
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft
File: qvpFpixehQq5yHJqWam_qZLTcbI.mft (raw, json)
Hash identifier: 4efxNl9m8OyIeZb2x/gwV1I+jP8jGd6PMPkbi4N1dRM=
Subject key identifier: F6:72:50:8D:9F:09:7C:6C:39:8C:0C:27:98:3F:16:97:2A:7D:EB:B6
Authority key identifier: AA:FA:45:A6:2C:5E:85:0A:B9:C8:72:6A:59:A9:BF:A9:92:D3:71:B2
Certificate issuer: /CN=aafa45a62c5e850ab9c8726a59a9bfa992d371b2
Certificate serial: 019636F69905972E81C46E8757CB44B258BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft
Manifest number: 14F1
Signing time: Tue 15 Apr 2025 01:00:52 +0000
Manifest this update: Tue 15 Apr 2025 01:00:52 +0000
Manifest next update: Wed 16 Apr 2025 01:00:52 +0000
Files and hashes: 1: FUCX9OW5znsVvJDFK2DPDP4kaXw.roa (hash: 7Yn8lQlQu+p9EOSUqkrA7N+uYFCRbQJhJNvyuVgdZVs=)
2: qvpFpixehQq5yHJqWam_qZLTcbI.crl (hash: +RzI9NcDRUSw5VIjuHLhrsKq8wjhapm1lCI2Ty6xpdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:36:f6:99:05:97:2e:81:c4:6e:87:57:cb:44:b2:58:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafa45a62c5e850ab9c8726a59a9bfa992d371b2
Validity
Not Before: Apr 15 01:00:52 2025 GMT
Not After : Apr 16 01:00:52 2025 GMT
Subject: CN=f672508d9f097c6c398c0c27983f16972a7debb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fb:be:a4:8e:52:d2:10:54:3e:ac:f7:57:e1:
9c:5e:fe:49:ab:43:ca:2a:50:6b:f3:24:80:8f:e1:
52:26:7b:92:b7:20:6f:1c:d8:3e:ac:e7:30:ff:fc:
53:24:2e:27:37:fd:f2:90:57:90:9d:cd:5f:5c:3c:
a3:e7:ff:bf:18:07:12:7e:a2:4a:99:26:14:1f:89:
7e:44:e9:73:c7:6c:bc:35:0d:f5:86:18:2b:cf:48:
2a:97:31:3e:e1:e3:31:92:a8:70:00:8d:e2:33:fd:
2f:0e:89:e8:a5:35:fc:8d:71:7a:3c:84:cb:d9:67:
a0:2e:2b:fb:b9:ea:e9:8f:6d:47:c5:2d:40:d9:56:
08:0e:44:af:6c:14:4a:d1:73:ed:e4:d9:9e:f2:d5:
1d:bf:64:cc:db:1b:cb:42:3e:74:6c:bd:dd:c3:83:
dc:de:c8:aa:f7:97:70:e5:d0:17:70:60:c3:cf:60:
3b:f1:bd:69:4c:0b:3b:69:80:65:bf:2d:ab:fb:78:
4a:2d:75:eb:b3:1e:33:fb:df:6a:d9:70:d6:30:2b:
fc:8b:13:c7:7e:27:16:64:30:eb:8e:28:ed:16:ce:
19:26:04:6c:3d:87:7e:b8:52:1c:dc:3d:1f:1d:74:
5c:44:9f:50:9e:b4:91:2b:15:74:60:95:5b:7e:91:
fb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:72:50:8D:9F:09:7C:6C:39:8C:0C:27:98:3F:16:97:2A:7D:EB:B6
X509v3 Authority Key Identifier:
keyid:AA:FA:45:A6:2C:5E:85:0A:B9:C8:72:6A:59:A9:BF:A9:92:D3:71:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:83:1f:b7:a0:26:53:10:b1:0d:2c:2e:9b:4a:ec:e7:13:21:
96:72:f1:ff:3f:46:d5:da:68:41:f9:85:ab:76:35:f7:39:45:
e3:d4:56:bd:3f:1a:fa:bf:1a:77:fc:49:0e:59:03:33:63:0f:
51:04:d2:36:8a:7c:87:29:be:95:72:42:c1:c8:d0:48:7c:9a:
7b:f5:16:0b:54:15:58:ff:70:e4:b1:ee:3e:50:fb:50:04:b9:
20:75:08:42:fe:ee:18:f0:82:9c:a6:36:d9:4f:2a:e5:52:e7:
6d:69:c3:c0:4e:a9:9e:bc:4c:f3:ea:c8:7f:51:64:12:48:81:
81:2f:00:50:d9:09:82:25:b6:d5:58:2c:9a:bb:a7:cd:fe:c4:
bb:4c:fb:76:f2:30:a2:92:5c:09:14:8c:66:7b:69:1a:75:1c:
66:fc:93:20:67:12:c8:3f:f7:d7:dd:a5:e3:4f:7e:ee:aa:04:
ae:ae:d0:17:5a:8b:ff:8d:45:62:97:eb:f7:67:99:44:cd:09:
2e:bc:41:ca:23:b8:bd:b4:69:80:8f:e2:44:09:09:81:38:48:
c9:66:ea:ea:32:5d:08:9c:47:1e:e6:5f:88:d5:8a:06:41:e1:
1c:50:5a:e9:e3:3b:ac:31:a6:19:78:2d:65:a9:7a:5e:98:ad:
24:6f:95:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:40:25 2025 by rpki-client