Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
File: qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft (raw, json)
Hash identifier: hR27FITVS+1zWmpqgZ+CA3zM08GF/KQePNkvLI6LCGo=
Subject key identifier: B4:3F:D8:FE:F8:FB:3C:53:A4:99:7A:B2:50:23:16:90:CB:DD:4A:10
Authority key identifier: AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
Certificate issuer: /CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Certificate serial: 019610FC5D37D8A6086F6DDA3F5B969C86E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
Manifest number: 14B3
Signing time: Mon 07 Apr 2025 16:01:36 +0000
Manifest this update: Mon 07 Apr 2025 16:01:36 +0000
Manifest next update: Tue 08 Apr 2025 16:01:36 +0000
Files and hashes: 1: EtuX617xzyrB71Hjc1hl3WMzRjI.roa (hash: QSVoTvnTqOuhcGfy2h2iEu7xdB5mNRvXSamlWm6WYuo=)
2: MBp32VcQqAbMoARjt7V1PCPscvg.roa (hash: pI5Os3fewlyJzy3/SsAFuRA7NUz4NSu4MCASZkD0XZY=)
3: qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl (hash: T56t0+ez6PxmalT+QHKldVb0Vj3ZI+2GlTqy7DqYPhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:fc:5d:37:d8:a6:08:6f:6d:da:3f:5b:96:9c:86:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Validity
Not Before: Apr 7 16:01:36 2025 GMT
Not After : Apr 8 16:01:36 2025 GMT
Subject: CN=b43fd8fef8fb3c53a4997ab250231690cbdd4a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:98:50:bf:81:d1:83:72:46:68:d5:e9:7d:3b:
1d:c1:71:f2:39:a7:69:ef:f0:b6:e2:ed:37:57:64:
85:10:b3:b4:57:ba:9f:fe:9c:08:55:f1:b0:a2:be:
5d:78:ee:2c:17:7f:ed:5b:53:32:d7:e2:09:e7:c6:
50:f5:f5:32:76:c4:63:b5:37:6a:37:8b:3e:06:74:
6d:4c:4b:c0:f1:69:5c:40:2a:4d:ad:fb:ce:69:6e:
74:3e:d7:a8:ff:0a:ce:e9:52:56:5a:b8:fb:01:44:
3d:0a:89:4b:cd:fd:e8:12:6b:73:60:17:d6:97:d6:
16:df:9d:42:fb:fd:60:53:02:e0:dc:51:d6:d4:15:
40:de:a3:7b:61:84:00:b2:c4:21:6d:14:72:1d:01:
1c:5e:07:57:8f:7e:60:2f:d1:d4:b8:44:71:08:23:
5e:14:c7:f1:35:3b:40:28:53:8d:d0:82:91:57:d7:
2a:25:01:3d:12:62:99:0a:1e:6d:27:bb:e2:c7:8e:
59:41:f9:12:b7:57:28:e6:e4:e0:f8:f5:7f:7b:4b:
b3:c6:d2:6a:3d:7a:55:40:59:a6:5c:22:9d:a6:87:
29:71:a8:5b:54:4a:85:66:dd:13:c7:1a:c1:0f:28:
aa:a2:db:a3:05:b9:24:1e:8c:2b:ca:a2:9a:f7:5f:
40:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3F:D8:FE:F8:FB:3C:53:A4:99:7A:B2:50:23:16:90:CB:DD:4A:10
X509v3 Authority Key Identifier:
keyid:AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b9:7a:51:f5:a9:1a:b3:46:89:08:e3:b6:cb:c6:1d:ee:79:
c4:be:47:ab:f6:33:e1:66:8d:1c:60:60:b1:a5:87:4f:fc:86:
12:fa:8a:bb:99:9d:e5:f7:81:75:66:d0:bb:c6:c8:15:e4:d4:
cb:e9:a8:b2:b3:cd:67:6f:58:58:05:62:40:0d:fc:60:87:61:
5a:e9:78:e1:91:fa:7d:b4:d9:2a:56:ab:9e:ee:b3:67:fc:58:
1d:79:32:d4:18:c4:56:21:95:45:b9:0c:06:b1:ef:eb:04:4e:
6c:5e:df:97:1c:61:6e:db:a7:6a:ea:c0:e8:c6:b6:a8:59:9a:
32:ef:ff:ee:3f:fa:e3:e4:14:15:fc:2d:20:83:4e:38:86:f8:
71:5b:c8:b6:18:30:93:d2:37:05:7d:9c:f1:52:d2:66:1f:67:
98:fe:9a:ab:5a:49:7c:c4:ab:6b:44:c4:c3:dc:28:02:fc:3d:
3b:36:9a:8b:5e:0e:ea:c3:36:b5:5d:d2:9d:86:a6:72:81:5e:
82:d3:8f:5d:62:ad:3d:64:43:eb:ce:99:34:3f:21:78:ae:30:
06:d3:bc:cf:a2:24:49:cf:3b:87:1a:53:6f:0d:6e:1f:7e:10:
09:e9:37:cc:14:e0:b6:f8:a7:da:3c:82:d1:ff:c5:4a:8d:99:
31:e4:5c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:27 2025 by rpki-client