Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
File: q8Legg4C88P4bluMnEndxJMlEj8.mft (raw, json)
Hash identifier: hXaUOeRL9IxLOKxiBqWVKWbOHuRKQHpZsAGx+h2I6OE=
Subject key identifier: 5E:99:64:A6:6F:77:EE:03:CA:D7:BD:78:1B:3B:7A:58:B7:5E:B9:30
Authority key identifier: AB:C2:DE:82:0E:02:F3:C3:F8:6E:5B:8C:9C:49:DD:C4:93:25:12:3F
Certificate issuer: /CN=abc2de820e02f3c3f86e5b8c9c49ddc49325123f
Certificate serial: 0196C94D7347201B7F93710FC9FAD3DEB947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
Manifest number: 1538
Signing time: Tue 13 May 2025 11:00:18 +0000
Manifest this update: Tue 13 May 2025 11:00:18 +0000
Manifest next update: Wed 14 May 2025 11:00:18 +0000
Files and hashes: 1: 1nJZi9GJ90J5FpzQE_nW1w9Y34A.roa (hash: GVbUZdYnFxfV/6HU/T0jmvYJT+FivYMJd3zG7OwlXB4=)
2: q8Legg4C88P4bluMnEndxJMlEj8.crl (hash: lQQJurFvv+MABNsTlEXi3L+j0Q6rIohAEXZSLvObWrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:4d:73:47:20:1b:7f:93:71:0f:c9:fa:d3:de:b9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc2de820e02f3c3f86e5b8c9c49ddc49325123f
Validity
Not Before: May 13 11:00:18 2025 GMT
Not After : May 14 11:00:18 2025 GMT
Subject: CN=5e9964a66f77ee03cad7bd781b3b7a58b75eb930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:04:25:10:8e:66:8b:13:d8:03:ad:fd:d8:81:
dc:87:6f:96:d4:85:30:84:f5:63:0f:8b:08:53:de:
c3:8a:ee:40:5d:33:1d:3f:82:06:ed:d0:36:b2:76:
8b:30:ef:e9:2f:d5:11:1b:ae:c1:60:77:81:44:fd:
e0:05:a2:78:e4:6c:61:23:2b:39:8c:51:80:af:de:
6e:d8:88:36:15:ec:48:35:a9:a2:c5:87:ae:47:ee:
d7:fa:6d:fd:75:7f:a0:82:bc:45:a2:af:45:5e:21:
7e:83:e6:9b:3f:e6:ba:99:83:75:40:12:cb:46:ea:
0e:b2:a6:aa:4a:37:fd:ba:b1:56:21:bd:08:05:cd:
47:ec:f4:3d:30:a8:8e:76:3f:c5:9d:83:67:f2:8e:
b6:73:e9:9a:93:72:d2:62:34:55:22:37:95:2c:0d:
95:b2:fd:91:10:c6:27:53:87:29:67:7a:36:bb:df:
18:96:6f:8d:e0:5d:bd:43:56:14:41:ff:ea:13:fe:
a4:cd:a5:23:ea:41:9a:24:10:89:50:28:ee:bd:a2:
bd:8f:65:05:f0:a2:5c:68:40:35:25:7f:1b:cd:91:
cf:20:fb:64:ca:4b:1a:b4:12:24:c3:53:e5:b7:84:
4a:f6:95:86:d7:9c:5b:71:1d:61:5e:9b:25:c2:65:
1d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:99:64:A6:6F:77:EE:03:CA:D7:BD:78:1B:3B:7A:58:B7:5E:B9:30
X509v3 Authority Key Identifier:
keyid:AB:C2:DE:82:0E:02:F3:C3:F8:6E:5B:8C:9C:49:DD:C4:93:25:12:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7e:73:1c:58:00:7a:64:7c:74:a7:5c:5c:a3:c5:38:2f:a0:
cb:93:ab:c0:0e:ca:54:65:42:88:30:1a:19:ea:e5:af:f9:97:
e6:5f:d8:6e:97:92:a8:bd:96:82:7a:e6:17:bf:a7:1d:35:20:
33:ca:50:76:39:0e:bd:0a:c2:16:03:96:e3:37:7d:bf:76:33:
f9:f3:39:c9:d8:a2:12:8e:c2:07:73:45:62:c8:c0:2a:81:9e:
b1:d4:f8:2f:fd:ef:f7:d4:8f:f6:0e:dc:a9:9e:d7:fc:9a:c5:
95:44:cc:f2:d8:22:1f:26:dd:b0:3d:e8:ba:c5:a2:f9:5a:8f:
f9:fe:d5:ad:e4:7a:7d:46:f7:14:cf:c2:38:61:f5:3e:15:1b:
0b:39:4d:5e:27:61:9b:56:6f:4a:d3:02:44:14:ff:04:b8:5a:
2d:91:3e:9d:6b:29:88:5c:5e:16:47:3b:6a:df:96:0b:9d:6e:
b4:c6:d8:0b:b7:94:13:b0:15:da:15:74:88:ee:8d:02:f0:65:
2d:d0:9a:96:76:02:b0:01:c8:20:7c:16:5b:85:a4:d2:e3:8a:
98:23:36:16:c8:43:36:cd:e8:b4:1e:8b:2e:94:b1:34:da:30:
9f:d4:75:81:4b:2b:d6:d9:b8:5b:ad:74:40:8c:77:5b:3d:ea:
80:ef:da:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 14:17:30 2025 by rpki-client