Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
File: QntUBuzauOW0DdxUvGFcoqcJIvE.mft (raw, json)
Hash identifier: S6gk2pNe/jUZvuKAxTcKbVi9peqPyWGqBCksLc1KJZU=
Subject key identifier: 01:AB:45:F1:BD:2D:AC:08:83:6F:24:12:86:E5:83:47:77:6B:76:D6
Authority key identifier: 42:7B:54:06:EC:DA:B8:E5:B4:0D:DC:54:BC:61:5C:A2:A7:09:22:F1
Certificate issuer: /CN=427b5406ecdab8e5b40ddc54bc615ca2a70922f1
Certificate serial: 019655A5C5F923219FDE2233C6054B6E1FC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
Manifest number: 0FFC
Signing time: Mon 21 Apr 2025 00:00:49 +0000
Manifest this update: Mon 21 Apr 2025 00:00:49 +0000
Manifest next update: Tue 22 Apr 2025 00:00:49 +0000
Files and hashes: 1: CF9g-zHrIl6sH7ffAFMheYKTmgE.roa (hash: 8JftFhjM60lS0dv+t4PfyHWDIpIU5Mke1ZAPszJPPn0=)
2: QntUBuzauOW0DdxUvGFcoqcJIvE.crl (hash: vJhIB7BumV6Aus0QgUKdEUVw0OlqvnsKKpIYpeN6OiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:c5:f9:23:21:9f:de:22:33:c6:05:4b:6e:1f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427b5406ecdab8e5b40ddc54bc615ca2a70922f1
Validity
Not Before: Apr 21 00:00:49 2025 GMT
Not After : Apr 22 00:00:49 2025 GMT
Subject: CN=01ab45f1bd2dac08836f241286e58347776b76d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d0:1c:ca:ed:e2:20:45:de:f4:75:e5:ad:ae:
ee:6c:e9:1c:91:32:ec:83:96:70:b1:84:64:bb:19:
2e:c5:33:3e:ba:43:b2:0c:7a:27:08:ad:c3:56:db:
cf:90:f4:1e:e0:c6:5b:89:2f:41:7a:df:fb:61:75:
fb:d6:41:6e:ed:b6:f5:f0:25:98:ad:28:47:12:d7:
9e:7a:f2:62:52:11:7d:62:02:2f:0d:0f:4e:7e:fc:
7f:4d:46:c8:b0:30:c9:3b:42:51:8e:3c:88:1b:8a:
c2:bf:28:18:a7:77:e6:c5:46:10:13:14:6f:7f:dc:
84:c2:33:13:3d:34:5b:41:14:3e:fb:99:0e:2b:49:
4b:39:7f:f7:ca:44:d3:4e:3f:8a:8f:a0:3a:83:d6:
9e:91:d6:50:64:4f:03:58:bf:90:26:b6:67:8a:f3:
f9:a0:11:48:19:37:dc:29:cf:ef:68:e6:fc:62:14:
35:71:3a:d0:02:a2:ce:32:ed:81:66:f7:8f:47:02:
d7:42:27:b7:50:3c:d2:4c:0d:3e:26:84:52:a0:a9:
1c:53:1e:3f:2b:f2:34:50:0d:28:e1:6d:83:bc:37:
73:d6:62:15:3f:5e:e8:90:97:16:88:b0:fe:de:08:
40:53:ba:9e:a8:f6:ae:76:77:10:9f:ef:05:7d:40:
48:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AB:45:F1:BD:2D:AC:08:83:6F:24:12:86:E5:83:47:77:6B:76:D6
X509v3 Authority Key Identifier:
keyid:42:7B:54:06:EC:DA:B8:E5:B4:0D:DC:54:BC:61:5C:A2:A7:09:22:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:6f:78:5c:01:46:b7:61:2e:bb:41:61:45:b7:73:18:39:db:
82:01:29:b6:f8:86:6b:d0:b3:85:9e:3b:e8:16:91:ff:7a:e2:
79:1a:07:c6:76:18:04:4e:1a:51:c2:4c:19:68:db:ef:7a:98:
c1:44:51:83:3c:94:11:e1:a6:f8:96:40:4b:88:cf:9f:f5:7e:
c4:cd:23:23:79:c9:29:06:b5:d8:5a:49:33:a1:aa:f0:41:b6:
73:83:3c:a0:fc:a8:11:b9:c8:c0:21:c1:51:03:67:1f:ee:4a:
c5:31:08:97:2d:34:00:03:d0:b6:35:43:ed:1b:47:48:38:16:
d9:cc:a7:85:76:cf:de:22:2d:71:d2:22:9b:12:3f:30:cd:d6:
67:ca:fd:80:b0:80:89:18:2a:5c:dd:91:ea:da:9b:f6:6e:9a:
8b:fa:10:d0:b5:cb:3f:d0:58:03:fc:e6:cc:2b:31:7d:2d:4f:
e8:a2:02:c9:20:60:57:77:ce:21:70:d3:89:2d:60:3f:e9:64:
0e:44:8c:e8:e5:36:18:ef:e7:5e:95:7b:bb:b2:5d:e4:a5:ed:
1c:d0:57:dc:92:e0:33:dd:2c:aa:23:8b:e3:07:e1:7e:b5:d9:
ae:98:dd:36:2e:c4:a4:93:15:de:27:92:80:a6:6a:08:f1:80:
21:71:16:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:52:08 2025 by rpki-client