Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
File: q838GnxSDPjRdykgjoXosZfErf8.mft (raw, json)
Hash identifier: Pb/fNxmJoSj9Lfvmf8Aaiysd6C1QZYwq37fLNo5Bkhc=
Subject key identifier: 66:FF:23:F7:64:E6:32:A1:EB:59:9C:7D:05:78:EC:BA:B9:DC:3D:78
Authority key identifier: AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
Certificate issuer: /CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Certificate serial: 0196060AB57C5E58D0F624EDD8B88A2834DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
Manifest number: 0B07
Signing time: Sat 05 Apr 2025 13:01:27 +0000
Manifest this update: Sat 05 Apr 2025 13:01:27 +0000
Manifest next update: Sun 06 Apr 2025 13:01:27 +0000
Files and hashes: 1: 1HhNu8sG2l0hcVfkxopBJPM0AJA.roa (hash: Qt4OCtipxtwIwXuC2KjZFTe3zgqaRe5IKbtJYrVBUxM=)
2: hJbHpAPOiNkNScuafVbq5FNZ7D4.roa (hash: /FjzkSwns/04Wx3/dyzKMt8M5RMeRjhJm2fdzZxup8w=)
3: q838GnxSDPjRdykgjoXosZfErf8.crl (hash: yn3I6mqiwH+ILbETCAzU9sKenkwvfbxg4E9ZffPb2vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:06:0a:b5:7c:5e:58:d0:f6:24:ed:d8:b8:8a:28:34:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Validity
Not Before: Apr 5 13:01:27 2025 GMT
Not After : Apr 6 13:01:27 2025 GMT
Subject: CN=66ff23f764e632a1eb599c7d0578ecbab9dc3d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:63:7f:9b:51:e2:db:c7:78:3f:6a:f0:04:74:
ca:88:9d:28:60:4b:a0:38:93:32:26:17:43:a2:0d:
05:a4:82:49:0e:6c:68:df:a1:90:50:63:50:85:85:
98:a2:75:bc:37:95:12:5f:f6:c6:e8:47:d6:40:25:
ac:f2:6d:8a:2f:75:f1:81:b0:1a:9c:70:11:2d:6c:
7f:f7:4a:9b:be:28:4c:4f:b1:74:44:12:f0:ff:22:
aa:7c:a2:e5:7a:52:a7:bf:07:0b:fa:49:2c:09:e6:
2b:73:af:c8:84:19:84:c5:97:81:aa:75:fe:c8:98:
03:5d:ad:fc:19:43:13:b7:aa:86:3a:05:76:3d:67:
89:42:9c:60:cc:11:8c:2e:fb:f6:4e:c8:66:9f:79:
e9:ad:9f:0d:93:bb:c5:62:0d:aa:0a:e4:5e:96:67:
02:17:8d:f2:fe:30:a5:61:d9:54:43:a6:ce:3a:9f:
cb:73:bb:68:59:17:e5:10:68:aa:fe:8c:11:45:48:
de:3a:8d:98:51:ab:8a:25:55:72:3d:b0:fe:17:50:
29:aa:26:8d:fc:8e:af:39:19:b4:f2:52:88:51:ca:
8e:dc:ae:10:bb:6b:42:a8:02:ba:37:54:b9:4c:54:
b1:f1:80:aa:bc:d8:59:e8:a8:c6:05:6f:f2:bb:bc:
1f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FF:23:F7:64:E6:32:A1:EB:59:9C:7D:05:78:EC:BA:B9:DC:3D:78
X509v3 Authority Key Identifier:
keyid:AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:4f:6c:93:ba:b7:08:a5:95:f5:d4:4e:9c:99:d3:57:ca:58:
b9:15:05:92:f3:16:42:3b:5b:aa:74:b5:3d:d9:89:07:c0:d4:
7f:83:b5:12:bf:4b:51:5d:06:50:48:bd:6f:fc:a5:e9:68:4e:
10:67:fb:73:2f:57:3b:53:15:fa:3f:da:a1:b4:46:45:6e:4b:
16:26:a2:34:fb:81:0a:43:b0:af:47:8d:68:1b:0c:a1:50:bf:
f1:72:41:cc:18:78:b4:6b:67:9e:ea:27:5b:6c:dd:87:40:8a:
e2:ed:c6:c6:6c:99:f7:29:b0:bb:fc:0f:36:10:19:c4:e7:ff:
2a:80:55:b3:ac:18:c7:fe:62:cf:5b:ff:43:f9:a2:f6:41:f0:
cb:3d:02:b9:59:72:b8:57:03:1b:04:7d:31:39:17:e9:42:8a:
b8:d4:77:ca:67:f1:d9:37:06:dd:aa:1e:cd:ae:95:a2:ad:1e:
9a:dc:8b:85:0a:b2:09:e5:53:27:87:66:f2:bc:4d:05:0c:94:
e2:65:0d:04:f7:c4:a1:4c:64:b1:ef:33:40:83:df:82:b9:f1:
8f:38:6b:af:81:4b:a1:87:a1:17:68:94:ec:18:8f:63:1c:72:
53:9d:aa:42:2c:a5:1a:ae:97:bc:5a:ec:43:88:b6:cc:7a:f9:
b9:2a:8e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:08 2025 by rpki-client