Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
File: qR_iZyyPHBKyetoPzLqnwhLL1xw.mft (raw, json)
Hash identifier: FDMHbeMxMIqO2ufJQ38RNHWrrmLWgJcFLgtkKd0dNCg=
Subject key identifier: F1:D1:AD:7F:C4:B9:E1:F0:65:C2:45:84:CD:F0:DB:B1:65:42:E9:AE
Authority key identifier: A9:1F:E2:67:2C:8F:1C:12:B2:7A:DA:0F:CC:BA:A7:C2:12:CB:D7:1C
Certificate issuer: /CN=a91fe2672c8f1c12b27ada0fccbaa7c212cbd71c
Certificate serial: 01964E9093D8F1957A7FF62AF3BBEA27EC60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 15:00:19 +0000
Manifest this update: Sat 19 Apr 2025 15:00:19 +0000
Manifest next update: Sun 20 Apr 2025 15:00:19 +0000
Files and hashes: 1: 2Q0kx85pwBzfIMwLp9ldarIpih0.roa (hash: D6p/IFbJlNokn2XAUVSHhwdlOMDmGJADmbqv1d/nsjg=)
2: qR_iZyyPHBKyetoPzLqnwhLL1xw.crl (hash: D6QaFHo3azeb5BQDU1QMQgsehOCKwb7N7XTYHXBr3zM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:90:93:d8:f1:95:7a:7f:f6:2a:f3:bb:ea:27:ec:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a91fe2672c8f1c12b27ada0fccbaa7c212cbd71c
Validity
Not Before: Apr 19 15:00:19 2025 GMT
Not After : Apr 20 15:00:19 2025 GMT
Subject: CN=f1d1ad7fc4b9e1f065c24584cdf0dbb16542e9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a1:63:24:0d:b7:79:5a:2f:fe:5d:5f:8b:2d:
c0:aa:bb:81:1e:2b:91:ab:2d:06:aa:ef:65:b7:d1:
10:0e:2f:06:45:7d:b5:98:fb:9a:08:10:f0:9b:c6:
27:c5:b2:70:e1:47:b9:d9:f7:21:0d:46:25:d8:ce:
cd:2b:7e:e1:8c:b7:7f:cc:bd:89:33:74:e9:df:c9:
58:89:f6:36:58:67:00:27:27:a2:a7:ab:f7:3b:6f:
75:c2:37:5a:3b:ef:fd:55:60:ce:10:05:2a:86:e2:
b0:38:21:87:b0:13:1a:1a:ac:f3:61:d6:d5:4d:73:
bd:b6:2d:fe:fb:12:3e:ba:c4:47:f8:9b:10:df:43:
f3:74:00:83:32:71:88:c4:bf:88:7a:bd:a3:56:0f:
d2:27:6e:f3:a6:a5:e7:1e:ab:62:7c:41:f1:30:02:
5d:bc:75:c5:a1:d3:1b:e2:19:d7:93:5b:b6:a8:5f:
6a:97:f8:5f:0f:ad:9b:ba:98:4e:31:d8:3a:32:61:
cd:54:72:a2:44:34:68:58:ac:31:bd:02:d6:b1:b7:
65:b2:60:f3:b4:65:47:aa:c3:c7:7d:1a:07:18:2e:
ac:0a:4c:85:5b:6b:b5:e1:99:9d:e5:d8:78:e3:15:
2e:43:e4:7f:e1:be:8c:ee:b3:34:f2:ce:b1:f9:42:
75:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D1:AD:7F:C4:B9:E1:F0:65:C2:45:84:CD:F0:DB:B1:65:42:E9:AE
X509v3 Authority Key Identifier:
keyid:A9:1F:E2:67:2C:8F:1C:12:B2:7A:DA:0F:CC:BA:A7:C2:12:CB:D7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f9:a7:82:af:87:0d:19:d6:4f:4e:5c:a0:d8:dc:a0:f9:98:
27:cf:da:aa:b6:66:ae:10:75:9d:5b:a2:74:bf:5b:6a:37:2f:
4e:5d:d7:0a:40:3d:d2:12:82:8a:51:e9:6c:fd:2b:a7:c8:2b:
b8:a6:cf:fc:14:a9:6d:50:28:00:e0:a7:ea:c9:11:e1:e5:ad:
ef:9b:0b:c5:89:1b:35:57:78:62:8e:c5:16:93:d1:c1:98:d7:
93:4e:6e:c3:7f:cb:d0:ca:8e:10:0b:8b:31:7d:20:db:0f:91:
cb:a0:84:d3:e5:97:7e:0e:4a:a9:4a:28:6c:a5:2b:5f:21:60:
4e:7d:82:fd:ff:6c:ed:0a:9e:20:bd:d1:54:f5:5d:2a:1a:52:
51:d3:dc:67:40:f7:ed:56:fc:46:03:0b:62:02:46:77:b6:04:
fa:8d:a1:86:7d:e5:43:b0:34:12:e1:d6:8d:f2:20:0d:6a:6c:
9b:50:31:f1:f4:c8:c8:fa:18:18:20:3a:82:c3:f1:28:5f:3a:
fe:64:70:6a:d4:59:5e:98:10:7f:d7:76:e7:98:47:9a:9a:ce:
cd:4a:ab:fc:8a:68:2f:66:66:90:c8:f0:ec:87:72:f5:49:0a:
82:aa:b3:1b:fb:d7:73:42:ed:d6:25:f7:5a:ac:fe:18:26:e0:
d4:1d:66:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:02:23 2025 by rpki-client