Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
File: QOxdgqjrXZjOduYdr-UXZh_E5nU.mft (raw, json)
Hash identifier: ofsrkDGiTWAovoKhMT5K3/4i3V81qaa3xfOVaNT3v1k=
Subject key identifier: 42:92:88:5E:B4:C0:BB:65:49:44:B4:5C:4E:54:9A:3C:21:18:F3:42
Authority key identifier: 40:EC:5D:82:A8:EB:5D:98:CE:76:E6:1D:AF:E5:17:66:1F:C4:E6:75
Certificate issuer: /CN=40ec5d82a8eb5d98ce76e61dafe517661fc4e675
Certificate serial: 0196545BFD4D244E275E531C3008DF41AD51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 18:00:36 +0000
Manifest this update: Sun 20 Apr 2025 18:00:36 +0000
Manifest next update: Mon 21 Apr 2025 18:00:36 +0000
Files and hashes: 1: QOxdgqjrXZjOduYdr-UXZh_E5nU.crl (hash: 2uCGpRc052mON87xHCQYX6cTlVJNsCrbranGaZlSKC8=)
2: y8Eeia8hdhX_DpCgeBhu63E2X4A.roa (hash: wzZxfTRF1LtzRT1r6hfEh3O3egTZFWx9R6sOBFN3GRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5b:fd:4d:24:4e:27:5e:53:1c:30:08:df:41:ad:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ec5d82a8eb5d98ce76e61dafe517661fc4e675
Validity
Not Before: Apr 20 18:00:36 2025 GMT
Not After : Apr 21 18:00:36 2025 GMT
Subject: CN=4292885eb4c0bb654944b45c4e549a3c2118f342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:de:a7:f0:ca:9c:48:c9:b2:fe:aa:51:0e:43:
a8:ad:80:47:6e:d3:33:8f:5d:36:8a:fa:42:c3:50:
d7:87:42:8b:fd:90:f0:27:ef:2b:2e:62:1c:22:12:
eb:cc:a0:b3:b1:bb:d5:76:3a:76:76:8f:23:de:5c:
41:76:13:7f:eb:ee:49:b4:31:bf:b0:8d:35:6a:f9:
51:0e:a2:22:a6:af:bc:50:d2:9a:ec:6d:7a:23:a2:
4d:40:93:18:51:a0:da:64:45:3a:14:08:0f:e7:c1:
4f:71:e0:e6:95:8c:29:3e:48:54:c2:b6:0a:1c:e0:
bb:23:78:3d:48:1a:df:22:9c:4b:e0:84:d8:53:bd:
a1:72:68:da:c1:32:d1:51:2e:c0:71:63:6d:ce:f2:
2b:41:95:13:ef:5e:78:85:fc:6f:2b:f0:95:f0:ff:
d0:82:30:ef:c2:da:98:bd:ef:99:d1:c3:25:01:f5:
bc:26:7f:31:6e:cb:7e:a4:65:ea:25:35:4b:8b:09:
05:b4:82:84:ec:5f:83:7b:11:93:f1:79:6e:0e:22:
78:a0:66:98:b7:04:5d:be:55:99:24:59:bf:bd:e8:
a4:f3:09:8f:d4:2b:95:0d:2a:ed:13:6d:34:32:46:
2d:d7:60:50:4f:52:a9:85:0d:9c:df:e9:99:ed:f3:
23:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:92:88:5E:B4:C0:BB:65:49:44:B4:5C:4E:54:9A:3C:21:18:F3:42
X509v3 Authority Key Identifier:
keyid:40:EC:5D:82:A8:EB:5D:98:CE:76:E6:1D:AF:E5:17:66:1F:C4:E6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:6f:17:dd:c4:48:47:0e:5c:48:77:e9:e4:35:16:7c:b0:b5:
ea:5b:af:9b:97:ae:b3:fb:a1:14:46:99:e2:23:c3:a1:c9:4e:
3e:f1:2f:7e:78:1a:3f:fc:c5:94:8f:10:98:9b:e7:63:86:ae:
26:ba:04:76:d2:34:1e:48:f6:ef:30:9c:70:17:3a:8a:1f:f9:
cf:97:4a:60:27:e6:c7:b4:1f:a1:09:eb:b9:3b:cf:3c:9e:fe:
61:9c:ef:64:d0:18:e8:b7:b3:fd:b7:39:e5:e7:95:43:48:74:
c1:46:ee:e9:1a:3d:ba:4a:70:09:a6:9d:44:63:ef:54:86:2e:
6c:be:64:d3:0d:18:b9:cc:7e:21:d7:b0:b7:33:78:5e:fd:44:
1d:ad:db:85:4b:0f:d1:c9:ba:13:1b:23:0d:80:0e:8c:bd:c5:
52:6b:7f:63:cd:c2:5c:8e:35:3e:e2:30:e9:8e:21:48:a0:7b:
02:fe:be:75:d8:b9:94:bd:92:c2:a8:3d:8a:fa:e8:e5:a0:c0:
84:f4:0d:1d:9e:b7:a5:05:e2:66:30:e4:54:66:3f:2e:60:cd:
22:41:80:15:3b:29:aa:83:6b:f5:52:06:75:cf:42:a5:02:f5:
83:7b:e9:83:d1:50:23:39:e5:28:f0:7f:9e:22:72:49:ed:b9:
da:bb:bb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:16:44 2025 by rpki-client