Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
File: q838GnxSDPjRdykgjoXosZfErf8.mft (raw, json)
Hash identifier: fhh9SgXiuiTKw2RBXJ/KbuT1cFZ3T38jFvUmG0jAwzc=
Subject key identifier: 01:F7:EC:8A:D2:1D:83:E7:07:58:1C:45:FD:34:0B:76:D9:5F:93:F1
Authority key identifier: AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
Certificate issuer: /CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Certificate serial: 019742C1538D118F87C9C1B86885F932C333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
Manifest number: 0BAB
Signing time: Fri 06 Jun 2025 01:00:55 +0000
Manifest this update: Fri 06 Jun 2025 01:00:55 +0000
Manifest next update: Sat 07 Jun 2025 01:00:55 +0000
Files and hashes: 1: 1HhNu8sG2l0hcVfkxopBJPM0AJA.roa (hash: Qt4OCtipxtwIwXuC2KjZFTe3zgqaRe5IKbtJYrVBUxM=)
2: hJbHpAPOiNkNScuafVbq5FNZ7D4.roa (hash: /FjzkSwns/04Wx3/dyzKMt8M5RMeRjhJm2fdzZxup8w=)
3: q838GnxSDPjRdykgjoXosZfErf8.crl (hash: bhGj7LOT1MaKoqYcvrE8cp8C64tSl6Vywj6U6SMPWeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:42:c1:53:8d:11:8f:87:c9:c1:b8:68:85:f9:32:c3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Validity
Not Before: Jun 6 01:00:55 2025 GMT
Not After : Jun 7 01:00:55 2025 GMT
Subject: CN=01f7ec8ad21d83e707581c45fd340b76d95f93f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4f:75:4c:45:90:0d:bb:55:1e:61:fd:bb:0a:
c2:2b:96:09:e1:1f:be:f3:4a:aa:5f:3f:8b:95:63:
63:9f:c7:ab:51:cb:f6:a0:da:af:71:32:a7:39:c8:
41:63:5d:67:1f:7b:b1:7c:86:62:1e:dd:1d:01:8d:
f5:c9:61:46:45:1d:f9:9c:c7:6f:93:22:e5:c7:09:
cf:48:49:47:b8:b6:79:eb:09:32:da:13:49:8a:b4:
8f:fa:c8:26:93:47:0a:45:18:26:ba:b7:db:5e:cb:
d4:d5:e8:3f:4c:39:7b:59:a1:c4:87:f8:e5:78:68:
e0:5b:77:6a:f0:ad:39:3c:24:71:87:e0:bf:8c:38:
f5:d9:fa:56:4e:18:66:8c:51:2a:b7:15:57:b6:6f:
51:1a:b2:b9:54:9b:39:8f:7f:46:be:aa:1d:6d:9c:
00:d4:36:1e:e1:95:46:66:5b:dc:48:53:ed:ba:5e:
26:ef:80:04:24:e1:15:46:a3:15:5d:1c:ee:37:b1:
9b:90:bc:b1:27:5c:82:ed:d9:5a:ad:43:45:14:8d:
44:30:50:29:90:f1:12:94:c7:00:e7:d4:b4:6c:0d:
a8:1e:cb:94:6d:6d:9f:02:9b:c8:c0:85:ce:07:70:
c9:73:37:48:b9:bb:0e:8e:a2:20:c1:e4:e1:54:7c:
d4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F7:EC:8A:D2:1D:83:E7:07:58:1C:45:FD:34:0B:76:D9:5F:93:F1
X509v3 Authority Key Identifier:
keyid:AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:5b:89:73:75:a7:4b:c1:17:0a:1b:cd:18:d1:57:2d:2c:eb:
5e:a9:6b:11:f2:f9:be:20:5d:48:08:9e:e0:3e:2f:1e:01:81:
ba:94:27:18:81:d5:77:71:47:14:e4:61:fe:9e:85:25:02:c1:
42:2a:fc:63:f0:da:47:50:76:35:e1:0f:59:dc:d2:d2:d8:d4:
1d:eb:d6:7a:8b:8b:55:6a:d0:a7:b6:ad:83:42:aa:3d:c0:dc:
69:48:ea:67:05:ee:0b:08:f2:7e:bb:ad:98:bc:aa:88:a2:bc:
b3:c9:41:e3:10:92:80:46:4a:e9:ea:2a:9e:f3:ab:0d:14:43:
14:a3:1d:8b:4e:11:9e:01:e9:04:2d:9a:b8:0f:92:50:07:ca:
89:2e:1c:69:47:bc:ad:68:42:32:67:c5:81:97:0e:5e:d9:5c:
0c:72:ab:2c:44:1c:c5:63:d6:96:e1:24:3b:36:75:56:69:01:
d8:5b:b2:6e:8a:d0:02:1a:49:93:24:70:90:11:3c:75:f3:20:
1f:73:01:76:de:08:1a:71:b4:86:a7:76:fa:63:d2:9e:a0:41:
13:56:75:93:42:f8:24:ef:f5:17:75:19:fa:dc:b2:7f:c1:e3:
55:fd:39:6a:1a:bb:6f:0e:ee:8a:45:0b:2b:fa:ee:ed:02:1f:
f6:f4:e3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 05:00:04 2025 by rpki-client