Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
File: QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft (raw, json)
Hash identifier: /COXRFDBSJgXrhbmMFgm22oJkfjSOGNs9xWqEL2kab0=
Subject key identifier: 81:36:18:3F:90:AD:AA:2B:35:4A:C6:05:D4:EF:16:5D:BB:23:FF:EA
Authority key identifier: 41:F2:82:CC:1C:07:69:7F:F5:B5:19:0C:71:43:93:D5:42:40:6D:43
Certificate issuer: /CN=41f282cc1c07697ff5b5190c714393d542406d43
Certificate serial: 01965C8385453B3D64732CEC22FD09603E88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
Manifest number: 1503
Signing time: Tue 22 Apr 2025 08:00:45 +0000
Manifest this update: Tue 22 Apr 2025 08:00:45 +0000
Manifest next update: Wed 23 Apr 2025 08:00:45 +0000
Files and hashes: 1: PbpHI1ZC_qh6Iqt-kTdMP4W_DEg.roa (hash: K3Udc58xv21OmQH+u7wn/kXbZhJ9O+Rk784GDSjalf0=)
2: QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl (hash: aEYaRKJ841FIXbAa1ktSrMrOqK3zE7OVt8u12rSlxQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:83:85:45:3b:3d:64:73:2c:ec:22:fd:09:60:3e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f282cc1c07697ff5b5190c714393d542406d43
Validity
Not Before: Apr 22 08:00:45 2025 GMT
Not After : Apr 23 08:00:45 2025 GMT
Subject: CN=8136183f90adaa2b354ac605d4ef165dbb23ffea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:43:93:7f:54:e6:ea:e3:98:46:f8:71:9e:8f:
be:df:07:4d:3a:f4:84:da:c7:28:68:d7:96:72:53:
95:d3:b0:3a:fc:f6:f5:4e:d0:dc:26:4f:b1:d6:8c:
c0:80:7c:00:c5:33:65:bd:4d:4d:47:d1:5a:9b:fc:
64:0c:f4:bd:ae:84:05:f2:12:bd:1b:fb:30:09:d0:
c3:db:58:7e:24:2c:ec:c7:a7:8f:db:9c:d5:7d:18:
35:b4:0f:c5:e4:f9:37:aa:b5:0a:64:06:a6:2d:a3:
f9:5a:98:b4:a6:4d:7b:e9:c4:45:70:f0:55:dd:c7:
7b:d9:16:c0:a0:67:29:12:18:06:c0:bc:97:78:7c:
c4:4d:64:3a:2d:b2:6d:2e:0a:86:ce:66:f6:f8:86:
3d:04:6b:9c:45:45:22:4d:0e:24:01:9a:18:db:41:
51:a9:8e:a7:e1:b0:19:66:f0:e9:b7:b3:93:9c:54:
fb:62:2c:6e:f6:b6:7d:90:57:10:09:9e:37:42:7a:
fd:a7:c7:a5:5e:70:b6:b0:10:96:4f:b3:5c:83:57:
bb:55:4a:aa:ee:ed:8c:9a:ad:9e:c2:9d:45:bd:fd:
74:e7:84:c4:e4:d9:b9:3a:e3:fb:9c:1c:60:3d:b9:
d0:36:55:0a:a5:8d:a0:20:25:84:d2:2c:57:8c:e5:
59:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:36:18:3F:90:AD:AA:2B:35:4A:C6:05:D4:EF:16:5D:BB:23:FF:EA
X509v3 Authority Key Identifier:
keyid:41:F2:82:CC:1C:07:69:7F:F5:B5:19:0C:71:43:93:D5:42:40:6D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f9:0d:99:37:5d:2d:f1:37:da:2b:67:a4:c3:cc:ba:86:0e:
9e:44:20:a6:3d:a4:99:6d:24:c1:18:2d:20:f2:e0:ca:45:69:
d2:15:79:fb:96:62:b7:15:7b:56:1a:e8:2b:ce:87:06:bd:12:
1f:19:11:35:ec:4e:31:c9:39:09:9c:c1:92:73:e7:46:ec:56:
87:64:2b:24:72:a7:4e:22:07:20:2f:d7:fb:70:a2:3d:64:4d:
5c:48:87:26:d3:50:6d:1f:4e:4b:3c:31:0b:20:3d:f5:9c:b5:
91:e5:52:2b:fd:4f:1c:ce:20:9f:31:d5:fd:4a:9d:08:17:f7:
3e:63:d3:b9:a9:25:45:a7:70:f8:5b:31:a4:05:d5:dd:a7:b7:
3c:62:df:2f:52:4b:43:0e:fe:85:cc:b2:93:08:2b:8a:85:be:
27:c3:34:ea:dd:0f:8d:65:7b:52:de:a1:c2:1f:f7:ff:7c:66:
e4:21:ef:83:ea:09:7a:47:90:79:ee:a5:22:db:eb:12:be:1e:
07:d1:ce:d9:74:e9:68:6f:ac:3d:48:2e:6f:eb:c0:ee:89:b7:
e2:72:18:16:cd:bc:d8:c1:21:76:d1:c9:2c:6b:66:4e:9e:65:
f6:84:21:86:73:e8:7f:f8:85:72:3e:99:4b:95:05:0c:52:dd:
c4:37:c4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:20:29 2025 by rpki-client