Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
File: QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft (raw, json)
Hash identifier: +WuDNEJHKxD8t2vAzN+P5/iDqLD0HYSsN05aTdUro+E=
Subject key identifier: FC:1D:DE:51:5B:5D:6E:B8:AA:18:3A:8B:70:53:DD:B5:1A:E4:CE:B1
Authority key identifier: 42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
Certificate issuer: /CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Certificate serial: 01963F1DCB2A329EDD30EE2B7EE293AC9C5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
Manifest number: 14F4
Signing time: Wed 16 Apr 2025 15:00:39 +0000
Manifest this update: Wed 16 Apr 2025 15:00:39 +0000
Manifest next update: Thu 17 Apr 2025 15:00:39 +0000
Files and hashes: 1: QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl (hash: /88pLzAPttL7kX8UBfqXG3X4WmZF0lEMq9woZXMJFaw=)
2: c1mJTzKq1m2EBAr92I-nges1Di4.roa (hash: i1n9Y7VZ80hK4Lc1aErif8j8W+hz5/EhhxzfXPDeEMQ=)
3: rvgAs6WmoB_QmrlMgSgm7khV-4U.roa (hash: ByaVeRT7BxyoGgwxavoqH/EHW9rBtmtZSrveuw0KL1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 15:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:1d:cb:2a:32:9e:dd:30:ee:2b:7e:e2:93:ac:9c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Validity
Not Before: Apr 16 15:00:39 2025 GMT
Not After : Apr 17 15:00:39 2025 GMT
Subject: CN=fc1dde515b5d6eb8aa183a8b7053ddb51ae4ceb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:39:72:00:8b:85:48:1e:9c:08:07:4d:c6:ed:
45:6b:cc:64:e6:6c:25:56:91:7e:93:4d:de:c5:f3:
62:19:e2:a6:f6:a0:3c:0d:27:ad:31:40:19:47:80:
06:97:4f:0e:41:72:79:e9:c9:ce:f0:f5:f6:4c:cf:
61:bb:a6:5c:29:b4:62:e9:7d:f9:cc:cf:cf:44:d1:
76:ad:26:98:ac:18:5c:17:7e:c8:e9:50:e1:5a:1d:
d0:f2:84:f8:e3:9d:e0:9e:53:85:61:47:b6:25:ee:
b4:e4:e6:c4:ad:b5:7e:26:b6:0e:dd:96:f2:fc:22:
4b:a4:58:fe:49:26:45:76:c5:d6:f1:36:3b:81:26:
9f:0e:dc:d0:1b:0a:4b:e7:8c:ac:95:38:88:26:11:
ae:d2:cf:83:94:0b:ad:e6:45:1f:67:da:4d:2d:28:
3f:b5:1b:d4:66:0e:6f:0b:e4:27:e3:92:08:2b:f7:
bc:d4:5b:e6:b4:31:34:90:70:50:1e:30:1e:03:f9:
d9:d5:23:3c:e8:a2:99:79:d4:42:c7:d9:d9:81:2b:
5f:23:f3:10:0f:0b:b9:38:63:fa:f9:6d:3c:48:68:
ea:3d:0e:c2:f2:79:44:68:65:20:c5:6f:21:ef:e1:
07:26:83:c9:5d:65:97:7d:38:61:b1:9d:57:37:27:
2c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1D:DE:51:5B:5D:6E:B8:AA:18:3A:8B:70:53:DD:B5:1A:E4:CE:B1
X509v3 Authority Key Identifier:
keyid:42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d6:d4:f5:99:19:f0:05:ee:62:dd:6a:03:33:46:c2:c2:55:
6b:6b:60:f4:c9:7c:4d:22:4a:9b:d9:3a:79:05:ff:01:fd:b8:
ed:49:2a:bd:29:14:fc:91:be:89:68:f2:05:4e:36:90:b6:23:
12:4d:51:d6:75:c2:4c:27:39:c9:70:33:4f:e4:72:be:98:80:
96:6b:79:dd:20:63:d4:08:6e:cf:4d:ab:8c:28:4f:73:77:d5:
19:5c:4c:be:d4:26:e0:20:a2:1a:f0:e4:fb:07:e6:61:d1:33:
b1:bb:ee:9d:93:32:fc:c8:08:83:8e:b2:ed:43:ff:1d:a5:9b:
67:95:63:72:7c:f9:1a:d3:be:7e:d8:96:8d:2a:32:18:f6:8f:
c1:c8:6b:43:fb:51:61:95:43:b4:0d:be:c9:fd:81:a6:ec:4b:
d0:e7:51:2a:71:ff:00:b6:d1:f0:c9:3e:bc:6c:5d:94:25:97:
0d:56:9e:c6:77:b3:55:e6:d2:60:2f:54:48:a0:a9:37:3a:9d:
47:71:4c:58:d9:84:89:29:26:3a:17:fe:28:7c:d8:67:78:7c:
ae:8b:75:ec:d0:0c:49:30:02:c5:90:c6:1e:f7:08:24:b1:4b:
c6:e6:f0:a7:f6:de:ec:16:4b:6a:bf:16:5a:3e:d7:9e:42:09:
33:5b:35:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:05:57 2025 by rpki-client