Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
File: qlfg60pFBqGasu_5iaZ9VZuYzBo.mft (raw, json)
Hash identifier: uiXVNR7PPPHfc2G0iI/JUjg9j/UiB57S9sDW/ab6POo=
Subject key identifier: 3F:81:97:9A:D7:27:66:FC:8A:2D:A1:A6:FD:D7:66:5A:29:BF:DC:DC
Authority key identifier: AA:57:E0:EB:4A:45:06:A1:9A:B2:EF:F9:89:A6:7D:55:9B:98:CC:1A
Certificate issuer: /CN=aa57e0eb4a4506a19ab2eff989a67d559b98cc1a
Certificate serial: 0196439EEB42C779E4BBBFAFF0B243C129B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
Manifest number: 14F8
Signing time: Thu 17 Apr 2025 12:00:10 +0000
Manifest this update: Thu 17 Apr 2025 12:00:10 +0000
Manifest next update: Fri 18 Apr 2025 12:00:10 +0000
Files and hashes: 1: qlMDWlG-JNx16-NWJFTyN9idn8E.roa (hash: E945kOZUUQnkihDV8A7yVqNkz5KAfzQzs4QO1zB4q98=)
2: qlfg60pFBqGasu_5iaZ9VZuYzBo.crl (hash: v769zgmxrKrask1v2+eWh5fOJ6gf4+tPb8KIF4FdCYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:9e:eb:42:c7:79:e4:bb:bf:af:f0:b2:43:c1:29:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa57e0eb4a4506a19ab2eff989a67d559b98cc1a
Validity
Not Before: Apr 17 12:00:10 2025 GMT
Not After : Apr 18 12:00:10 2025 GMT
Subject: CN=3f81979ad72766fc8a2da1a6fdd7665a29bfdcdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:59:5e:c8:f6:e0:40:7d:c6:e4:69:35:21:75:
aa:31:8d:ef:00:b8:67:c8:9e:b9:bd:e9:65:45:09:
e0:8c:aa:c5:6b:2f:67:d7:08:09:bf:e6:48:08:0b:
20:28:27:cc:f1:5f:d0:bd:6a:39:8a:28:20:ff:7e:
47:15:b3:2d:72:36:3b:3e:7e:1e:f1:83:5f:6e:a4:
55:62:9c:c0:3e:b3:07:ec:ae:32:a1:84:c8:85:16:
6b:52:17:1f:85:29:13:12:3f:6b:9e:1f:d6:e8:ee:
8e:c9:c5:0d:54:34:d8:4e:93:7f:01:2b:cf:f2:71:
0a:6b:65:c7:cc:3e:dc:fe:70:6a:fb:51:57:3e:a8:
75:96:65:f6:8c:d5:ea:e0:c4:38:90:69:0d:fc:3c:
15:01:fc:f4:62:c5:48:9a:81:e0:bc:4c:2e:02:77:
d4:c6:87:07:63:72:b3:db:c7:64:60:9d:5d:af:cd:
0c:94:a1:0a:f2:13:d4:05:ff:d9:fe:89:53:51:55:
ce:5a:1f:2b:bc:f0:f2:0d:1e:cd:ee:5d:ca:16:74:
b7:28:d2:4a:06:8f:cd:20:17:d7:9b:02:f4:ca:db:
73:2c:00:98:0a:e6:73:84:ba:02:7e:40:61:ec:92:
32:50:72:c1:58:ae:1f:e2:3e:fa:07:66:a3:58:02:
57:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:81:97:9A:D7:27:66:FC:8A:2D:A1:A6:FD:D7:66:5A:29:BF:DC:DC
X509v3 Authority Key Identifier:
keyid:AA:57:E0:EB:4A:45:06:A1:9A:B2:EF:F9:89:A6:7D:55:9B:98:CC:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a8:42:3d:5d:f9:ce:61:5a:c3:28:e9:e3:47:ba:ad:8c:87:
49:d7:c9:86:53:19:90:43:85:33:e6:b8:cf:70:01:e9:76:24:
8c:74:99:b3:55:18:ee:2d:99:c0:40:de:6a:26:43:66:5a:db:
1f:06:64:a6:4d:bf:bb:fd:62:b0:62:aa:43:1c:d5:24:d4:04:
b9:93:95:6d:2f:db:1b:49:0d:ab:50:84:a0:69:17:dc:c2:a2:
5d:bb:c7:9b:8d:48:a3:e1:8a:05:ee:e7:3f:f4:33:a8:cf:a7:
0f:a6:0e:e2:91:28:30:4d:4e:46:c2:ea:53:13:d4:7b:fa:bd:
4b:89:12:5f:6a:c5:2c:bc:36:59:02:af:39:e8:a9:1a:30:ff:
cb:a8:17:47:7d:e0:5c:e6:33:49:19:3f:23:92:2c:76:11:94:
1c:db:03:81:9d:63:f4:b6:d8:61:18:a5:d5:a9:2a:39:17:f8:
4c:2d:cc:32:69:2a:7c:41:bc:eb:d9:b1:cc:17:f2:93:70:72:
05:c7:d3:a2:5d:4d:80:44:60:31:07:30:cf:46:18:65:6a:97:
b6:fe:a1:a8:49:f7:86:eb:21:57:86:f1:a4:7f:79:88:ab:5c:
43:da:f1:4c:5b:44:a7:ec:7c:3e:b8:7b:6a:b9:2e:c1:fb:4d:
00:ed:9a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:47:34 2025 by rpki-client