Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
File: q8ETx66mtxSgYOn3w-cVaeYD05U.mft (raw, json)
Hash identifier: nQEEcoykLnZiPIYIm1QHgz7/qJmBP7gNylyn8UnqRww=
Subject key identifier: F3:E8:EE:81:52:59:89:D6:0C:C3:98:A6:4A:AA:E5:13:87:AB:A5:20
Authority key identifier: AB:C1:13:C7:AE:A6:B7:14:A0:60:E9:F7:C3:E7:15:69:E6:03:D3:95
Certificate issuer: /CN=abc113c7aea6b714a060e9f7c3e71569e603d395
Certificate serial: 0196C38256B286A72F2CA057CBFAD83863AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
Manifest number: 0C26
Signing time: Mon 12 May 2025 08:00:21 +0000
Manifest this update: Mon 12 May 2025 08:00:21 +0000
Manifest next update: Tue 13 May 2025 08:00:21 +0000
Files and hashes: 1: Q7n8gF3ZYVbGL83zzh2dQnmawHc.roa (hash: nZCFM7j2sE+1KCmTTykVW0xazn9X/ppTbL+++Wr3NQI=)
2: q8ETx66mtxSgYOn3w-cVaeYD05U.crl (hash: B8YbrLUlMnToPuJCiwXBletqB+o0N509lw3zbkHcaVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:82:56:b2:86:a7:2f:2c:a0:57:cb:fa:d8:38:63:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc113c7aea6b714a060e9f7c3e71569e603d395
Validity
Not Before: May 12 08:00:21 2025 GMT
Not After : May 13 08:00:21 2025 GMT
Subject: CN=f3e8ee81525989d60cc398a64aaae51387aba520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:34:df:49:46:ed:85:f8:6c:1d:05:ff:78:b0:
93:83:88:c5:d6:95:77:90:a4:de:1e:fb:be:a5:df:
ad:5b:6a:2c:c9:62:15:a9:6e:3f:08:3c:d4:e6:2e:
29:f8:b9:11:56:0d:1a:01:de:32:90:35:7b:7e:c1:
fc:b8:c3:4c:21:ea:dd:01:ef:e0:80:19:2f:37:a6:
73:fa:c9:6d:c0:93:73:bd:bc:b6:e1:79:2d:80:60:
6c:1a:3d:35:76:b0:91:3e:1c:1c:8c:3b:2c:9c:b2:
56:f3:e1:fb:13:70:c6:f3:a4:4c:22:12:51:fb:c2:
8c:b2:c4:97:2b:63:74:6e:92:fe:4f:ab:f6:7e:13:
5c:ef:0c:1d:c2:19:de:c5:32:ba:15:d3:a6:09:f8:
dd:a0:99:39:fa:57:80:03:c3:cf:34:a1:41:40:8a:
fc:57:e8:0c:98:ae:4f:92:51:32:aa:6c:6a:0f:12:
b7:79:28:09:bc:f3:95:e4:b0:4f:d7:15:72:13:a0:
b1:f5:5a:e8:95:99:fb:26:44:83:14:57:ac:ec:19:
4a:1f:fa:41:1a:ba:85:ac:60:4f:a6:57:12:5e:d3:
f4:af:80:fd:24:ca:e5:9f:28:22:e2:de:0d:50:26:
48:84:05:ca:e7:10:cd:68:b0:b7:12:8f:64:79:38:
00:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E8:EE:81:52:59:89:D6:0C:C3:98:A6:4A:AA:E5:13:87:AB:A5:20
X509v3 Authority Key Identifier:
keyid:AB:C1:13:C7:AE:A6:B7:14:A0:60:E9:F7:C3:E7:15:69:E6:03:D3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:82:dc:cf:f5:8f:72:d9:03:1e:7c:b3:82:75:ba:6e:8b:c3:
87:77:a0:00:36:7b:a7:29:ab:f8:c7:99:63:e5:28:24:6e:5f:
1a:68:6d:35:c1:cc:73:42:07:0f:0b:cd:0d:a3:c9:9b:74:30:
48:3f:e7:f4:fa:c9:ec:a7:df:64:5b:82:3c:9c:18:82:f5:78:
18:45:37:61:d7:dd:ae:1e:52:d0:4b:7f:f6:f1:05:84:99:79:
aa:79:e3:07:1d:db:c4:0c:c1:1c:de:b1:21:bd:85:5b:5d:d8:
62:ab:f4:ab:19:72:ea:86:9b:d1:95:36:f5:65:f8:3b:40:9d:
81:77:2b:9f:ea:2c:fc:39:ab:c5:7c:1c:7d:70:13:b6:b1:4d:
e8:42:4e:3f:32:75:41:4b:ce:db:bb:75:28:93:15:40:3e:96:
e1:44:9c:37:c7:7f:df:19:c7:fb:e3:df:a0:22:6d:98:5c:14:
9b:d9:9f:98:f9:75:c1:4f:e4:73:05:c6:28:ea:7b:34:d1:44:
79:f9:0d:34:71:ee:51:66:7d:ff:c1:8c:2a:2b:e2:91:3d:7c:
74:05:b3:62:08:e6:79:54:49:d3:de:d5:55:d8:6b:38:d6:f2:
c9:39:c9:df:89:32:86:a4:ff:7b:82:36:c2:9f:43:44:1d:a6:
29:68:d0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:42:07 2025 by rpki-client