Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
File: QRxDIgghkceeLYbbThv50HGOJ-k.mft (raw, json)
Hash identifier: Y+FGtIcQ0ChMseqboRzY2e/Mvh1l/POqq4BDe31QI5Q=
Subject key identifier: 04:8B:05:A5:E3:83:D8:01:95:8C:EA:CD:4A:63:52:67:A8:06:1C:B8
Authority key identifier: 41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
Certificate issuer: /CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Certificate serial: 01963D2EFBCE2EC40069758AAFEA069AD853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
Manifest number: 14F2
Signing time: Wed 16 Apr 2025 06:00:11 +0000
Manifest this update: Wed 16 Apr 2025 06:00:11 +0000
Manifest next update: Thu 17 Apr 2025 06:00:11 +0000
Files and hashes: 1: FVpdVuEnsDRMHRWVu11uzU70gi0.roa (hash: mJhCl2lN+VqxL/uU8LnW1pAhhjzpMKfJN4amGIlMec4=)
2: PoyytAvXOYVvBU28xnJ13dEQvjk.roa (hash: i4hitHtlLKsldZIYK5cClvI2iYzkK5dcUJcf/PHsfy4=)
3: QRxDIgghkceeLYbbThv50HGOJ-k.crl (hash: aFN0dqXw0KZPwJ5OVKQrnuL8/5dtctrsLXoBbGrblDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 06:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:2e:fb:ce:2e:c4:00:69:75:8a:af:ea:06:9a:d8:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Validity
Not Before: Apr 16 06:00:11 2025 GMT
Not After : Apr 17 06:00:11 2025 GMT
Subject: CN=048b05a5e383d801958ceacd4a635267a8061cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5a:f9:9b:85:99:38:b9:70:c1:99:b2:a6:7b:
da:8f:71:4e:77:15:21:5f:ab:97:bb:0d:03:f0:c5:
c0:be:5a:ff:21:5c:b2:cc:65:37:8a:c4:de:8f:5c:
3c:e6:a4:5f:84:60:df:90:84:0a:5f:e4:0e:cf:dd:
e4:c2:86:86:5d:a9:66:f1:19:10:84:12:1f:f3:55:
b1:ce:e3:3c:d7:60:0b:ba:44:f7:46:50:8e:06:83:
b2:84:96:c6:cf:eb:11:39:ce:aa:9c:07:63:76:ab:
e3:a9:3d:7e:26:77:fc:f0:6f:dd:18:19:e7:dd:7c:
6b:36:7c:13:2f:9d:5c:d1:a4:48:55:a6:4a:92:c0:
78:4a:ae:7e:d6:e9:1a:9e:fc:d1:ae:4e:a1:90:f5:
6c:be:63:5b:44:56:ba:d9:17:45:49:9e:58:41:2b:
de:fc:f9:e9:c5:37:95:98:51:87:90:f5:b0:82:1b:
4a:0b:da:31:4e:4c:5d:d0:fc:09:92:9a:eb:99:1f:
67:21:41:1d:76:1c:85:f6:88:2e:02:8e:2f:ff:29:
06:e4:33:22:0b:07:7d:de:ef:49:7c:b2:0a:c8:c0:
c5:4e:ad:82:b9:2c:e7:c1:16:9a:c5:a3:3f:2b:f6:
d3:92:52:70:b7:30:b0:db:cd:c8:34:b7:13:21:0b:
1d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8B:05:A5:E3:83:D8:01:95:8C:EA:CD:4A:63:52:67:A8:06:1C:B8
X509v3 Authority Key Identifier:
keyid:41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e9:63:82:98:41:de:e9:5c:51:41:f8:2b:b9:ed:4c:d1:26:
3c:44:40:03:7c:15:f9:b2:b1:df:ae:bb:8e:3e:7f:47:26:d3:
db:58:ea:12:ff:5b:09:42:de:e4:64:18:4e:f3:ae:6d:a0:85:
b9:30:05:de:7a:a7:ba:d6:9f:ff:02:a9:b6:27:e8:4c:3b:26:
67:b1:b3:82:fc:7a:c3:76:86:19:55:ef:fc:1e:c9:7f:2d:ca:
34:07:41:ea:8d:d8:21:50:ed:7d:b6:f1:66:6e:fd:90:75:4a:
f5:39:97:b1:05:03:77:20:f8:31:92:59:c1:57:fa:79:0e:43:
bd:2d:ef:a5:5b:0e:ed:ff:58:3a:9c:3a:b8:cd:ff:e6:4e:a4:
69:96:55:0d:a6:e7:fa:6c:df:e1:a6:cb:f3:80:4f:d2:a3:b6:
04:f3:92:c6:f6:b8:e8:4d:ab:da:f9:98:66:59:3a:6a:d1:63:
66:e5:bb:9d:f7:68:3c:11:95:06:1f:21:bc:c8:5b:f4:4e:e9:
7a:45:5a:b8:ff:be:23:84:4d:22:b6:21:ba:6c:1c:87:4d:ca:
d4:6b:76:e8:41:33:95:be:8d:b4:71:e2:2b:9e:e8:60:d4:34:
92:d2:fa:e1:20:85:34:08:04:c9:25:9a:fd:76:2c:67:76:a6:
10:44:fd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:14:33 2025 by rpki-client