Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
File: qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft (raw, json)
Hash identifier: uQUzu7xHGLHllXxWIc34xjAc5PN6vb6nB3wnwZCC0yA=
Subject key identifier: 8C:4A:D6:3B:55:5D:45:95:91:5E:7E:57:7D:A5:A8:5A:47:E9:6C:B1
Authority key identifier: A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
Certificate issuer: /CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
Certificate serial: 019645C5AD71D374C3E71786AC044AE34C36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
Manifest number: 0600
Signing time: Thu 17 Apr 2025 22:01:44 +0000
Manifest this update: Thu 17 Apr 2025 22:01:44 +0000
Manifest next update: Fri 18 Apr 2025 22:01:44 +0000
Files and hashes: 1: ZuTxi79Ck2OCXbkDauPT87FQh1E.roa (hash: xuj1se8JvfBc00cfkDYRLRVr3K+o4nQ3N/ymEwvuis8=)
2: qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl (hash: kjTPNT0mSBUpCdQYRPCvo4Un4D43WlEsv/rjvXA6/AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:c5:ad:71:d3:74:c3:e7:17:86:ac:04:4a:e3:4c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
Validity
Not Before: Apr 17 22:01:44 2025 GMT
Not After : Apr 18 22:01:44 2025 GMT
Subject: CN=8c4ad63b555d4595915e7e577da5a85a47e96cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5c:a8:ad:be:65:e8:0b:10:ab:e5:22:fb:9f:
59:f7:76:ec:58:bc:bf:37:4c:5e:57:9d:b7:ac:cb:
7e:3b:51:13:34:bc:92:1d:e4:1d:15:77:28:4b:bb:
98:1e:3e:51:86:ea:9b:8b:f7:e2:06:fb:a0:d5:78:
ae:8c:34:6c:a4:d4:ac:88:cf:09:96:74:7f:3c:6b:
9c:e4:60:1f:df:b0:82:d2:57:3b:85:ed:68:8b:1c:
dc:6e:8f:fc:f5:43:5c:77:0d:05:e6:7f:46:de:0b:
0a:01:fb:30:3f:2f:f7:b8:b1:b9:41:72:ec:84:d4:
66:4e:97:58:92:29:57:98:72:b4:9e:96:d6:e6:d0:
84:50:33:6f:13:38:2d:a3:55:08:6f:12:a0:3c:fa:
16:fc:ee:1a:61:fd:9e:65:1c:29:49:f0:54:7c:a9:
fb:96:96:cc:a5:9a:b6:77:2a:65:d3:fb:03:69:55:
a3:ad:40:45:ef:0f:2b:24:af:42:ce:23:3c:ce:c1:
01:08:1c:79:0f:b6:60:d0:28:7c:33:50:d2:36:5b:
4c:20:58:65:38:ae:df:80:bb:37:fb:7a:45:b4:d7:
96:6f:57:99:fb:de:47:47:f7:6a:06:4c:29:36:29:
9f:0d:08:9e:3f:df:33:a7:52:f0:1b:42:84:19:c6:
fb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:4A:D6:3B:55:5D:45:95:91:5E:7E:57:7D:A5:A8:5A:47:E9:6C:B1
X509v3 Authority Key Identifier:
keyid:A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:73:2f:4f:ce:27:e8:66:e6:a2:4e:fb:91:7c:3e:22:8d:eb:
25:7d:49:09:80:10:e2:b7:52:0b:4c:7e:97:3f:7a:56:86:51:
fd:27:8b:54:a7:d8:2e:41:54:fc:6a:0d:39:d1:17:8a:f3:8c:
a0:1e:0e:85:3c:2d:30:aa:f7:f9:ef:29:9f:cb:eb:cd:37:60:
a2:85:71:df:cb:4a:d9:e8:9e:56:6f:0d:3e:25:09:e3:13:3d:
26:0d:10:10:ee:77:56:1d:c7:67:f9:23:34:e9:7a:06:99:b2:
9e:83:e4:22:f5:82:fe:86:50:b8:4a:66:d0:35:e8:76:e2:43:
bc:b1:a8:c5:7f:2b:96:a0:6d:d5:d6:42:3c:91:fa:7f:15:4e:
2b:3c:18:00:c9:f4:9f:0c:47:33:58:55:ba:55:50:6b:04:62:
04:b5:04:ab:cd:03:84:a5:23:70:95:79:f5:05:3e:71:11:5f:
fd:f5:78:31:73:59:6e:84:bb:13:76:6c:ac:d9:ad:5d:5d:13:
d4:09:53:93:a3:fa:77:b6:fb:80:53:93:0d:3b:4b:5b:3b:11:
86:67:a7:f4:55:b0:df:f1:bf:81:a9:e7:10:a4:e9:0f:c9:9c:
53:a4:44:28:e1:0a:b6:0f:69:79:96:0c:75:72:f4:a5:4d:bc:
31:44:9a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:24:16 2025 by rpki-client