Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
File: Qfg9IXNOBVXHoTxIVhygt3V6ago.mft (raw, json)
Hash identifier: RX9PaqzszqLcKxT5Fg7tXqjHTmSbz+3W2/ffI62V+iA=
Subject key identifier: 30:9B:BA:E2:40:7F:D8:2C:E0:8A:1F:CF:FA:2F:0C:AE:2C:B7:6D:45
Authority key identifier: 41:F8:3D:21:73:4E:05:55:C7:A1:3C:48:56:1C:A0:B7:75:7A:6A:0A
Certificate issuer: /CN=41f83d21734e0555c7a13c48561ca0b7757a6a0a
Certificate serial: 0196556EC00702235C417277F58013E3BE9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 23:00:43 +0000
Manifest this update: Sun 20 Apr 2025 23:00:43 +0000
Manifest next update: Mon 21 Apr 2025 23:00:43 +0000
Files and hashes: 1: Qfg9IXNOBVXHoTxIVhygt3V6ago.crl (hash: rD8jIjeQGctqBcXaqOARBFHs2CuWACynNB9oZg3RdJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:c0:07:02:23:5c:41:72:77:f5:80:13:e3:be:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f83d21734e0555c7a13c48561ca0b7757a6a0a
Validity
Not Before: Apr 20 23:00:43 2025 GMT
Not After : Apr 21 23:00:43 2025 GMT
Subject: CN=309bbae2407fd82ce08a1fcffa2f0cae2cb76d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f5:b6:44:8f:71:da:55:cb:34:a6:47:c5:8b:
72:40:f0:b9:f3:3e:8c:2a:31:5c:2d:cc:91:59:c7:
12:d3:a7:30:4c:8b:af:63:ff:5c:8b:89:1c:b0:f6:
33:53:97:77:94:77:ca:23:34:b6:1e:65:ae:bf:1b:
7f:69:d3:25:48:f8:0c:b9:e7:9e:53:9c:43:71:f8:
fe:ca:98:86:5e:7f:ec:70:e0:89:43:3f:84:41:98:
f5:08:a9:80:10:d8:60:19:6f:86:33:34:5c:ad:92:
a9:0c:bb:77:d4:da:21:74:5e:8d:58:9f:e9:9a:94:
8b:7d:b2:ee:3a:9c:7b:00:9b:f8:04:e4:47:e6:81:
6b:83:a6:47:e7:34:85:da:a0:49:2d:14:71:af:03:
3e:bb:68:a9:25:59:f0:f7:64:2c:42:aa:ce:87:d7:
a6:f8:36:7d:dc:c8:cf:ed:d6:66:0e:1e:27:8a:4a:
86:c3:5c:a0:ed:b1:1b:82:f8:e2:61:4d:93:f9:fb:
82:9a:0d:4b:de:ef:54:89:8c:2b:0d:5e:11:c7:bd:
2b:b1:dd:0d:ae:93:b8:46:6c:a9:0e:5d:79:60:75:
0f:62:f2:40:16:9d:9a:93:09:4a:3d:32:e5:4d:de:
54:5d:ec:7b:46:c6:6c:bf:d0:42:dd:a4:0e:55:25:
ab:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9B:BA:E2:40:7F:D8:2C:E0:8A:1F:CF:FA:2F:0C:AE:2C:B7:6D:45
X509v3 Authority Key Identifier:
keyid:41:F8:3D:21:73:4E:05:55:C7:A1:3C:48:56:1C:A0:B7:75:7A:6A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d0:0b:b1:48:42:15:85:b0:1f:59:a8:b6:64:47:63:46:75:
bf:fb:2e:b8:3f:78:c0:28:1b:d1:eb:ae:f4:dd:b7:12:cc:21:
de:98:e1:00:40:87:4a:1d:72:5f:9f:1a:f3:f3:0a:14:6d:73:
3f:36:33:4a:ab:8c:b2:94:49:08:a2:6f:87:96:18:64:da:1f:
6a:9e:4a:66:f6:b1:3f:d8:bf:72:cf:62:60:c5:52:17:82:09:
be:21:32:22:90:69:19:0b:b2:da:ad:3f:7d:d1:6c:b1:47:2f:
5f:c5:ea:9f:43:2b:7a:7f:cc:c3:b6:88:ca:fe:66:38:10:c8:
a6:83:ea:54:2d:98:ac:e8:a7:c0:99:fe:53:5b:35:9c:e2:bb:
47:a0:f5:2e:bd:7b:2d:8e:89:5f:53:63:d1:ce:1a:5d:ae:9c:
94:9a:8b:95:4a:e7:22:cc:30:3a:52:9e:21:4a:e9:24:90:92:
46:62:88:12:aa:b1:5a:64:7a:46:1c:75:b4:b5:ff:ac:34:57:
da:89:67:51:9f:81:23:d9:aa:2b:76:4e:b9:38:dc:ed:ad:be:
31:51:10:39:d4:c4:e8:09:e4:14:dd:f2:ad:b3:ef:8c:c9:50:
04:78:bd:ff:7b:2a:3e:7a:95:28:3e:07:08:15:7b:e9:29:74:
be:e9:0d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:16 2025 by rpki-client