Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft
File: QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft (raw, json)
Hash identifier: plUzevNyNLhgmmPMBNODMLu1w/YG3t6xhvnfMvPgqQY=
Subject key identifier: 83:8D:31:B3:AD:DA:6F:22:6E:9A:86:BB:A5:02:21:77:CC:10:D9:3D
Authority key identifier: 42:1B:4C:D4:0B:AE:47:D4:8F:51:C9:CC:CC:60:7C:CE:57:CE:00:F7
Certificate issuer: /CN=421b4cd40bae47d48f51c9cccc607cce57ce00f7
Certificate serial: 01964556A00501FF1857001E0C0A9720363D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhtM1AuuR9SPUcnMzGB8zlfOAPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft
Manifest number: 14F5
Signing time: Thu 17 Apr 2025 20:00:26 +0000
Manifest this update: Thu 17 Apr 2025 20:00:26 +0000
Manifest next update: Fri 18 Apr 2025 20:00:26 +0000
Files and hashes: 1: QhtM1AuuR9SPUcnMzGB8zlfOAPc.crl (hash: AqCadui72mrWOKqMYp7tDSj0H3YfTnq7cpBirmlgZqU=)
2: rjvci4lVGCr57ADE7C3M4Mib4mk.roa (hash: yRKI8JSBUthmJegOInkpPYFyfDjZ1t7SRsTNJhUbFjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhtM1AuuR9SPUcnMzGB8zlfOAPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:56:a0:05:01:ff:18:57:00:1e:0c:0a:97:20:36:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421b4cd40bae47d48f51c9cccc607cce57ce00f7
Validity
Not Before: Apr 17 20:00:26 2025 GMT
Not After : Apr 18 20:00:26 2025 GMT
Subject: CN=838d31b3adda6f226e9a86bba5022177cc10d93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f4:7b:14:9c:33:f8:05:12:50:20:31:d8:e0:
2c:50:46:a6:c4:4d:8a:9a:4b:b5:f9:0e:4b:99:9f:
5b:72:e8:f8:cf:a1:59:ed:29:c2:ac:55:05:f8:ff:
5e:9e:5e:86:d2:06:f5:70:27:59:d9:a5:70:4a:ae:
cf:48:d7:8d:95:2f:3e:e7:0b:9f:25:fe:03:2e:f9:
1f:a1:a0:4e:0a:7f:52:1e:51:4d:d9:6c:2a:6f:b8:
34:69:b7:3a:68:82:80:8f:5a:b1:93:17:20:02:c6:
b3:bd:f1:46:7e:73:1e:7c:ea:56:1e:4c:17:04:05:
f0:cc:0e:21:ac:84:c8:21:e3:1c:9e:38:90:2a:b1:
81:9c:56:02:cf:ae:09:64:d4:25:a2:b2:1c:a4:3c:
b8:e5:25:41:06:50:91:7f:ce:c6:63:f9:84:a6:c4:
2b:df:6a:df:ef:f3:d7:75:f0:fc:59:c1:c5:31:53:
e4:dd:e5:86:1b:ca:66:a3:54:f3:e0:7e:cd:21:47:
a2:4c:ba:33:f2:d9:4f:b8:fb:d9:3a:37:0f:8e:bb:
67:cc:48:ab:c9:ad:42:e0:35:a3:d2:05:d2:3b:c8:
57:0d:36:07:59:a0:d7:1f:2d:8c:2e:f8:d1:f7:a8:
de:ec:a5:70:52:78:ed:ef:ee:36:66:f5:58:46:10:
b4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8D:31:B3:AD:DA:6F:22:6E:9A:86:BB:A5:02:21:77:CC:10:D9:3D
X509v3 Authority Key Identifier:
keyid:42:1B:4C:D4:0B:AE:47:D4:8F:51:C9:CC:CC:60:7C:CE:57:CE:00:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhtM1AuuR9SPUcnMzGB8zlfOAPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:1d:1a:27:b5:ef:c4:9c:69:21:a9:1b:57:98:79:2e:d3:b3:
7d:ce:fc:26:92:d1:18:9e:b6:0c:93:82:cb:5a:86:2c:09:db:
a2:27:06:16:6a:9a:b9:b5:1a:e8:2e:36:33:61:7c:ef:b5:db:
d8:ca:78:c6:4f:53:03:4d:fb:46:22:f0:86:51:e1:9b:d4:19:
c1:d4:03:98:6f:99:16:0f:ad:b8:cc:1b:64:a1:be:28:3b:f7:
39:e9:cb:72:1c:c9:d9:ef:f6:0b:74:1a:64:5b:42:ca:1c:df:
32:2f:58:70:bc:27:cc:21:62:cf:28:81:99:8d:96:b5:12:bb:
6a:6d:79:1e:46:45:5e:e5:0c:65:ee:9b:9c:01:ac:9d:2f:8e:
3d:a9:49:7a:7e:9e:9a:36:f6:b7:bb:e7:f7:48:39:22:71:ec:
6f:27:cd:fa:08:17:f6:50:29:62:27:e5:de:97:14:51:9d:eb:
6d:fb:bc:d8:8e:a8:b9:64:2c:96:00:46:0c:47:e1:bc:68:05:
7c:90:b8:e4:b9:04:ce:43:33:2f:bb:4c:77:98:ab:89:e4:63:
77:c8:28:eb:6c:47:ca:de:3b:3d:8d:e0:2f:25:f1:c3:56:cc:
a7:8f:50:65:e4:75:9c:ee:6a:15:e1:d8:1f:e0:2b:50:8f:df:
d7:0e:8b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:18:07 2025 by rpki-client