Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
File: rQVANtrTLReoyRbcLfuzzoo2RSw.mft (raw, json)
Hash identifier: Xuxjo0UaEkfkpwXvGsVIEJV7wjkxem7FDgUD/1ZYGr0=
Subject key identifier: A9:7A:FE:26:DD:E7:1C:CD:70:5B:28:03:5B:5B:B4:33:E0:56:59:FD
Authority key identifier: AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
Certificate issuer: /CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
Certificate serial: 01964F6D450F70262D7A5C766D0CF2E14E3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 19:01:23 +0000
Manifest this update: Sat 19 Apr 2025 19:01:23 +0000
Manifest next update: Sun 20 Apr 2025 19:01:23 +0000
Files and hashes: 1: V1VyWKK4g97snYUaOwHJAFP_MdQ.roa (hash: IhL8EIfC6sBImzV34O7y77KJDpidcr5em23zVj3USMQ=)
2: rQVANtrTLReoyRbcLfuzzoo2RSw.crl (hash: sWIU/cKuOgsUm+0BQbl36jdbLyLP1ByB24F7wmNwktY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:45:0f:70:26:2d:7a:5c:76:6d:0c:f2:e1:4e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
Validity
Not Before: Apr 19 19:01:23 2025 GMT
Not After : Apr 20 19:01:23 2025 GMT
Subject: CN=a97afe26dde71ccd705b28035b5bb433e05659fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d6:70:7b:69:32:66:f5:0a:33:d4:1f:2f:96:
11:54:13:9c:fe:ef:cf:11:1f:0a:ea:3d:43:aa:13:
0b:62:41:cc:a3:9a:f4:32:2a:ea:b1:e3:ba:b6:b5:
7a:bb:35:36:35:29:18:b4:c5:d2:74:d1:68:e4:b9:
ba:77:e1:75:d1:62:ec:4c:5e:82:8d:54:5e:a7:cb:
a5:82:29:11:0e:3e:d3:19:eb:a0:29:c6:cc:ef:e4:
aa:34:ec:e9:95:66:d9:e5:40:f1:bf:b1:26:b4:12:
aa:c0:0c:e6:80:c9:12:c8:66:fa:97:f8:85:e5:61:
49:d0:79:25:96:00:fa:9e:fe:66:33:e5:68:d4:35:
ed:e1:87:cf:80:8c:27:55:0c:c6:5b:f1:a8:0e:47:
ea:f2:fd:51:51:23:9b:96:5d:ae:46:bc:88:88:c9:
62:48:4d:6e:ce:9a:9f:2e:91:4c:89:d5:ae:29:46:
ad:e9:b7:71:d1:fb:e7:f0:c8:4a:14:54:2d:17:8a:
ce:f6:e5:3c:ed:2a:76:57:5d:e5:0f:cd:c7:c2:52:
93:74:9c:ec:f3:8d:20:0e:6e:01:f6:c7:10:5e:5e:
5f:9e:dd:da:43:76:3e:65:a8:20:90:4a:0a:4a:7c:
68:4d:a6:e2:b9:9e:76:83:17:62:03:8f:ad:ae:c0:
9e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7A:FE:26:DD:E7:1C:CD:70:5B:28:03:5B:5B:B4:33:E0:56:59:FD
X509v3 Authority Key Identifier:
keyid:AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:8a:58:d2:78:70:0f:27:6a:b2:a1:71:a6:c8:8f:92:44:9c:
11:b3:73:fa:0a:38:2f:82:08:b5:e8:13:70:53:41:9c:98:e4:
7f:55:16:32:17:7c:ff:a9:5c:9d:ae:9a:52:5d:71:72:66:a0:
f6:53:dd:07:3d:16:01:c4:8c:78:65:18:88:03:6e:81:5f:37:
50:5b:d4:0d:16:94:87:28:53:e1:35:80:20:08:e0:2d:cb:69:
16:80:ba:52:fe:1f:fb:21:d0:d2:6d:c7:26:f3:c4:40:c3:a2:
1f:e2:fb:23:bc:97:eb:2a:10:e1:e9:7a:ba:2e:e3:45:43:4a:
3e:21:c4:80:e8:dc:15:d6:a1:b2:56:65:6b:ec:9c:c9:46:36:
ea:d8:f0:58:49:ca:15:e4:2f:ad:29:d7:e5:3f:69:9f:f6:b5:
f0:62:5c:53:ae:94:13:2a:ea:94:9d:98:85:c3:f8:c2:b9:74:
ab:f2:4d:34:35:78:f7:98:07:f7:04:02:c3:1b:20:f4:53:0a:
4f:98:9b:13:1c:23:6c:42:22:17:d1:ab:88:b4:c6:a7:c4:fd:
3f:42:40:70:70:c9:9d:98:94:79:cc:09:86:12:1a:fc:2c:66:
28:80:8a:3c:c3:3d:cb:2f:57:d6:8f:71:53:b9:bf:69:ae:c4:
fb:f6:2f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 01:57:48 2025 by rpki-client