Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
File: qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft (raw, json)
Hash identifier: UdXkttqg9ha0yk314w85SEUX+qa52UiYRzdryfkTdpQ=
Subject key identifier: 58:11:59:E6:A7:8E:1B:21:10:46:EC:BA:01:94:08:69:C7:57:22:56
Authority key identifier: A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
Certificate issuer: /CN=a9480cf18fd7859df9ad997940013a99b8dee374
Certificate serial: 019654C9E0E3B06E71D70E4210C401CF4691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 20:00:38 +0000
Manifest this update: Sun 20 Apr 2025 20:00:38 +0000
Manifest next update: Mon 21 Apr 2025 20:00:38 +0000
Files and hashes: 1: 1-498Z7vh8fq99O9xScVcy6k-waA.roa (hash: 5X65ydohKF6qHxzYtE3Ac9naZbToLy0QuSQ9mwUuJtg=)
2: YCaC2D8L5OtL6F6domigXArqF2c.roa (hash: 3VcxChRnU4HThrx+KUbxRb/2EVyI8+silVMvgGd2Xn0=)
3: qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl (hash: lrThC5GQw06k37a/6eNaR3iypi/b8KRXz0cOL3nmsWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:e0:e3:b0:6e:71:d7:0e:42:10:c4:01:cf:46:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9480cf18fd7859df9ad997940013a99b8dee374
Validity
Not Before: Apr 20 20:00:38 2025 GMT
Not After : Apr 21 20:00:38 2025 GMT
Subject: CN=581159e6a78e1b211046ecba01940869c7572256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1e:c6:6a:11:bf:8b:9e:5b:e8:51:fd:48:42:
f4:74:00:d9:6f:f0:2a:5b:69:4f:fd:84:59:b7:9b:
50:23:5d:cf:a6:13:08:f0:72:c6:ec:2a:16:98:02:
7c:14:12:7e:90:7c:7a:45:15:a1:63:21:b9:08:4a:
5f:84:3c:c9:7f:2c:cf:0d:f9:b6:53:a3:ab:ef:66:
17:df:66:aa:79:b8:b9:23:c6:ba:cc:d3:6d:59:28:
6a:b0:f2:4f:ee:8d:ef:c0:b9:51:cd:b7:7c:f7:45:
68:2d:42:b3:70:6c:74:db:b2:5a:59:5b:8f:18:71:
9e:52:2c:7b:e7:08:7d:fc:69:7d:40:d9:04:db:5a:
49:c1:b4:09:49:bd:ef:de:6d:57:5d:3e:07:31:5a:
66:67:af:aa:9d:86:c0:c2:02:62:c2:4d:e6:98:f9:
15:8e:dd:03:2a:95:80:67:c7:59:a9:5c:49:79:c4:
0c:5d:08:1c:04:c5:ad:71:0a:f0:74:a5:3f:46:9d:
49:18:7f:e7:07:49:b1:28:84:6a:6d:41:96:cc:16:
37:20:0e:e8:98:1e:0e:8f:b5:a1:ba:98:c3:63:73:
bd:8e:b4:79:c7:f3:01:6f:02:eb:f9:38:0a:2e:d2:
25:dd:7c:ed:a0:05:ca:fd:d1:58:16:b9:a4:50:65:
57:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:11:59:E6:A7:8E:1B:21:10:46:EC:BA:01:94:08:69:C7:57:22:56
X509v3 Authority Key Identifier:
keyid:A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4e:8a:cb:76:53:09:28:7e:18:b8:6d:61:be:c6:ca:9e:05:
1b:51:95:af:09:7f:bb:03:7c:16:80:e1:8c:c6:12:ee:48:77:
ad:3d:cb:bd:a1:be:a2:89:bd:cb:48:d9:85:6c:e6:05:d8:52:
c9:98:3c:1a:9d:81:ff:08:55:39:17:e6:f9:0f:71:4b:6a:0b:
79:6f:1a:54:a6:33:3f:b4:42:11:36:a5:9b:93:d7:de:59:91:
60:dc:03:d8:96:8d:04:72:31:f3:7a:2a:06:b4:24:b2:9a:16:
28:bc:ab:9d:78:7e:a0:94:c7:19:41:46:98:47:16:ac:2b:66:
0b:c4:f2:85:59:38:cd:6c:a4:2c:2e:98:30:e0:37:fb:c6:b4:
cd:9f:f4:9c:23:50:13:39:a2:b0:8f:45:03:7a:b8:a7:a4:5b:
cb:1c:25:a0:6f:5b:08:b1:dd:1e:37:60:f6:cb:11:38:d9:aa:
43:61:c3:b6:8c:99:34:60:e6:4a:6b:6f:94:50:c6:4b:ef:62:
ac:bf:67:43:3c:fd:13:cf:0f:a7:2f:d1:aa:e7:27:ef:b8:44:
57:7c:22:ba:8f:93:1e:32:bc:20:23:5b:63:c9:a5:70:7a:9f:
95:2e:7f:eb:f1:64:14:d2:2a:13:b7:e4:1e:05:c6:3f:84:17:
09:71:c5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:42:57 2025 by rpki-client