Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft
File: qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft (raw, json)
Hash identifier: TbsRaDdReav25+qomwx2tp7V2E4rKGARW+qHIVcGeUQ=
Subject key identifier: 39:DB:7F:15:05:E8:B6:58:4A:DB:C0:84:63:75:B2:C5:46:81:DD:3E
Authority key identifier: AB:34:4B:32:F5:8B:56:4C:89:7A:1F:FA:69:67:08:91:98:F2:C8:22
Certificate issuer: /CN=ab344b32f58b564c897a1ffa6967089198f2c822
Certificate serial: 019659827C4D4E304D400563E588FFE40327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft
Manifest number: 02EC
Signing time: Mon 21 Apr 2025 18:00:45 +0000
Manifest this update: Mon 21 Apr 2025 18:00:45 +0000
Manifest next update: Tue 22 Apr 2025 18:00:45 +0000
Files and hashes: 1: gS2YYEML9M4UNWK3VVDTZTM54bA.roa (hash: mr7+UlZRci6ZTeqcdGCeGzmY9P3YX+uy/+4p1bdlnM4=)
2: qzRLMvWLVkyJeh_6aWcIkZjyyCI.crl (hash: JqukfEEu2hugq5ATatBzdJq7Ps7AaiG+37DRYbc5tLc=)
3: tSdceX3_WKYPOSqNpQt9_4TBFn8.roa (hash: zZjSigYgJ8knWkj4u0ar/HI7QTSKBL8PUuzQf8DJQWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:7c:4d:4e:30:4d:40:05:63:e5:88:ff:e4:03:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab344b32f58b564c897a1ffa6967089198f2c822
Validity
Not Before: Apr 21 18:00:45 2025 GMT
Not After : Apr 22 18:00:45 2025 GMT
Subject: CN=39db7f1505e8b6584adbc0846375b2c54681dd3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:24:aa:9d:48:bc:33:18:ba:91:cb:05:fe:82:
eb:e7:5a:4e:2f:05:32:9e:e3:b4:eb:7e:a8:44:11:
d3:d4:d0:c1:eb:ba:71:f9:2d:b8:05:04:43:ce:63:
c3:ec:61:1e:7a:83:91:02:5d:e8:aa:74:b1:a0:0f:
2c:03:9b:8c:a7:e0:fe:64:b5:87:ad:8a:0a:ce:b4:
69:6b:0f:53:12:64:d7:a5:c9:0a:a0:94:fc:a0:82:
fb:e6:b1:9c:d1:ba:58:95:c1:fd:fc:7d:1e:a9:e0:
76:b4:4b:a8:31:d6:07:26:61:80:34:9b:79:cf:3f:
dc:5d:5a:ea:dd:11:d7:6b:29:63:39:14:d9:47:b5:
3c:48:82:a9:9a:04:8b:11:0f:e9:1b:05:dc:8d:4f:
b0:91:5a:d8:18:70:94:eb:11:72:9b:55:4b:44:fc:
77:56:f0:3b:59:c8:33:e2:4d:ec:a8:b3:56:08:e0:
57:ae:04:ee:7d:87:96:6d:22:46:22:4f:44:56:6e:
5e:60:82:68:e1:f4:ab:1d:3c:18:31:a9:90:f7:8d:
6f:50:e9:36:89:ee:00:d5:cc:b9:77:80:7a:8f:16:
4c:a8:e9:d9:1f:4d:73:56:c7:ad:32:62:8a:da:3d:
6e:c8:8c:99:7f:fe:fc:45:a0:33:8b:d2:13:fd:ab:
c9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DB:7F:15:05:E8:B6:58:4A:DB:C0:84:63:75:B2:C5:46:81:DD:3E
X509v3 Authority Key Identifier:
keyid:AB:34:4B:32:F5:8B:56:4C:89:7A:1F:FA:69:67:08:91:98:F2:C8:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:69:03:37:4d:e3:65:70:dc:82:dd:d7:ba:b8:e2:a1:60:cd:
d1:a7:13:64:43:2f:2b:6d:67:22:a0:7e:ef:60:82:38:51:82:
bb:b2:02:ca:93:69:5b:ad:9b:e1:b6:ab:fd:f9:93:c2:0d:74:
dd:01:37:e2:bb:f1:82:15:07:26:8d:5a:86:04:ac:4a:53:20:
da:72:1f:72:6c:cc:a5:fc:35:b5:20:c6:b3:62:3d:63:7e:52:
ab:ca:66:ed:b5:d5:59:b2:bb:80:ac:f9:04:cc:ad:91:2a:c5:
99:fd:f9:69:04:13:57:34:0d:f6:0e:8d:2b:f1:04:4f:2f:c0:
f5:e1:09:e6:29:3f:db:8b:79:07:3f:e6:b7:30:79:c4:00:64:
22:96:7a:68:dd:0a:67:dd:fa:80:b3:e1:a6:ee:ca:a3:35:fc:
bc:47:4e:48:ac:13:83:e5:50:7f:e9:fa:22:08:b0:16:e8:9f:
c3:e3:95:0c:80:2e:54:36:bf:53:a0:64:d5:cb:9f:e3:ab:6a:
c1:db:15:04:5b:59:e0:53:43:7a:b2:69:b1:0d:2c:69:b9:1d:
35:d8:e3:3f:32:e2:9f:7d:bc:43:46:a3:be:b6:f4:a3:d0:85:
a3:cc:cf:ac:b2:3d:8a:28:cf:e9:7f:cc:aa:5f:18:57:e4:66:
af:9d:53:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:21:13 2025 by rpki-client