Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/qvHI3UCIS0nwiAZNPBANKhiahHQ.mft
File: qvHI3UCIS0nwiAZNPBANKhiahHQ.mft (raw, json)
Hash identifier: rQ+hxCPJYvAMwybvL0ektpb+fRc0kQKxKczv2CJd44I=
Subject key identifier: 85:41:91:AE:2B:06:C6:3A:94:16:6B:33:54:F1:B3:24:44:DC:F6:0D
Authority key identifier: AA:F1:C8:DD:40:88:4B:49:F0:88:06:4D:3C:10:0D:2A:18:9A:84:74
Certificate issuer: /CN=aaf1c8dd40884b49f088064d3c100d2a189a8474
Certificate serial: 01965C8338D75FC1C641DF40749208BDC403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvHI3UCIS0nwiAZNPBANKhiahHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/qvHI3UCIS0nwiAZNPBANKhiahHQ.mft
Manifest number: 015E
Signing time: Tue 22 Apr 2025 08:00:25 +0000
Manifest this update: Tue 22 Apr 2025 08:00:25 +0000
Manifest next update: Wed 23 Apr 2025 08:00:25 +0000
Files and hashes: 1: UGApytPJPEIPFbzs4L0oU_KIdHM.roa (hash: cf5ZtJTmEf4eW9FhhtNmIkoS04da9/P7WQkJtlas3+0=)
2: qvHI3UCIS0nwiAZNPBANKhiahHQ.crl (hash: +wMqds2zsfpesqXT28gr8NJ6lxqbIaqRPoCuMWrPxJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/qvHI3UCIS0nwiAZNPBANKhiahHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/qvHI3UCIS0nwiAZNPBANKhiahHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvHI3UCIS0nwiAZNPBANKhiahHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:83:38:d7:5f:c1:c6:41:df:40:74:92:08:bd:c4:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf1c8dd40884b49f088064d3c100d2a189a8474
Validity
Not Before: Apr 22 08:00:25 2025 GMT
Not After : Apr 23 08:00:25 2025 GMT
Subject: CN=854191ae2b06c63a94166b3354f1b32444dcf60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a2:d1:e4:0d:fa:05:c0:80:eb:5b:4c:e6:10:
52:cc:80:d8:cc:10:22:69:d2:01:a1:a8:f2:33:20:
49:84:3f:1c:ba:b2:07:d3:1e:b9:1d:ab:53:36:15:
bb:dc:fb:2f:8f:37:be:71:80:38:5f:88:da:b1:dd:
02:dd:dc:00:cf:6f:53:72:a2:31:9a:ff:9b:79:f5:
c2:77:43:8d:d6:c5:30:64:38:14:c4:dc:52:7b:87:
4e:74:8c:7b:5e:de:61:04:95:d6:de:fc:0a:dc:df:
4d:2d:b3:c2:40:f2:73:14:f8:42:55:ba:9b:11:f5:
f0:38:6b:24:b7:ed:dd:84:df:04:75:94:88:c3:f3:
d1:32:53:3b:03:f9:c7:e7:df:38:e7:89:a0:6d:09:
01:f7:1c:f2:b7:36:00:39:fe:56:09:e8:c3:22:98:
bf:95:97:19:6c:4d:ee:34:d9:4d:e1:8c:f5:ca:18:
86:61:9a:85:97:48:2a:64:3d:ed:aa:b9:50:b3:bc:
32:0c:31:bc:2a:84:d1:01:32:03:ff:54:e0:ff:c3:
71:5b:2d:e7:2b:f9:6e:1a:64:69:67:8e:a6:06:e8:
99:7a:a1:57:b7:d8:43:d9:94:5e:e4:23:a5:77:c9:
8f:73:cd:ed:45:57:9b:47:3b:99:42:02:6e:ba:d7:
1d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:41:91:AE:2B:06:C6:3A:94:16:6B:33:54:F1:B3:24:44:DC:F6:0D
X509v3 Authority Key Identifier:
keyid:AA:F1:C8:DD:40:88:4B:49:F0:88:06:4D:3C:10:0D:2A:18:9A:84:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvHI3UCIS0nwiAZNPBANKhiahHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/qvHI3UCIS0nwiAZNPBANKhiahHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/qvHI3UCIS0nwiAZNPBANKhiahHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8f:07:0e:5d:0d:0d:2a:e9:f9:37:fa:0a:5a:1d:85:8e:8b:
c3:2e:14:8f:af:ca:89:5a:51:d0:e8:ea:66:10:68:a1:c6:86:
a0:63:b9:29:0c:70:c2:59:98:c9:c1:d5:f5:a2:79:dd:72:8e:
a0:5b:5c:25:e3:de:d7:0e:90:75:84:27:3b:7c:67:e6:88:3a:
9b:8c:fa:07:d7:9e:d7:80:a7:ec:cb:9e:57:11:10:56:af:80:
6c:b6:ad:57:01:65:02:83:57:ff:08:58:e2:20:1f:2f:42:74:
e5:37:0c:37:f7:0d:a5:9c:fe:9a:3f:51:c3:9b:da:26:a6:ea:
bd:aa:0a:43:25:05:79:dd:11:6d:a7:c2:4d:d7:f6:90:b2:ab:
69:f5:00:0e:82:c2:4a:77:e1:d3:72:80:21:2b:fd:00:e1:89:
c8:7f:ae:49:4e:0b:de:31:f7:ea:96:29:e4:6b:a8:46:51:cd:
a1:96:58:11:0b:eb:3d:f6:df:f7:35:28:df:b2:bc:7b:fc:b7:
55:62:cc:66:42:5e:43:28:92:10:05:8d:74:ed:79:0d:85:01:
7d:fc:d8:20:18:42:65:64:eb:00:d0:e4:aa:8a:47:11:59:26:
85:39:b7:24:17:4e:62:cb:5b:56:ee:be:c5:75:c8:8a:fa:7e:
d0:80:f9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:26:41 2025 by rpki-client