Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft
File: QWkOI5DpC72N5AIYrSIeCTvM7L8.mft (raw, json)
Hash identifier: x+A64kckxUseiGkDFsNRcfScfZ18t6GxJnPbAxgZrQk=
Subject key identifier: 31:E3:60:54:5E:B7:CD:D6:9F:29:47:20:7C:8F:4C:5D:77:8A:00:74
Authority key identifier: 41:69:0E:23:90:E9:0B:BD:8D:E4:02:18:AD:22:1E:09:3B:CC:EC:BF
Certificate issuer: /CN=41690e2390e90bbd8de40218ad221e093bccecbf
Certificate serial: 01964DB4E5517ECC445BC3C99C44697CDD00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWkOI5DpC72N5AIYrSIeCTvM7L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 11:00:22 +0000
Manifest this update: Sat 19 Apr 2025 11:00:22 +0000
Manifest next update: Sun 20 Apr 2025 11:00:22 +0000
Files and hashes: 1: QWkOI5DpC72N5AIYrSIeCTvM7L8.crl (hash: cAi/NtxoNFQ341ZXfg+ifOb4AsegY+IF4Dvp4qD7BOI=)
2: nsNEVxRNRAqK4M0HqDeGc01kd4k.roa (hash: u9cSwFwr5XiNLEjBeMMlXHN1pLGlDX3Y3bL8f/eEp3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWkOI5DpC72N5AIYrSIeCTvM7L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b4:e5:51:7e:cc:44:5b:c3:c9:9c:44:69:7c:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41690e2390e90bbd8de40218ad221e093bccecbf
Validity
Not Before: Apr 19 11:00:22 2025 GMT
Not After : Apr 20 11:00:22 2025 GMT
Subject: CN=31e360545eb7cdd69f2947207c8f4c5d778a0074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:68:ce:b2:6c:9a:73:25:c3:91:44:c4:90:c9:
d9:bc:0e:af:3b:5b:4f:28:45:22:67:12:1c:68:df:
14:2d:ec:58:69:72:ac:88:dc:2f:c7:8e:da:6b:0f:
c6:80:16:e7:95:2f:a5:85:e5:e9:42:94:64:44:7b:
8e:f8:b3:bf:e5:2d:5c:b2:98:97:7a:67:18:87:4f:
14:53:7a:2f:2a:58:7d:0b:8b:17:d4:5c:15:0e:9b:
ee:b3:08:08:e9:8a:41:0f:42:e7:94:aa:7d:db:82:
d5:fb:55:b5:24:44:ae:ca:31:f5:08:c3:cf:d8:8d:
14:63:ae:ae:73:06:a0:37:be:fd:bb:92:7c:30:28:
a0:4d:d2:59:56:12:c7:32:5e:00:9a:2f:d0:bd:be:
a7:f2:18:c6:39:91:47:96:ab:b3:da:d0:6f:d7:3d:
43:62:84:e8:12:1e:eb:20:7d:35:d2:3f:0c:15:87:
49:a3:a4:e8:c8:36:f6:d1:15:31:c5:8e:8c:66:99:
89:a0:89:29:3e:dc:07:4a:5d:9d:5c:40:67:ad:b7:
cb:56:ca:ab:13:b8:a7:ce:87:b2:ca:e7:5c:f2:26:
88:05:99:9c:a8:a2:00:02:80:15:0b:7f:83:96:27:
0b:d5:03:c3:1a:6a:56:46:94:a0:1b:30:90:8e:fa:
c3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E3:60:54:5E:B7:CD:D6:9F:29:47:20:7C:8F:4C:5D:77:8A:00:74
X509v3 Authority Key Identifier:
keyid:41:69:0E:23:90:E9:0B:BD:8D:E4:02:18:AD:22:1E:09:3B:CC:EC:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWkOI5DpC72N5AIYrSIeCTvM7L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:19:45:f9:11:fa:f2:2d:cf:96:09:49:0c:32:b1:7e:5e:a2:
2d:41:a9:ec:d4:3e:9b:7b:f1:c8:2a:09:ec:d7:56:6b:f8:eb:
30:9e:39:68:21:0a:f0:6c:ce:9c:8f:a7:13:2e:7d:f4:6d:a2:
8c:90:80:6a:27:3e:f4:10:cd:95:b0:ee:1c:45:be:90:23:6d:
59:04:76:9d:aa:2f:5b:9d:d9:ba:2c:7c:93:f1:05:35:d4:6f:
cf:43:1a:9b:cb:7f:0b:fc:57:cc:1c:44:0b:b6:6e:16:bb:99:
aa:f7:93:83:9e:30:7b:56:f9:a4:e4:a8:12:06:70:a7:21:15:
3d:be:10:44:dd:28:da:a0:28:c7:5e:a2:83:cb:03:3b:2a:6e:
ea:c1:54:18:76:70:3a:82:85:4b:6e:eb:47:b8:03:98:e0:81:
29:80:0c:21:3b:75:3b:11:ad:6c:5e:c4:be:73:38:7c:24:77:
9a:78:d6:66:dc:5e:ff:2f:67:d2:95:fe:51:5f:bd:b9:bc:e9:
69:51:3f:b8:ba:a5:d5:30:6c:37:1e:64:23:87:ba:f1:13:48:
2a:d2:96:7e:3c:3a:d1:d0:70:ef:33:76:bb:f1:cb:3e:90:23:
1e:8c:d1:a8:34:cc:0d:16:20:a6:c1:ff:78:e2:85:e3:61:79:
15:33:d1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:36:17 2025 by rpki-client