:
da:ea:40:78:6e:b7:d4:ab:ee:5d:c9:0d:4e:76:02:
76:9a:11:01:67:73:29:11:4f:9c:3d:e0:83:ad:c0:
c9:9a:41:52:ae:25:bf:6b:4c:43:c3:e8:bf:86:a2:
3c:c6:38:bd:ef:4e:03:75:22:77:4f:99:8c:02:3e:
dd:5d:a9:b7:c3:71:1d:87:85:84:d6:5f:1f:26:9e:
b0:0f:56:5e:94:ff:b7:11:2d:18:2e:0e:be:f6:be:
04:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:63:FB:04:F9:A3:2A:74:41:84:E6:AC:53:19:69:64:E3:D3:59:62
X509v3 Authority Key Identifier:
keyid:AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ef:8a:e8:7f:d0:c4:ac:f7:c7:15:69:00:b0:56:da:dd:5f:
35:59:4c:49:4d:53:e3:c5:10:30:f5:4e:6c:ad:64:7e:60:bc:
09:a6:64:a9:66:b2:0f:22:1b:02:a0:5f:37:7b:bc:06:84:af:
4f:83:94:3d:fc:83:5a:83:98:c0:3f:d8:35:f0:2f:73:e6:0a:
08:69:67:7a:3f:62:6f:d4:59:21:cb:26:2b:3b:21:9d:60:a1:
40:4a:9a:28:94:c6:62:86:9c:da:04:e5:d0:41:38:d9:ec:14:
97:29:56:fa:30:d2:fe:ad:38:89:6d:5b:a5:19:3c:4d:c7:59:
ad:94:df:76:4c:5a:87:9a:dd:2d:2a:c5:55:2c:99:2a:79:8c:
dc:cb:0c:22:bc:98:59:b7:30:07:56:87:5b:16:07:d3:65:c4:
6d:a0:64:c2:7d:81:37:c0:d5:5f:47:c6:d9:9d:ca:44:0d:c6:
30:02:a4:e7:6d:c4:de:ae:7d:3d:db:8f:e7:b7:8d:08:5a:c4:
d8:8f:a1:4a:66:b7:57:c4:30:7d:b0:39:27:b7:a9:15:5e:bf:
2c:db:90:5b:23:f3:91:21:1e:6a:17:44:8a:ca:2b:86:3b:c8:
dd:f0:39:63:26:8f:d9:0f:64:fc:0b:8c:59:2c:f1:c2:78:90:
c1:b8:bd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:03:08 2025 by rpki-client