Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
File: zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft (raw, json)
Hash identifier: sDmJuH9RpnAIjrlGf8t3vBVvu/R1hSlxKZR9XSo1rYk=
Subject key identifier: 85:CB:56:35:24:48:BA:A9:24:AD:EC:69:1C:A5:9F:CB:2F:C3:1A:0A
Authority key identifier: CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6
Certificate issuer: /CN=cd02d077485a15e8a254a49edd994d4fc2a908a6
Certificate serial: 01964A7CF87EF4B2C6802A2CF4769136838E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
Manifest number: 14F6
Signing time: Fri 18 Apr 2025 20:00:26 +0000
Manifest this update: Fri 18 Apr 2025 20:00:26 +0000
Manifest next update: Sat 19 Apr 2025 20:00:26 +0000
Files and hashes: 1: OcgJ9gd4XPf2cH1vwOSDk8wsWCY.roa (hash: mqfa0ZehsylIV/d7nzWZG94iCnmV9oQHVVnGpSyC+og=)
2: pdwDWOzc3QzXOsiEO7HIgZ0hQdQ.roa (hash: m/RIMhJds2RFVXbpbtSSU1vxyz5pEJiQgY8y39qh5vk=)
3: zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl (hash: C0I1XWv7lxnNw+d3u/4YU5wz223rYqmxkOoMr1DW37A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7c:f8:7e:f4:b2:c6:80:2a:2c:f4:76:91:36:83:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd02d077485a15e8a254a49edd994d4fc2a908a6
Validity
Not Before: Apr 18 20:00:26 2025 GMT
Not After : Apr 19 20:00:26 2025 GMT
Subject: CN=85cb56352448baa924adec691ca59fcb2fc31a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c0:64:69:18:08:04:39:2a:c2:76:0d:06:0c:
94:9c:f1:ef:e1:dd:98:f0:db:b2:e5:05:39:76:c2:
18:a6:fc:2c:d2:40:c2:b6:b4:de:5c:9d:a3:d3:72:
2f:9f:2e:99:fd:2a:10:4a:4c:8c:d8:33:35:6e:18:
77:9f:96:ee:29:d4:b7:25:2f:eb:7c:ef:33:00:bb:
61:2f:92:3c:76:01:c5:c4:9b:20:21:d0:c6:db:be:
57:17:f4:4f:e4:be:37:15:f8:95:cc:71:a0:a7:eb:
47:dd:fe:32:e3:d4:5c:f6:f4:e2:8d:e0:a4:9d:91:
ac:00:df:62:6e:65:7f:18:eb:9a:21:83:18:3e:d6:
84:20:98:06:88:5d:13:e7:4b:95:ca:2f:af:df:e2:
c6:46:97:50:4d:8b:2e:1c:df:a2:31:28:e5:04:f6:
7d:b9:0d:9a:76:4a:79:49:b9:fb:09:06:ce:9a:10:
24:fa:34:ad:00:8f:13:27:e6:ba:53:07:a9:6b:ab:
66:0d:da:29:f6:23:9d:ba:7e:19:a4:22:ad:10:00:
e3:3a:14:f4:ac:fa:1c:14:e4:14:f9:bf:d5:9b:40:
b4:e8:e1:c0:93:4f:a8:97:1a:64:33:ad:ae:bb:65:
22:c7:4d:4a:14:96:d8:5d:67:59:99:89:bc:29:3e:
fa:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CB:56:35:24:48:BA:A9:24:AD:EC:69:1C:A5:9F:CB:2F:C3:1A:0A
X509v3 Authority Key Identifier:
keyid:CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:25:16:1c:b8:86:9c:f1:55:6b:96:61:b6:d9:da:73:b3:af:
f3:e6:c3:23:01:d2:6c:bb:e9:1e:77:03:52:2f:b7:7b:3d:06:
fd:35:bd:c3:e9:b0:a5:bf:36:b0:85:0b:0f:f9:6e:5c:87:45:
dc:7c:5f:57:38:6f:70:ae:63:05:66:dc:f1:ca:45:54:14:8f:
23:17:e3:44:10:bf:d9:83:27:0e:95:c6:3c:e7:c2:65:90:51:
38:68:a7:ca:f8:db:cf:d0:e8:6b:f0:07:2b:de:c3:88:09:d7:
9a:1f:ac:9c:71:75:d9:fe:b9:48:93:81:1f:27:a7:1c:53:14:
80:c2:4f:88:43:8e:13:41:8e:e6:10:79:35:87:f9:8a:59:27:
a8:d9:d3:72:e1:86:1f:3b:ab:fe:67:cb:e5:5c:a2:a6:85:43:
a9:a4:ab:f1:86:ce:67:98:ef:9c:97:6f:e6:ef:07:f7:b8:87:
ad:f1:71:a5:1e:26:51:a2:7d:c3:7a:ea:ad:a1:d7:13:e5:a5:
a9:98:2a:d0:c6:e4:b4:c6:02:6b:25:8e:e9:a1:8e:3e:8b:53:
f5:65:f6:35:3d:2c:d5:08:62:03:c1:0b:aa:c3:11:a1:b3:8f:
e3:03:3a:2d:ea:f6:aa:53:be:6b:2f:8f:96:63:86:d5:c3:bf:
2d:5e:d6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:17:44 2025 by rpki-client