Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
File: q9PisS9HkZgpT69gxuNqCht7_VQ.mft (raw, json)
Hash identifier: ZY+UkH9T3u9Sl4ubRXezEHp1v+azxAq/eSpu1GyFRKs=
Subject key identifier: A5:C9:38:54:24:C1:D0:4D:48:0C:68:3B:0E:EA:32:33:69:A0:49:4B
Authority key identifier: AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54
Certificate issuer: /CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
Certificate serial: 01964FA3AAA5A5532E2B4C0CC37A86FE9193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 20:00:48 +0000
Manifest this update: Sat 19 Apr 2025 20:00:48 +0000
Manifest next update: Sun 20 Apr 2025 20:00:48 +0000
Files and hashes: 1: 30dF88R9p_cbRx6VSnFVxrOujdw.roa (hash: lDDyLH/2DtUX7Hay39PUf67OI+BeERX0NuLI6ZnhTnY=)
2: q9PisS9HkZgpT69gxuNqCht7_VQ.crl (hash: VVPwdmTqNxbNNnYE1H4jIk1LMErsPct6iWL/RuVlozk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:a3:aa:a5:a5:53:2e:2b:4c:0c:c3:7a:86:fe:91:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
Validity
Not Before: Apr 19 20:00:48 2025 GMT
Not After : Apr 20 20:00:48 2025 GMT
Subject: CN=a5c9385424c1d04d480c683b0eea323369a0494b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6a:30:e4:0c:aa:17:45:4d:a8:7d:8d:27:d6:
17:42:07:cf:ec:fb:28:b9:4f:dd:49:f3:73:53:cc:
d6:ec:c5:13:6e:7f:78:96:a4:d4:bc:30:3e:70:8f:
85:6a:3c:27:86:ca:45:c0:57:bf:2c:e4:50:51:7c:
1f:bc:13:83:75:2b:ee:8a:f0:43:9c:6a:d7:da:2b:
2b:5c:a3:1e:51:74:3b:2f:2e:fe:45:4c:f8:6e:ca:
11:32:ff:f8:c6:95:d2:64:32:65:f3:f7:43:2d:f8:
c8:5e:86:02:8e:30:11:41:29:06:4e:86:6f:3e:b8:
79:32:5c:a8:9e:02:f9:bb:9d:3b:46:d5:8a:4a:d1:
1a:f4:e1:8c:01:85:fa:e9:d0:40:4d:d2:83:40:23:
06:da:e0:27:ab:ea:78:d2:bc:de:72:3f:f3:0c:f0:
3d:0b:0d:e3:2a:7a:5f:46:a4:47:a9:d4:72:1e:0a:
bb:d4:11:8b:74:45:0d:f5:69:e5:37:54:0f:86:e1:
fe:9f:42:25:4b:39:d7:fe:7a:d2:bd:7b:e4:16:f8:
57:7b:cc:b8:fb:9f:d8:a8:62:68:6a:ba:fc:75:e3:
d6:2b:56:3b:fa:57:63:f4:26:c8:61:26:31:fb:55:
54:8a:0f:4f:af:d1:45:85:6c:f5:2d:be:56:cb:b7:
34:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C9:38:54:24:C1:D0:4D:48:0C:68:3B:0E:EA:32:33:69:A0:49:4B
X509v3 Authority Key Identifier:
keyid:AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3c:c0:56:10:e8:8c:61:f2:62:a6:1d:65:0c:c9:f9:9e:71:
ab:70:95:5a:27:45:81:b3:f2:17:66:4c:a1:71:1c:d8:dd:a2:
e9:b5:d9:c5:65:f7:a8:f7:e2:ec:ff:9b:37:4e:43:34:04:c7:
0a:c1:03:c7:7c:a4:c5:e8:fc:d8:60:78:f5:9a:54:fd:82:13:
29:79:a7:53:80:0c:ad:93:68:e9:37:47:53:00:8a:06:e3:fe:
85:1b:70:a9:1e:fd:34:8f:3b:e4:68:78:b2:b2:8a:00:ad:3d:
4f:72:3c:a3:a9:dd:ba:97:c0:c3:ba:ad:94:64:36:63:24:58:
f8:b9:52:9b:de:a8:5c:04:f2:3a:7c:ad:4f:5a:50:ee:ea:15:
d6:fc:1f:02:9e:f8:c8:2a:45:45:9e:69:cd:51:56:56:93:83:
4c:dc:1e:5f:f2:45:e0:53:db:a0:32:09:b1:ba:38:24:26:bf:
af:67:9b:de:8f:47:2c:1b:12:58:df:26:e1:8c:7f:65:6e:55:
3b:73:f9:12:77:eb:ca:2a:55:ea:b2:02:e5:1d:63:8d:cb:29:
4c:9e:a7:e6:35:52:6c:87:41:72:d4:72:89:96:c9:75:66:e4:
54:c2:e0:b8:ba:49:55:55:ac:ad:f2:cd:39:c9:c3:44:3a:9a:
6a:a0:9b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:20:53 2025 by rpki-client