Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
File: QXYebRbr8X5XHGv3fsBr33q2ivg.mft (raw, json)
Hash identifier: sah/P56ASYkVKLYMX/xlrhEleY0nNp8qAv/4I/CMBOA=
Subject key identifier: B0:47:D8:6C:BB:3D:C7:BB:BE:1B:1D:09:B0:2B:AE:BE:7D:05:28:C0
Authority key identifier: 41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8
Certificate issuer: /CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8
Certificate serial: 0196496A5A158D809D16500BFC8C3A053238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
Manifest number: 14F9
Signing time: Fri 18 Apr 2025 15:00:28 +0000
Manifest this update: Fri 18 Apr 2025 15:00:28 +0000
Manifest next update: Sat 19 Apr 2025 15:00:28 +0000
Files and hashes: 1: QXYebRbr8X5XHGv3fsBr33q2ivg.crl (hash: N5ftnQWgdb3COOKKD2p6yOeF0sGDq5JaY2VrKqlirw8=)
2: kDp8o5lwoauyIIWuMVQKzWrOZfg.roa (hash: k1SzOsCV3pSTvUNttrz3FSSmM4yVZTra60XB+dEnFds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:6a:5a:15:8d:80:9d:16:50:0b:fc:8c:3a:05:32:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8
Validity
Not Before: Apr 18 15:00:28 2025 GMT
Not After : Apr 19 15:00:28 2025 GMT
Subject: CN=b047d86cbb3dc7bbbe1b1d09b02baebe7d0528c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0e:35:d6:c7:ff:55:6a:b2:05:0b:4e:04:4e:
42:30:1f:96:e5:ca:b3:6e:92:3c:4b:b8:cd:25:30:
91:c9:55:be:6f:b2:5f:f5:e8:e1:1a:70:de:6b:f5:
39:32:bf:cc:92:a1:7b:8d:86:15:f1:2b:4a:7b:3b:
83:4e:26:67:a7:e7:cd:1f:88:e0:82:8b:97:f1:93:
89:2c:93:02:2f:29:48:3f:bb:d9:94:d5:61:30:75:
4d:aa:40:b7:d5:09:47:b8:30:c7:a8:0e:87:a0:ad:
a7:4e:4a:e9:4e:0a:38:75:0e:c9:9e:9e:04:86:e9:
9d:52:cd:3f:67:31:c3:fd:b3:69:ba:e0:22:8e:42:
be:4b:f2:c9:f9:fd:48:62:87:43:c2:a4:df:ca:95:
b3:da:86:93:5e:04:cb:d5:9b:ad:7b:78:45:96:f7:
c2:c7:3d:de:15:2c:13:91:50:af:8e:8e:bc:df:99:
d6:79:c8:2a:a0:c9:0e:0d:d1:47:27:42:59:43:e3:
bc:1b:11:20:9c:e3:d4:b7:a7:d3:cd:60:5a:55:86:
e2:7a:63:7a:76:20:42:2d:19:63:91:ce:28:28:04:
13:e5:63:af:d8:9c:84:02:09:c7:4a:c7:97:66:51:
0a:49:27:b5:30:81:52:a2:0f:2c:26:18:9e:b6:47:
6a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:47:D8:6C:BB:3D:C7:BB:BE:1B:1D:09:B0:2B:AE:BE:7D:05:28:C0
X509v3 Authority Key Identifier:
keyid:41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b2:8f:13:71:28:70:94:20:1b:e7:9f:19:6b:90:b7:45:89:
d1:d2:a8:80:b5:e6:02:63:de:59:62:f7:09:bb:fc:5e:4f:6c:
71:34:26:f2:c5:b2:64:b7:f1:b6:b7:b3:3e:3f:1e:87:ae:97:
79:03:86:92:b7:0d:da:0e:eb:26:93:6a:a5:4d:92:cd:0c:e9:
55:ee:b6:f0:d1:89:35:ca:7a:40:e0:0e:a5:ab:be:aa:30:3c:
7d:a7:d7:fb:4b:c9:98:bb:cc:e0:57:b9:80:5a:aa:ea:e4:f8:
c3:05:cb:38:83:35:6d:18:d3:19:58:d0:07:2a:e4:4a:83:31:
5b:57:26:e9:00:55:99:01:98:1e:48:60:bf:9b:79:00:ba:a6:
f6:99:21:3d:17:75:dc:0b:69:d7:5d:54:80:71:b1:b2:cf:ee:
cb:18:e0:ea:4b:b8:5b:2f:95:98:bf:d5:4d:e8:7d:2c:7f:44:
1c:77:97:d0:b1:2c:11:92:c2:d6:62:29:db:a4:72:9e:95:dd:
5d:9d:4a:21:56:c3:44:4e:a0:b0:65:02:d4:9a:c6:8b:a4:24:
34:6e:f2:2b:ea:4f:da:9a:d8:82:47:21:49:92:96:85:f8:9c:
ef:87:f1:f1:ec:71:23:68:ae:29:29:f6:e8:56:a8:98:05:7d:
29:88:55:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:13:37 2025 by rpki-client