Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
File: qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft (raw, json)
Hash identifier: Gg9QGi+1OA8J4OMd2mtvXraGrtSFjBe5zPu/SQEm9d0=
Subject key identifier: 7C:8B:74:EF:F7:A3:6A:D8:5C:72:4F:D1:E9:BF:4E:24:28:F5:0D:6F
Authority key identifier: A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B
Certificate issuer: /CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
Certificate serial: 0196428CEBD7436D8401D7BDDB15EE859FEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
Manifest number: 14F9
Signing time: Thu 17 Apr 2025 07:00:53 +0000
Manifest this update: Thu 17 Apr 2025 07:00:53 +0000
Manifest next update: Fri 18 Apr 2025 07:00:53 +0000
Files and hashes: 1: 4ILvo6vCDj985eseCLehs-ym3Oc.roa (hash: c0boeQmjbbcqipQjA8ZQV3SqlXHr319tM1iaSTDQg/Q=)
2: qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl (hash: qqkdzduIh5wqeCkodpb5r3FRftRw4og6+IijdQU8Da0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:8c:eb:d7:43:6d:84:01:d7:bd:db:15:ee:85:9f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
Validity
Not Before: Apr 17 07:00:53 2025 GMT
Not After : Apr 18 07:00:53 2025 GMT
Subject: CN=7c8b74eff7a36ad85c724fd1e9bf4e2428f50d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:de:e6:6b:2d:ad:7b:0a:58:84:75:b4:1e:e2:
1c:23:b7:65:c0:5e:fa:c5:cc:d8:89:4b:0d:10:63:
22:a3:df:51:da:1d:73:65:fe:a4:04:c7:09:90:4b:
a0:da:21:92:39:d0:2a:ce:6b:72:fd:d9:56:d2:68:
37:be:c1:1b:25:21:83:87:55:2c:73:0a:5d:91:44:
09:9c:30:c1:09:6c:d1:c8:42:b0:2c:96:7b:57:f4:
86:21:77:c8:82:bd:c5:c6:2b:d4:4c:26:9a:d1:30:
98:ab:b2:a9:7c:1f:38:95:d1:a6:15:ea:5a:91:34:
84:7d:04:d8:92:52:db:5c:0f:f3:39:26:d1:6d:76:
b2:2b:c9:29:47:d0:98:ec:69:8c:23:d5:b4:23:de:
9b:ef:76:6e:18:ad:a5:07:38:33:df:67:22:61:eb:
09:8f:e6:28:91:74:bd:62:93:68:a9:b8:f2:88:b6:
d7:be:03:d1:78:b9:22:eb:1a:7f:28:a3:d3:66:00:
4b:0a:30:4a:c3:13:34:34:b7:93:ca:a2:bd:a3:7e:
e2:55:97:e1:6c:0e:fb:ce:52:9b:a7:9d:f3:4b:3f:
fa:4d:05:1c:85:67:da:15:ec:2d:b2:c9:6a:28:58:
d2:5b:62:81:df:b1:03:79:bd:13:58:1c:86:0a:38:
31:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8B:74:EF:F7:A3:6A:D8:5C:72:4F:D1:E9:BF:4E:24:28:F5:0D:6F
X509v3 Authority Key Identifier:
keyid:A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:cb:60:22:e4:d8:a7:e1:81:d4:71:51:15:8c:55:0a:e8:f3:
99:64:8f:d4:21:51:7b:f2:04:6e:8b:b7:ae:62:45:ad:87:cd:
a6:1e:0e:f8:f7:47:18:ee:2f:74:1b:40:1a:56:01:30:ac:58:
4a:f4:77:2b:39:62:97:f7:37:41:5a:e4:d5:9e:11:c9:66:c5:
7a:de:36:3f:71:48:c2:33:f6:77:25:59:d5:a2:0c:c9:25:7d:
0d:5b:34:8e:c1:32:d1:3c:c5:a0:39:42:39:cc:2d:a3:45:2e:
51:8c:74:f8:6f:13:65:51:67:cb:3d:2c:2c:40:34:75:ff:a4:
b3:70:91:19:a8:f4:1d:75:ff:67:e6:7c:fa:f7:2e:d3:11:01:
2a:e5:e0:76:9d:5d:27:c2:f0:34:c1:ad:22:f2:83:fd:94:50:
ec:57:7e:6d:4f:f7:43:b1:17:db:f7:77:26:59:a3:ca:65:d2:
d3:ee:cb:0f:a2:de:4f:fd:5e:a3:d0:fe:86:8c:95:97:ce:09:
18:e9:4f:2a:f9:7a:e2:1b:31:d3:82:27:b7:ac:27:36:50:9d:
e1:af:3b:3f:f4:83:e8:45:a4:30:d7:ee:33:81:82:37:ca:aa:
4e:6c:0a:8d:30:d8:42:87:bc:30:10:35:6c:81:d6:4e:e7:41:
9a:14:b7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 11:24:34 2025 by rpki-client