Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
File: qfxWMNV7GXHzolbtbZg6-tayjXU.mft (raw, json)
Hash identifier: 9KID30WnM2u+HiKcXTtJ8V1Ag62IHM/CLV7ouy0p67w=
Subject key identifier: F4:FA:F5:83:2C:54:86:58:7F:DC:8C:B6:39:F6:F7:1C:B3:70:9E:31
Authority key identifier: A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
Certificate issuer: /CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Certificate serial: 019643D6C625A237F118A70F94D32AACDCDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
Manifest number: 14F9
Signing time: Thu 17 Apr 2025 13:01:10 +0000
Manifest this update: Thu 17 Apr 2025 13:01:10 +0000
Manifest next update: Fri 18 Apr 2025 13:01:10 +0000
Files and hashes: 1: GdTMSBHmMXNMZFzwt5_uvXtdYsM.roa (hash: /RIp+uP4i74bIeQs1XWyli9bmZacqyl6MLZjDPeo5VM=)
2: qfxWMNV7GXHzolbtbZg6-tayjXU.crl (hash: MWl8KK3D9ESOJ6A5ERKcqin5mq9Azdj0QaCg9j18DV8=)
3: xBlZNvgMRnCf6UrKRvQ5pkUd7xU.roa (hash: i1uwfhxsD9mnwkgjUW+Sjt1kQC/b/5iVv+3Mpx4LXks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:c6:25:a2:37:f1:18:a7:0f:94:d3:2a:ac:dc:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Validity
Not Before: Apr 17 13:01:10 2025 GMT
Not After : Apr 18 13:01:10 2025 GMT
Subject: CN=f4faf5832c5486587fdc8cb639f6f71cb3709e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:22:a9:47:d0:03:9c:a8:06:c2:40:07:25:ce:
5d:11:7d:b0:8b:72:ea:99:74:bc:6c:d5:fb:cc:6f:
33:28:00:2b:7d:74:21:3b:e4:95:87:21:d9:30:94:
12:28:d4:14:a6:84:30:64:08:50:8f:70:97:73:ab:
37:35:8c:5a:ac:6c:d7:67:f8:bd:09:93:53:31:e5:
59:7b:5c:ef:35:67:fc:a5:12:0b:2b:f9:ed:86:c2:
be:6c:e6:7c:02:59:58:6a:4e:38:06:63:a6:ab:40:
3b:19:f3:ff:8b:17:ba:0a:36:78:08:b0:a5:fc:31:
54:a9:3d:c6:35:b8:c1:23:76:e8:5b:a2:17:40:86:
20:d7:1d:29:2e:82:b5:94:8c:c5:c6:02:03:ec:fa:
1f:d4:55:3d:a3:90:cc:24:0a:b4:48:28:b5:4f:61:
37:8b:96:a5:56:49:9a:47:45:a0:7f:c1:8a:9c:3e:
5c:92:2b:3e:ea:7a:0d:9e:f2:ba:0b:ea:5f:a8:c7:
58:9f:cc:3e:db:57:1a:4f:9b:33:e1:21:e7:a6:ff:
49:db:c6:01:2f:76:dd:a4:0f:60:37:cf:d9:38:d3:
ba:5e:06:25:68:d4:7a:44:aa:2b:95:a7:a5:ab:5d:
67:b5:78:96:a0:2d:19:a1:ee:84:08:7e:69:b5:65:
e7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FA:F5:83:2C:54:86:58:7F:DC:8C:B6:39:F6:F7:1C:B3:70:9E:31
X509v3 Authority Key Identifier:
keyid:A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:91:ed:bd:7b:8f:b1:58:9e:b3:29:ba:26:20:19:37:74:83:
89:02:6c:5e:ee:8a:d0:ef:7c:35:e9:10:51:f1:ec:3f:e1:e3:
d5:1d:a4:33:cd:18:e6:fb:59:3f:11:ee:6e:2e:d1:48:d7:69:
c0:b6:81:5e:97:17:ce:b5:a7:1e:25:1a:8e:25:d7:22:e5:3b:
7f:74:a0:e2:33:6f:ca:96:5a:c8:b5:d6:a0:8e:f6:b1:f8:f3:
04:73:45:63:86:b5:ec:81:29:19:4c:3e:ff:76:46:3f:16:75:
2c:88:b8:fb:e6:6a:38:ce:dd:49:72:a7:9f:5c:16:5c:05:54:
70:45:4a:40:fb:f6:15:ab:49:06:80:a8:f9:fb:32:21:2c:02:
d0:c8:81:b9:1f:b5:07:ca:e6:7d:b4:37:7c:ce:aa:56:1f:2f:
b7:c7:34:b4:1b:0f:4c:e8:df:24:b7:be:c0:f4:78:6a:46:2c:
dd:fb:17:1b:7a:17:f0:8c:9b:3a:c1:bb:aa:78:c3:fa:67:1d:
7d:38:65:7f:f3:8d:54:12:3b:62:35:11:7c:4f:60:ae:36:5e:
16:af:a2:40:7c:85:df:f6:d6:72:40:f3:f4:0b:b4:1c:f1:da:
08:45:09:c5:45:23:09:05:19:f2:02:ce:69:43:7c:e8:19:c1:
42:cb:90:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:00:53 2025 by rpki-client