Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
File: q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft (raw, json)
Hash identifier: V9/5GtImY5DjNUxK/LLSIS/0foQyA/UOieHJFQvA0QQ=
Subject key identifier: EA:14:0B:F2:EE:BF:08:7F:D7:61:A8:F4:12:D9:D3:91:BA:1D:0B:80
Authority key identifier: AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2
Certificate issuer: /CN=abb060166d64cead0e295797e8d27c55d8898bc2
Certificate serial: 0196C7288F01048F2E407D498841F589FED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
Manifest number: 153A
Signing time: Tue 13 May 2025 01:00:46 +0000
Manifest this update: Tue 13 May 2025 01:00:46 +0000
Manifest next update: Wed 14 May 2025 01:00:46 +0000
Files and hashes: 1: ZVdKIHMCZIgZmO29HfZuK9KianY.roa (hash: 2kGDIO6FKG2t3hXhHnF2iU2nfmaxGFRQZKaQHnUSkxM=)
2: q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl (hash: LKH63CYMkhcpWAMKy05qQUfV+Eeb7ckhyvyLxyG9HKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:28:8f:01:04:8f:2e:40:7d:49:88:41:f5:89:fe:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abb060166d64cead0e295797e8d27c55d8898bc2
Validity
Not Before: May 13 01:00:46 2025 GMT
Not After : May 14 01:00:46 2025 GMT
Subject: CN=ea140bf2eebf087fd761a8f412d9d391ba1d0b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:76:df:e0:a5:0c:e2:11:4a:6f:a3:a5:30:d4:
12:07:cb:7f:a8:a6:12:c6:dc:43:43:d0:32:55:f4:
91:5b:a2:e5:a0:8e:eb:7f:f3:16:80:bc:96:f6:c2:
87:ce:e3:2d:e2:40:e1:ae:b2:50:b2:b0:64:a8:cd:
b1:f0:51:b6:24:55:c1:17:2b:fa:07:30:d2:67:d7:
f5:79:a8:81:62:95:81:0a:d5:e1:c4:d2:63:6f:81:
f6:a1:a7:0c:2f:13:45:de:b2:d1:ad:27:d2:d6:ae:
1d:ff:9b:6b:26:be:73:ef:51:42:39:f6:cd:a2:97:
7b:fd:bd:d1:a0:20:4b:43:97:cb:98:2e:59:a7:93:
c6:02:01:0d:f4:3d:a8:da:f5:4e:04:e8:c4:f8:3f:
49:98:6b:f1:96:5a:0e:a6:88:32:fd:fc:44:a0:32:
f5:2b:af:d6:2d:27:7d:23:f9:85:49:f8:1d:69:4d:
48:9d:93:86:d3:67:05:7d:e9:6a:68:7b:bb:9b:08:
70:9b:d3:25:87:29:52:bf:a2:5a:6e:09:ff:72:67:
c1:9e:d7:66:c1:d6:8b:d8:6f:af:a6:ca:80:78:4d:
42:d4:cc:29:0f:16:30:f6:7f:16:1a:14:ff:ba:f5:
42:13:25:aa:fd:8a:34:07:61:60:e0:a8:97:28:d8:
f4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:14:0B:F2:EE:BF:08:7F:D7:61:A8:F4:12:D9:D3:91:BA:1D:0B:80
X509v3 Authority Key Identifier:
keyid:AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:bf:57:5e:a1:fc:06:8e:d5:b6:4b:f1:40:56:77:27:c5:09:
9b:93:bb:39:75:2a:4f:ef:d0:46:ef:c5:41:6b:1f:dc:52:27:
bb:3b:7a:a3:e9:df:93:6a:bd:cc:78:78:16:06:8d:08:e8:4b:
b6:7d:a9:44:5f:7b:06:f8:c2:d6:fb:70:1d:d8:54:39:a4:4f:
58:8d:76:3f:af:c2:91:49:16:ed:6a:7e:b0:85:d4:19:92:8c:
42:5d:0f:23:6b:bf:66:4c:5e:98:7b:a5:2a:ba:f2:44:c1:6a:
ee:a4:58:4e:1a:b5:40:27:d2:f7:40:72:f5:b7:d8:8e:5f:67:
90:9f:de:da:7a:5e:8e:e2:48:7c:1c:89:4a:c8:30:42:5d:1f:
47:ea:1c:41:c0:85:85:fc:e2:95:95:39:db:1f:1e:b1:d4:07:
dd:4d:92:8a:41:98:eb:8b:2c:28:7b:2f:36:06:59:d5:cd:f9:
5b:8c:83:2c:95:be:3d:bf:48:6a:69:f4:8f:15:19:94:b9:44:
5a:ba:7f:60:93:e5:c0:e6:95:93:31:b1:27:c0:3c:5a:a6:2a:
6f:e6:6a:7c:94:a4:19:10:9a:00:73:2b:f3:14:a3:4c:5a:68:
04:29:e3:70:b9:be:5c:a6:dc:fe:c3:14:a4:a4:b6:b2:20:c2:
23:9b:b5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:33:52 2025 by rpki-client