Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
File: q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft (raw, json)
Hash identifier: 8b9P8161/5b675EL/CjAWfvtN9zRLKaAY2hpgIFJ5ts=
Subject key identifier: F8:A4:AA:3A:DA:06:84:C8:A6:56:76:87:82:17:22:86:51:A8:7E:81
Authority key identifier: AB:F5:87:57:1C:0C:69:84:58:C3:85:B1:5D:60:C7:F0:8C:70:B6:FE
Certificate issuer: /CN=abf587571c0c698458c385b15d60c7f08c70b6fe
Certificate serial: 0196C64C993DCEE446FE03D20922192F5C33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
Manifest number: 08BC
Signing time: Mon 12 May 2025 21:00:30 +0000
Manifest this update: Mon 12 May 2025 21:00:30 +0000
Manifest next update: Tue 13 May 2025 21:00:30 +0000
Files and hashes: 1: J83vR5DpFwQeOzZ3QWcMbb8635o.roa (hash: iKjeQjYNy9qFyGrhW5tTdYxo05LYCK/XsNtUNF1Tfbg=)
2: q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl (hash: HgDNyVDXuoCWYy572n+ObsPluNZ34bhp5v0WtxdIe38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:4c:99:3d:ce:e4:46:fe:03:d2:09:22:19:2f:5c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf587571c0c698458c385b15d60c7f08c70b6fe
Validity
Not Before: May 12 21:00:30 2025 GMT
Not After : May 13 21:00:30 2025 GMT
Subject: CN=f8a4aa3ada0684c8a65676878217228651a87e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8f:62:a2:84:99:0e:40:4d:03:0d:ad:cd:5a:
64:2b:66:f5:d6:b2:f5:b6:91:9e:e2:b0:b2:fb:75:
50:47:26:4b:ee:db:34:75:e1:56:26:6b:24:b2:9d:
73:4d:5e:3e:e1:b2:f1:da:2b:82:6e:0b:ad:86:bf:
74:d6:ca:0a:6b:f0:73:6a:a5:4a:5c:d3:68:9e:89:
6b:15:4b:27:f9:3b:9a:be:41:f8:cb:f0:84:39:87:
ce:60:1f:91:8b:69:25:da:3c:28:a2:4b:d4:57:7d:
2a:d0:4e:92:41:1f:dc:2c:83:f9:88:35:6a:40:b8:
7d:54:f6:4f:f7:bf:df:f8:29:61:51:81:72:b6:3f:
4c:f3:b7:0f:9f:a9:fe:94:3d:c6:a5:b3:ce:3f:7a:
17:70:03:80:9d:1d:ec:05:c5:e4:2e:dd:cf:42:a1:
83:d8:06:b0:d2:17:9b:53:69:3b:63:45:51:95:99:
72:95:ad:d4:19:f7:11:13:10:c4:e3:eb:bf:23:65:
cb:27:9e:56:b0:00:20:56:e3:3e:20:72:03:2e:7a:
7c:e4:0b:c6:de:02:0d:31:9b:c9:78:48:02:5d:b5:
dc:ce:89:0d:a7:b3:9e:e3:7a:4b:c9:a8:66:25:f3:
25:f1:b2:6a:9e:2d:0f:bf:94:ac:e9:7f:de:c9:19:
4b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A4:AA:3A:DA:06:84:C8:A6:56:76:87:82:17:22:86:51:A8:7E:81
X509v3 Authority Key Identifier:
keyid:AB:F5:87:57:1C:0C:69:84:58:C3:85:B1:5D:60:C7:F0:8C:70:B6:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:11:ca:84:13:5e:cf:17:60:e0:43:31:67:ba:57:79:53:50:
8d:63:5f:3d:86:34:b6:4d:69:bc:fa:35:ac:28:24:ea:ff:e1:
a4:0e:35:4e:98:1e:69:2e:f9:b4:c8:f2:d2:bc:ec:13:13:23:
6d:43:fb:4c:4e:30:c5:e2:00:24:24:a2:dc:fc:d0:82:58:76:
73:86:67:cb:82:0e:e0:4e:43:f3:9d:7c:94:cc:b5:b5:4f:8b:
56:2b:98:d3:f2:a1:47:e2:ab:c9:2f:45:7d:9f:3b:ed:30:f3:
2a:3e:6a:8b:14:74:9c:4a:2f:33:8e:c2:17:2c:94:69:43:26:
24:fd:7c:84:bd:a0:db:1f:f8:08:18:08:3a:8d:47:da:f3:08:
65:73:4a:5e:8a:71:f7:ab:fe:35:94:27:e0:81:57:e9:d0:f1:
ff:97:21:f6:92:a3:23:f1:a6:41:c4:99:80:1c:d8:f2:7d:aa:
cf:45:95:28:4a:38:9b:85:6f:18:52:7f:0e:ca:17:6a:66:39:
55:cd:72:79:d0:b8:f3:08:da:f7:f3:13:24:67:41:fa:ed:0c:
43:e6:cd:31:b8:cd:2a:7b:98:b0:78:0c:ba:6d:cd:b5:2c:00:
b9:13:27:02:34:bf:ed:4e:e6:c2:0f:58:4a:df:2a:02:5c:6d:
0f:8c:1d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:49:07 2025 by rpki-client