Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
File: q3vjT10mnaUCqmg0i_B7ktksDMQ.mft (raw, json)
Hash identifier: G2NUOrl9wAyn6KDoVd2+aHS6kmmUr0lebgp94rZJmmw=
Subject key identifier: 86:87:DE:6D:87:B8:0D:22:A2:9C:EA:F1:EE:AC:D8:37:7B:E4:8D:88
Authority key identifier: AB:7B:E3:4F:5D:26:9D:A5:02:AA:68:34:8B:F0:7B:92:D9:2C:0C:C4
Certificate issuer: /CN=ab7be34f5d269da502aa68348bf07b92d92c0cc4
Certificate serial: 0196CC858702607C603A761A6644C3AA67B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
Manifest number: 41
Signing time: Wed 14 May 2025 02:00:24 +0000
Manifest this update: Wed 14 May 2025 02:00:24 +0000
Manifest next update: Thu 15 May 2025 02:00:24 +0000
Files and hashes: 1: 7abujg5YyGw-Dy5kOxbayEhXp8E.roa (hash: lOz5VIr6Vz6VAh0bdDShfDUIzKOutVJzrANsECMkN+c=)
2: q3vjT10mnaUCqmg0i_B7ktksDMQ.crl (hash: 6SI4dkOIZCVZ0v2RE7gvQ0msI5xrIDFLTBrLzGsDCrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:85:87:02:60:7c:60:3a:76:1a:66:44:c3:aa:67:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7be34f5d269da502aa68348bf07b92d92c0cc4
Validity
Not Before: May 14 02:00:24 2025 GMT
Not After : May 15 02:00:24 2025 GMT
Subject: CN=8687de6d87b80d22a29ceaf1eeacd8377be48d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d6:92:da:95:84:d6:38:cb:4d:db:22:01:65:
28:f6:1c:ca:f0:cd:e5:44:a9:af:86:3b:95:c4:02:
dc:ef:1f:87:49:f1:a9:9e:ae:a0:af:a2:03:2d:6c:
53:a5:1b:ad:da:82:f5:41:f4:25:0c:5f:80:06:4b:
d0:79:69:de:27:73:81:ec:87:fb:7b:b3:fe:cf:62:
83:0a:b8:d9:7e:e3:9c:41:8c:46:d7:a7:f5:73:df:
e7:33:7b:08:a8:dc:b2:7c:0c:66:f8:4f:a2:c4:79:
22:45:79:0e:85:64:c8:af:75:cd:26:50:4e:f7:ce:
36:92:79:44:44:b0:93:52:44:7a:84:4e:28:10:ac:
0a:4d:0b:b8:c7:01:b6:ed:ce:0a:63:c9:9a:67:19:
48:58:f1:2c:10:3a:29:6d:a3:c9:a8:06:b6:69:94:
6e:15:4e:0c:90:3e:db:5e:d4:91:d4:32:b5:e1:6b:
79:6a:53:7d:7e:1b:65:d2:74:3a:61:f8:5f:06:bf:
48:7e:40:83:e0:db:f3:d5:2a:61:40:46:ad:a4:fd:
4f:fa:41:63:3a:54:e2:6c:b1:e6:ce:95:04:96:04:
df:9d:1e:22:f9:47:10:d5:43:4c:8b:e1:ea:4c:68:
cc:da:f6:2f:22:0a:5a:ef:69:8a:52:9f:c9:c1:f5:
a9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:87:DE:6D:87:B8:0D:22:A2:9C:EA:F1:EE:AC:D8:37:7B:E4:8D:88
X509v3 Authority Key Identifier:
keyid:AB:7B:E3:4F:5D:26:9D:A5:02:AA:68:34:8B:F0:7B:92:D9:2C:0C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:bf:e1:af:a2:67:c8:69:f3:c9:30:02:4d:46:c8:d9:b7:fb:
a3:b1:34:92:f2:48:4d:69:9f:7d:01:ce:a6:3e:9f:ae:2c:df:
83:e1:84:5d:c0:ce:d5:15:2b:cd:fc:d2:52:7d:a4:1f:62:91:
8c:da:2e:90:32:96:7c:c2:ce:7e:db:17:d4:a0:a0:ed:33:b1:
de:c6:ef:2b:71:45:55:f6:6e:25:6c:46:c3:22:87:a6:2a:ea:
43:57:66:6f:44:20:14:51:70:4b:2d:22:4f:a7:55:52:67:29:
b3:3d:82:11:65:74:2f:7f:8c:0d:a5:eb:44:9f:7e:20:dc:52:
ab:c8:2d:f9:16:69:7f:11:1d:20:f7:9f:d1:b7:e8:65:d5:15:
9d:f9:8c:ae:8e:e5:f5:5f:3a:0c:e5:7a:93:28:03:3b:64:f1:
df:2f:cb:71:8f:6f:ef:96:b6:bb:e0:8d:74:73:37:8b:39:42:
f3:d3:8c:b0:b7:09:99:55:26:96:7a:c9:2a:48:bc:5e:59:41:
26:db:44:91:ad:a4:39:35:54:44:86:39:79:ea:d1:fe:a8:4a:
4f:42:0a:f9:7d:45:0e:bd:ad:c1:c4:0d:24:7c:b8:a0:af:93:
ab:2c:80:13:e8:c6:36:f2:c8:95:ae:1b:d5:1e:e8:89:08:68:
b9:93:68:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:34:04 2025 by rpki-client