Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
File: abAZJ6Ghd9QmEiHZRihRSlJaluA.mft (raw, json)
Hash identifier: pKJPVTR5I65oaEaa+G8QHl1/4fawJYkmYzIFWvmXgPc=
Subject key identifier: B0:32:F9:21:76:05:5E:35:E5:AE:C4:FD:F2:10:CC:CE:62:A9:31:1E
Authority key identifier: 69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
Certificate issuer: /CN=69b01927a1a177d4261221d94628514a525a96e0
Certificate serial: 01965F164E5FC04EE9D268D31A7EA8898A63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
Manifest number: 093E
Signing time: Tue 22 Apr 2025 20:00:19 +0000
Manifest this update: Tue 22 Apr 2025 20:00:19 +0000
Manifest next update: Wed 23 Apr 2025 20:00:19 +0000
Files and hashes: 1: A0vsL2z_xaeExEMFhErE3dgWYuI.roa (hash: GFluxTgPqxFYWQe8ASr2AzVuLwmCDibJdLSINZzoxsw=)
2: abAZJ6Ghd9QmEiHZRihRSlJaluA.crl (hash: qWT6S+N/XRmWJx2RBhX/iRk5nc94DPFy6xlhXNp98ws=)
3: uDu_9P9n8eoGu8X-iDdUh-TfwAY.roa (hash: SstG8OSmlbUZo2JnDI9jEdpMEQNgUKMYMBzo75QnAgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:16:4e:5f:c0:4e:e9:d2:68:d3:1a:7e:a8:89:8a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b01927a1a177d4261221d94628514a525a96e0
Validity
Not Before: Apr 22 20:00:19 2025 GMT
Not After : Apr 23 20:00:19 2025 GMT
Subject: CN=b032f92176055e35e5aec4fdf210ccce62a9311e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:98:cb:91:fa:18:2a:63:86:48:80:3e:a8:f8:
78:30:ae:64:04:ad:6e:46:ee:0a:1f:24:00:1e:53:
72:36:c9:22:ff:7e:c8:7c:a5:f6:fe:99:e1:93:d5:
8c:54:5e:18:c4:43:f3:0c:8c:b7:82:fe:7b:22:87:
6b:d6:27:6a:7f:4d:a3:ae:69:a7:86:91:5b:4f:c7:
ea:58:7b:71:65:25:97:e8:5b:aa:41:6e:a3:1b:54:
4e:f9:4b:b1:9a:b0:db:fb:39:78:b4:20:d6:2d:76:
53:4f:b0:46:a2:b5:8b:af:69:2e:8e:ce:a3:73:68:
0f:29:87:f5:35:2a:dd:6f:b8:ba:2d:ce:40:7f:f4:
e6:4d:fa:fc:b2:67:2d:5b:ae:8f:08:b5:51:45:79:
d9:29:5c:5c:58:41:6e:18:24:e1:c7:91:05:d8:b4:
17:82:ba:4b:a6:8d:6e:9e:5f:f2:b2:94:fc:f7:2c:
ee:b6:4b:f5:fb:5b:cb:6e:a9:93:fd:7f:d7:a5:16:
f8:26:59:08:30:13:70:d3:85:a4:c9:5f:d2:9d:56:
66:15:f7:34:68:e4:1a:c1:c1:22:7c:c4:c4:2d:50:
2e:8d:17:6a:92:ee:20:4c:85:9e:0b:12:f2:c9:9e:
d9:9e:d0:97:a4:49:52:d0:44:e6:da:f3:4d:47:83:
4a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:32:F9:21:76:05:5E:35:E5:AE:C4:FD:F2:10:CC:CE:62:A9:31:1E
X509v3 Authority Key Identifier:
keyid:69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:c8:90:7d:f9:62:31:fe:d8:43:8c:4a:48:67:5d:6d:58:a0:
21:c4:9c:4f:b1:1e:52:11:b5:a7:e8:65:66:47:69:c3:bd:1c:
17:8b:a9:c7:d7:be:91:da:64:7d:17:24:8b:2c:da:7b:09:e0:
23:a2:13:61:ee:9e:c0:b9:0b:e3:5d:4c:a8:0a:94:39:f7:ab:
27:b1:30:e0:c2:30:f8:80:4e:80:5b:b0:f3:61:cb:92:bf:94:
1e:a9:64:41:01:af:c7:b6:85:61:4c:0c:42:5e:a6:20:46:a5:
3a:ef:58:92:9a:80:0d:1f:9c:ea:88:c8:b5:01:bb:c7:df:33:
58:25:ff:0e:77:58:74:49:44:3d:24:65:bd:94:e8:d6:6f:39:
c6:62:02:64:93:5f:fc:90:88:27:32:30:82:44:7e:33:36:a8:
4d:6b:43:91:91:3a:f7:f2:74:79:d3:5b:ba:9f:6b:10:0f:0f:
54:d5:fd:47:8b:5e:e6:0c:e9:37:e6:50:2c:5c:e9:cb:52:89:
41:71:61:15:10:a7:72:73:86:70:bb:62:ce:e0:0b:c9:4d:8a:
07:b2:cf:17:b9:97:6c:3d:41:f0:71:00:34:d2:b1:25:65:af:
9c:c7:47:93:68:38:46:6b:29:18:c5:26:0d:50:98:3c:0f:15:
14:4d:37:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:01:31 2025 by rpki-client