Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
File: QdELiOsk9iYtkxU2il0B4eCGDE4.mft (raw, json)
Hash identifier: xzwtRSx78qVeKcVZr/pB4s9klX2/gdxRcPZCfwYsweQ=
Subject key identifier: 6F:2D:1F:F9:C4:9B:9D:6B:90:3B:1D:65:9B:69:C7:4F:39:4F:F1:0E
Authority key identifier: 41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
Certificate issuer: /CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Certificate serial: 01960F444417FB4A1D0C0DD5727C1BCECE6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
Manifest number: 0AB0
Signing time: Mon 07 Apr 2025 08:00:54 +0000
Manifest this update: Mon 07 Apr 2025 08:00:54 +0000
Manifest next update: Tue 08 Apr 2025 08:00:54 +0000
Files and hashes: 1: MxIW_z7Ebidq95zbkkCpozAg-qo.roa (hash: Ne9BRTxSbvyD3v1mKUKjrJIdCst7ww6cgLtpKgmPXO4=)
2: QdELiOsk9iYtkxU2il0B4eCGDE4.crl (hash: vG6Qm+IFuLx6rY8c9fyN7tDeDS04wlEsgtHSfFJ0RzQ=)
3: iF0hWqV8nyrtwGMxvXkpeZV-Ad0.roa (hash: NsX4Tk5b/sJjbOHt4Xm/gMH0eUzDRvHxvl47C618GF4=)
4: pK_RWKvtbpfARxQqcIN51CNOVR4.roa (hash: gYB8+JoJ6UyQv4AugtpSBUDhjHrwgsXQ9hiZfsU43O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:44:44:17:fb:4a:1d:0c:0d:d5:72:7c:1b:ce:ce:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Validity
Not Before: Apr 7 08:00:54 2025 GMT
Not After : Apr 8 08:00:54 2025 GMT
Subject: CN=6f2d1ff9c49b9d6b903b1d659b69c74f394ff10e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5a:46:f9:81:68:08:d2:9a:6c:b9:18:ef:ef:
73:b5:be:3b:0b:85:7e:bd:58:20:10:2a:f6:d2:44:
0e:8f:bf:9f:16:85:03:e9:7d:86:39:48:9c:eb:7c:
2b:c0:ad:5b:1d:f9:b7:34:e7:d3:a0:86:dc:91:1b:
97:eb:d8:e8:bb:a7:5f:e7:95:7e:94:4f:af:da:4d:
db:69:e9:31:78:c5:38:f3:7c:73:14:f8:d1:0f:b6:
a4:20:66:9e:24:49:80:62:57:7f:8b:c6:98:f2:1d:
7d:8c:de:c3:3c:4e:9e:cc:4a:c8:0a:a1:dc:c5:e9:
d1:75:5d:a8:4e:d1:92:73:97:29:68:21:69:bb:28:
30:56:e9:53:0e:38:22:c6:6c:5f:b2:64:b1:e1:94:
e6:db:e8:fd:51:a0:d3:44:94:26:87:24:c0:fd:2a:
ce:e8:51:c9:58:fa:64:f7:b9:91:be:f1:f5:f0:81:
08:c5:1a:8a:c6:d1:4a:8e:57:d8:39:43:69:81:07:
81:80:7e:b1:a1:e2:84:42:7a:75:de:83:ab:62:fb:
eb:bf:ce:78:89:ea:5d:80:86:8d:95:d3:5d:c9:dc:
32:29:66:f8:6f:ba:e4:a6:4b:ee:3b:1c:df:7d:c1:
2f:32:aa:c3:6e:71:eb:75:ea:9b:93:df:ee:4a:b3:
e8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2D:1F:F9:C4:9B:9D:6B:90:3B:1D:65:9B:69:C7:4F:39:4F:F1:0E
X509v3 Authority Key Identifier:
keyid:41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:8f:b4:e4:3e:00:6a:65:64:0b:3d:98:a8:56:d6:fd:08:b9:
11:1d:52:ce:40:e7:bc:fc:8b:ae:31:98:bf:d0:57:12:4c:7c:
e6:d9:32:d5:8c:92:2d:a8:b7:87:ed:fa:d8:71:c7:40:4b:25:
48:36:8b:6d:da:22:03:2d:b9:49:5d:71:8e:f2:07:46:be:c6:
de:83:81:49:b8:7e:5f:73:2c:b6:be:5f:a4:56:d0:e1:d0:dc:
5b:ce:64:d4:05:b1:89:d1:e0:8f:40:76:80:f2:71:4e:3a:6d:
33:a8:c6:b1:3d:b1:e3:71:75:23:58:7e:f2:a0:b0:61:76:f5:
d2:e4:d0:8e:5d:9b:f8:db:89:37:d4:28:22:5b:b3:01:de:c1:
b0:ee:72:68:08:ea:78:81:8f:02:b1:cc:86:f3:79:59:1f:ae:
a8:98:c5:de:1b:d6:5c:74:b5:5f:0a:de:52:d5:33:2d:6e:4f:
27:4f:4d:22:71:84:c4:64:a7:28:25:4c:8e:83:de:c6:d0:01:
64:3c:1f:ff:f8:94:9b:29:69:1c:f5:bf:a6:7a:c5:18:5e:1b:
a9:8c:78:55:5b:49:36:01:04:bb:96:44:d9:25:76:09:a9:6c:
85:e3:ce:b8:3f:b3:3b:4b:cd:41:0d:a9:19:53:94:20:e2:79:
43:d6:75:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:37:37 2025 by rpki-client