Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
File: QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft (raw, json)
Hash identifier: TNyMfDcETU1iN0EJUHjy2rtmTk+Ir9r6HpmMEoYE8S4=
Subject key identifier: 4E:65:5D:30:C8:9A:7A:42:AB:48:20:14:CE:B1:CA:28:79:FA:74:6C
Authority key identifier: 42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
Certificate issuer: /CN=42004477243ca20b95dc8efe07337639806f6075
Certificate serial: 019749D5A4319E047B4D4A4E9404D4978BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
Manifest number: 14CA
Signing time: Sat 07 Jun 2025 10:00:27 +0000
Manifest this update: Sat 07 Jun 2025 10:00:27 +0000
Manifest next update: Sun 08 Jun 2025 10:00:27 +0000
Files and hashes: 1: OEwb1lDHunikfNaNODhoAnbiQCo.roa (hash: wWLLrhKTcf6mPU2Bqqwm1puc/7JHEkcQ5M3ZaPHxpgg=)
2: QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl (hash: MrMhSwHmiDG1gKLS6Ah4592K/e3m/QpGpR3CtSTpsTE=)
3: vn8Vk2vP0QzgnWs8YePhZCt8-Lc.roa (hash: NAYB0xo+Xhi57/QawXnfFqpG2CzRv0IH2N4vezreDYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:a4:31:9e:04:7b:4d:4a:4e:94:04:d4:97:8b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42004477243ca20b95dc8efe07337639806f6075
Validity
Not Before: Jun 7 10:00:27 2025 GMT
Not After : Jun 8 10:00:27 2025 GMT
Subject: CN=4e655d30c89a7a42ab482014ceb1ca2879fa746c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:25:40:6c:7a:f7:29:52:44:5b:92:2e:14:0c:
43:36:9b:e4:46:d6:d9:8c:5d:0f:cc:2e:b2:79:a7:
17:0a:09:f2:f3:c7:92:12:89:8e:bd:88:3e:b1:83:
ee:51:af:e1:34:2a:b5:8f:82:89:74:26:46:2d:b6:
64:f8:ed:40:30:e0:e0:71:4a:f5:6b:98:d2:3b:2f:
81:a6:1b:22:96:08:27:42:33:75:cd:7f:f0:de:9b:
e4:b9:d8:04:c0:58:5e:63:96:50:7a:57:48:f9:e0:
af:0b:b2:32:b6:b4:a6:ea:2a:e7:3e:e0:0c:2e:ae:
a4:9b:d6:5b:ea:10:3c:3c:fe:b2:1a:08:1d:e8:1a:
b6:d8:cd:c3:fb:99:2f:25:3b:6e:24:f1:5a:02:9f:
10:00:68:de:31:a8:02:14:ec:e1:87:25:80:3e:7b:
e8:d2:17:48:ea:0c:64:fd:29:ed:01:13:3d:65:29:
eb:92:39:6a:71:f1:c6:66:da:00:52:5d:96:ae:c3:
f9:c6:ee:c9:e4:a1:14:82:d5:06:1a:07:87:68:41:
42:1b:e8:53:37:71:01:c3:6a:4d:87:08:ad:81:52:
32:df:30:fe:62:5f:0d:44:c4:60:bc:8c:76:3d:e8:
36:45:5d:a1:47:7e:ac:87:4e:71:8d:a3:57:74:c2:
d9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:65:5D:30:C8:9A:7A:42:AB:48:20:14:CE:B1:CA:28:79:FA:74:6C
X509v3 Authority Key Identifier:
keyid:42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:eb:d0:f3:26:51:b5:68:c1:e8:17:55:b6:b6:53:9a:84:1e:
f3:1a:79:c8:1e:69:13:4c:44:9b:ed:c7:d2:01:c6:2c:e3:73:
67:63:c9:e0:e9:a2:bb:31:80:40:d4:23:c7:36:96:3b:9a:cc:
2b:2d:42:09:76:0c:93:0c:8b:9e:e2:5f:2d:e0:0f:de:ab:c7:
fe:07:9a:40:75:c5:02:01:8e:75:a0:1b:6c:f9:b8:ca:73:46:
66:3a:c3:8c:85:e7:6c:73:f4:59:8a:33:5f:f7:64:d0:d8:e4:
3e:d6:f2:47:44:0e:5e:9c:ef:1f:6a:e5:ff:0d:ac:8f:50:40:
ba:56:e4:f6:70:10:3f:bb:d7:2d:ef:9e:78:5b:8c:02:2f:8b:
82:7a:93:f3:a9:66:86:52:6a:80:af:47:74:ad:bf:f8:a6:f1:
dc:ab:0e:fe:10:89:58:48:7b:37:f8:7f:ef:90:3c:d0:11:45:
97:2c:8d:ac:af:db:2e:4d:ef:5d:ed:0b:b3:ac:20:26:f3:b0:
75:86:2c:50:04:03:9f:41:15:50:8c:4b:1c:4d:3d:73:3e:bf:
5a:c7:e9:93:9a:05:34:aa:61:2e:47:c5:54:2b:ad:95:18:69:
8f:98:e3:ea:94:8f:f9:bc:65:67:3a:26:44:04:8b:6d:a8:5a:
91:c3:e1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:30:03 2025 by rpki-client