
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
File: Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft (raw, json)
Hash identifier: veLrhvXwsqty9+VXiXgVl2fMqVq839mH2XG3uQqveyU=
Subject key identifier: E1:22:ED:34:4D:97:CD:3F:51:3B:81:2A:F8:58:AB:3E:20:31:37:82
Authority key identifier: 41:FE:6D:01:02:99:8C:38:6F:8D:85:6F:A5:F9:1D:7A:D3:AB:4D:77
Certificate issuer: /CN=41fe6d0102998c386f8d856fa5f91d7ad3ab4d77
Certificate serial: 01965B39A10DD4BD47DB5B4DD1B7EB9412D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qf5tAQKZjDhvjYVvpfkdetOrTXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
Manifest number: 0AD5
Signing time: Tue 22 Apr 2025 02:00:25 +0000
Manifest this update: Tue 22 Apr 2025 02:00:25 +0000
Manifest next update: Wed 23 Apr 2025 02:00:25 +0000
Files and hashes: 1: 9DaFft1ZRBebRPooZGGkOPjqAbQ.roa (hash: lYC82jjgh3RxcDkcuO3IXX6eKV+DE4TIh12Xui9zOW4=)
2: Qf5tAQKZjDhvjYVvpfkdetOrTXc.crl (hash: xeC+iVZhXlaiCz0PLwjmLseEB6vROej/8zomw0Xw9Cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qf5tAQKZjDhvjYVvpfkdetOrTXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:39:a1:0d:d4:bd:47:db:5b:4d:d1:b7:eb:94:12:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fe6d0102998c386f8d856fa5f91d7ad3ab4d77
Validity
Not Before: Apr 22 02:00:25 2025 GMT
Not After : Apr 23 02:00:25 2025 GMT
Subject: CN=e122ed344d97cd3f513b812af858ab3e20313782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b3:15:b8:59:18:bb:29:a3:93:ce:10:ad:12:
65:b5:bf:c9:33:be:c9:58:b0:94:05:5d:de:5f:87:
b2:3b:1c:15:2d:bc:e4:66:db:ba:d8:31:5b:ac:3e:
29:95:bf:3b:10:ff:ef:bb:0a:6a:3a:13:32:f1:8c:
ab:2a:34:e3:7d:cc:6d:d1:ed:da:9f:c4:f1:31:ae:
a5:35:91:f7:1e:42:fe:37:66:ae:e5:d0:c4:21:9f:
f8:86:e0:b9:a2:62:1e:c4:61:1f:9d:02:ce:3f:62:
bc:a7:3f:5f:26:a0:98:fb:ee:20:31:4f:ad:20:5b:
38:2c:97:a8:5c:9e:ce:b0:2c:0e:03:6a:1a:1a:01:
f1:c0:0b:1e:5b:c9:0d:2d:ca:5f:dc:f9:78:8d:ac:
0b:25:ce:83:86:50:72:65:9d:86:d1:fc:9c:66:8b:
00:d8:4d:a4:47:c4:df:5c:3e:33:79:d9:e1:68:31:
57:70:dc:57:b0:98:ac:9e:6e:10:6b:ce:f4:9c:2c:
01:da:9b:69:03:c8:a1:d8:bb:c4:4e:81:89:ce:59:
87:08:c2:f3:57:1a:fd:0d:c2:1f:c0:7c:de:44:59:
b3:f6:ea:59:5d:8c:39:e6:e5:5a:27:00:34:ee:7f:
8b:7b:56:16:0d:60:56:b2:50:b3:57:2d:a0:67:2c:
7b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:22:ED:34:4D:97:CD:3F:51:3B:81:2A:F8:58:AB:3E:20:31:37:82
X509v3 Authority Key Identifier:
keyid:41:FE:6D:01:02:99:8C:38:6F:8D:85:6F:A5:F9:1D:7A:D3:AB:4D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qf5tAQKZjDhvjYVvpfkdetOrTXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:18:e9:71:37:5d:bb:e1:31:d9:f0:0e:68:a0:1b:e7:2b:9e:
9f:cb:34:99:5d:c6:9f:d2:2f:b0:7c:90:9c:fd:bf:ba:da:af:
17:a2:6e:92:28:3e:02:2e:72:f9:08:88:e8:8a:0a:d2:66:3d:
cb:73:5e:d0:dd:72:fe:68:84:5a:37:53:a0:e2:7c:56:7a:01:
f6:c4:a2:07:da:be:db:77:03:b6:ea:1e:ed:50:91:59:75:3a:
5c:29:6a:da:86:a7:9c:dc:8f:9f:7d:37:cc:9c:2d:45:7a:00:
b7:71:33:7c:82:e6:30:66:e9:af:0f:32:c9:be:a5:87:a0:a8:
2b:c5:53:68:13:17:8e:3c:f0:96:04:57:53:80:bb:e2:85:59:
94:c4:d7:6b:3c:63:18:a6:6f:37:bd:74:1e:15:75:0c:92:8b:
65:95:01:2e:f1:43:e0:0f:5f:23:16:67:a4:d7:7d:46:08:0e:
8b:37:a6:8f:48:c5:fa:1d:1b:89:8e:cd:40:45:49:50:84:8c:
3b:da:c0:9b:73:23:f0:0e:48:49:06:ce:67:d6:1f:87:1b:76:
31:82:0e:85:d9:7e:2b:58:07:1c:5a:76:c0:94:dd:58:2a:dc:
04:b8:61:cc:e2:6a:ea:89:c3:78:71:2c:e0:fc:61:d7:d7:2f:
c5:e8:90:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:27:09 2025 by rpki-client