Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
File: q8GRjB9F5uwX2spnp60ZPK8Et7I.mft (raw, json)
Hash identifier: lO/c/UsZreVEqtkoArDOERB9+5V6eIedUjvTjh5hJ8U=
Subject key identifier: B2:8E:1D:38:36:7F:57:7C:F5:EF:79:D8:93:3C:71:54:04:7A:6D:EF
Authority key identifier: AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2
Certificate issuer: /CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
Certificate serial: 0196BECA467CAF007579CA42F155D860196E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
Manifest number: 03A9
Signing time: Sun 11 May 2025 10:00:49 +0000
Manifest this update: Sun 11 May 2025 10:00:49 +0000
Manifest next update: Mon 12 May 2025 10:00:49 +0000
Files and hashes: 1: 2-PCYSmoRYP78bU8-tuVZLZOhCE.roa (hash: aSC0E7m4wW6P1G+DA0HfmnfnwGNL/CMWhL2kiTYQvoc=)
2: L4RKq9blDuun-Ov7h4-EXCJDU7o.roa (hash: rV2ghgo1vc0bF0beR2sZL8zKS4novhD+fyLSyA4fGEk=)
3: TKYCIQIu4F23JxsEDfGIzBctkEc.roa (hash: EAnr/9lW4r6/S4hhnfhRdmsx8JCo45r2zRW9cF9kcLo=)
4: q8GRjB9F5uwX2spnp60ZPK8Et7I.crl (hash: 9q2fkq2Fu8TYRW7j1dVtqBNbMeJSFoYn7O7UX0LE8cI=)
5: qvNjDJ9eS48JlV1R7hV7YEei3s0.roa (hash: 7WHrrqOQZDnykzDETa13+ZYZFeNzxM1H1+r8MstF8cE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:ca:46:7c:af:00:75:79:ca:42:f1:55:d8:60:19:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
Validity
Not Before: May 11 10:00:49 2025 GMT
Not After : May 12 10:00:49 2025 GMT
Subject: CN=b28e1d38367f577cf5ef79d8933c7154047a6def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a5:25:dd:12:e1:33:20:ae:37:d4:d6:b0:9b:
f1:07:e1:c8:d4:13:fa:87:22:48:92:3f:8f:eb:f5:
c5:df:e8:15:e5:af:d6:19:85:6c:31:d4:79:af:1c:
f2:d5:bc:2e:df:5c:a3:78:33:6b:5a:3a:55:bb:74:
61:28:10:21:ef:9f:c4:a6:7b:0f:c5:c9:ec:95:4a:
10:4b:62:b8:49:2c:da:f2:29:4c:cb:ec:76:c1:65:
61:52:cb:00:7d:6c:c7:97:c6:87:b8:1d:ac:0f:42:
19:c2:65:e5:5e:75:39:8e:e8:ed:46:00:85:59:90:
a8:73:1b:47:80:12:13:ae:ba:7f:7b:b3:d1:5f:54:
a8:ba:16:45:a9:2e:eb:9d:05:f3:4f:83:e0:be:cf:
21:a5:c4:18:0f:d9:bc:d1:9c:ae:a2:d1:6d:e4:9c:
e8:a1:4c:4a:2e:96:b1:26:6e:b9:f7:64:fb:17:45:
b6:de:61:a3:e7:64:c5:b8:6d:3d:4e:1b:d2:d2:55:
d0:33:b3:d8:71:ac:b9:a3:1d:4a:99:1d:5d:e5:b1:
d9:2a:ef:78:21:00:4a:f2:98:ba:cb:f6:f9:00:c8:
3c:4d:75:1b:0c:78:02:fe:9c:fb:fb:a0:bd:2f:12:
71:58:52:a8:58:f4:34:b7:48:8a:f0:53:4c:7d:7a:
f6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8E:1D:38:36:7F:57:7C:F5:EF:79:D8:93:3C:71:54:04:7A:6D:EF
X509v3 Authority Key Identifier:
keyid:AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c0:19:59:5b:b5:41:84:a6:25:bf:38:1a:57:d3:d2:a4:31:
dd:37:b0:91:2b:f4:d2:0a:00:1c:ef:02:b5:c1:06:33:04:90:
27:c5:5a:20:6b:bd:3d:66:1d:ba:3e:5b:99:5d:73:95:e6:f1:
f0:02:50:85:c9:fb:8e:51:b8:40:06:3d:52:a8:30:cb:c2:5a:
6e:e4:6d:6d:da:80:4d:ed:9f:b0:61:76:9c:69:3d:96:69:19:
f5:83:7b:43:ba:61:a7:69:ba:c9:b0:ef:93:fb:df:08:4b:7f:
6f:5e:71:f9:f2:1d:1a:b8:7f:6d:a6:09:45:d2:a5:23:77:da:
d1:38:cf:dd:a9:c4:d3:dc:20:c5:08:a8:99:04:26:a6:34:1e:
9c:a9:b6:be:da:c7:33:da:d9:c2:89:2a:df:ae:f3:5b:03:a4:
9c:32:f0:26:a0:e4:49:18:9e:b8:ec:db:c4:79:1f:43:6d:56:
03:4d:88:af:8e:96:03:b7:a2:0b:68:99:cd:a8:48:e0:b4:60:
e9:2e:74:04:d6:c0:fc:bb:e8:9f:84:34:2e:0e:1c:a6:5e:2d:
41:ca:dd:2b:2b:cd:ee:4a:92:5e:a0:73:bf:48:51:d1:9a:92:
31:e7:87:c2:05:ef:e1:f6:a7:5c:dd:48:07:43:c9:35:37:86:
1b:7a:d9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:40:51 2025 by rpki-client