Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
File: qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft (raw, json)
Hash identifier: KUT75phhoAAA4epwHJerU9lOzSDiM4p9YrW++PkYlSY=
Subject key identifier: 76:55:31:22:D0:E4:63:6B:39:02:00:7C:33:2A:7E:3C:A9:9B:75:0F
Authority key identifier: AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
Certificate issuer: /CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Certificate serial: 01960D55EB770F88420A64639A0513CEE220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
Manifest number: 14D7
Signing time: Sun 06 Apr 2025 23:00:56 +0000
Manifest this update: Sun 06 Apr 2025 23:00:56 +0000
Manifest next update: Mon 07 Apr 2025 23:00:56 +0000
Files and hashes: 1: 6IkTOlXjuiMiUAcYz6JmNLyjzkI.roa (hash: lvYkGWBMeYPfRVhHecKPB+lCXAgyiJ169VcA0wekGsU=)
2: e4TuQp4c2N02mdWdlxAx2GM5rFg.roa (hash: TkgW2WEclpl44YPmskP1q4vEinXMPrmbVI0ndJ9d/ec=)
3: qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl (hash: UmUWUJhIMBZnWNj67xIlM2y75c8xaKYffSNvfWJ8Kqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0d:55:eb:77:0f:88:42:0a:64:63:9a:05:13:ce:e2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Validity
Not Before: Apr 6 23:00:56 2025 GMT
Not After : Apr 7 23:00:56 2025 GMT
Subject: CN=76553122d0e4636b3902007c332a7e3ca99b750f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:db:e7:3d:b2:84:b8:c2:39:b7:95:84:73:51:
4c:45:69:4c:a8:14:27:2d:00:27:c5:bc:a9:1b:d7:
1e:e8:d6:f0:e3:46:a5:38:3f:03:03:ea:ba:a5:b3:
43:80:b0:72:40:3e:72:87:73:98:51:56:da:4e:db:
d3:de:6b:8d:91:45:f5:7b:97:f4:e8:fa:bc:61:59:
ac:f7:0f:73:25:4d:5b:b3:cf:a8:a7:5e:c1:2c:34:
04:74:cf:85:6b:b8:b5:e6:c6:2c:e4:6b:84:18:a5:
ca:69:55:c7:84:2d:3c:a0:ae:30:08:10:92:24:56:
fd:f4:f6:97:d9:b4:4e:79:2a:1d:b9:de:fe:f4:92:
1b:84:59:7c:19:c8:16:ed:84:98:0d:45:3b:aa:d7:
52:24:f9:e9:c9:ab:83:61:59:53:de:71:f0:74:35:
81:2e:3d:92:16:6d:00:c0:b4:90:48:f5:54:b4:6e:
17:a3:46:4a:1c:8a:79:44:92:20:87:19:31:3b:ad:
48:30:3d:d5:e2:10:76:71:a2:9f:ad:19:fd:28:32:
17:d3:f3:77:b7:f8:05:e0:ce:84:7c:66:61:e9:de:
ac:61:52:3b:ad:03:49:9d:11:81:30:74:b4:70:c0:
ac:de:0b:3d:a6:65:3e:9c:d8:88:ca:aa:15:e4:88:
5e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:55:31:22:D0:E4:63:6B:39:02:00:7C:33:2A:7E:3C:A9:9B:75:0F
X509v3 Authority Key Identifier:
keyid:AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:0a:f4:a7:0a:19:40:54:70:0c:c5:86:2e:83:ae:4e:27:28:
62:0c:7d:a6:42:a0:a4:b8:11:eb:e4:15:07:d2:de:ca:c6:fc:
73:ac:c9:4d:c9:53:48:6a:f8:9b:6b:e0:a3:16:18:2d:ec:86:
c3:dd:ee:11:fd:03:57:ce:f4:3f:ea:49:a1:1b:bc:86:85:25:
c0:25:1a:a1:7c:2c:ea:bb:d8:8d:64:d3:d8:40:7d:4d:59:6a:
a0:fa:d0:2c:24:03:ae:47:37:85:ea:a9:8e:2c:b5:d3:d3:d6:
7e:12:ff:a4:28:53:8a:a9:31:ca:8a:1a:73:26:7f:75:b8:f9:
15:53:f9:b4:33:94:fe:c2:9b:d0:bf:b1:50:29:40:be:f3:d2:
69:f0:97:e3:b1:0b:3a:59:69:56:62:de:15:49:cd:fe:1e:42:
e2:86:f3:bc:85:5f:4d:b1:2b:a7:3e:df:24:24:bf:12:5c:3d:
13:50:6c:22:ad:db:0c:0f:e6:d6:3a:1d:a7:9d:11:cb:55:ea:
d6:34:bf:a0:40:0b:40:23:b1:b4:8f:de:fe:c1:38:f9:b8:2b:
f3:a7:01:34:ce:0c:c2:1b:7b:9d:35:55:d9:6d:02:1d:7a:60:
f2:b0:d9:32:f4:70:b5:af:64:ab:aa:08:7e:71:7c:5b:e4:be:
72:9e:5b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:20:22 2025 by rpki-client