Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
File: qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft (raw, json)
Hash identifier: pGFuk+jy7p5aVqgq5wvkTlL8lk+KdRq10QsCJetHAkM=
Subject key identifier: DC:E6:B3:86:B4:0A:92:A8:72:C8:79:FA:EC:A6:9A:DE:9A:72:F2:EB
Authority key identifier: A8:45:70:85:4F:E8:86:B9:4A:E6:25:36:3C:62:5D:DA:60:BB:3E:FC
Certificate issuer: /CN=a84570854fe886b94ae625363c625dda60bb3efc
Certificate serial: 01958BBB2BFE6FB093E9E9E2BAA91CBE16C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
Manifest number: 1428
Signing time: Wed 12 Mar 2025 19:00:54 +0000
Manifest this update: Wed 12 Mar 2025 19:00:54 +0000
Manifest next update: Thu 13 Mar 2025 19:00:54 +0000
Files and hashes: 1: jdn52CanAogysSSsHvxl8oKYqEU.roa (hash: nA6uVwF0uVARnhrLjCGdNBrWcovmnCAcVghKvtj+qwk=)
2: qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl (hash: Lf8T75KP5xdX+b/PhnzIQXKNk1twOcWa3FdZdEGTau0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:bb:2b:fe:6f:b0:93:e9:e9:e2:ba:a9:1c:be:16:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84570854fe886b94ae625363c625dda60bb3efc
Validity
Not Before: Mar 12 19:00:54 2025 GMT
Not After : Mar 13 19:00:54 2025 GMT
Subject: CN=dce6b386b40a92a872c879faeca69ade9a72f2eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f3:7e:da:ca:f8:2f:c8:84:e6:60:a0:58:a9:
10:20:0e:05:7e:6f:7c:7b:d9:17:e2:ad:e2:50:d5:
45:5d:11:f8:a9:42:6b:0b:77:81:87:8e:11:51:b3:
b4:91:d2:b2:35:50:f4:58:ad:3a:fa:87:51:74:0d:
33:37:1a:85:fd:d7:3d:e9:61:6f:55:5d:2f:c1:ed:
42:0a:25:db:69:8d:f6:b3:4b:3f:65:8a:47:88:26:
f5:d8:15:9e:1e:d7:1b:7e:1d:a8:2a:52:12:f3:37:
f2:5c:37:37:27:57:61:b0:22:87:3f:dc:e6:f2:f5:
b7:6c:07:96:4d:f3:9c:a0:5f:30:18:b0:9e:31:c0:
72:8e:5a:46:ea:1d:d5:86:0b:58:98:4a:2e:70:32:
1d:ae:b8:b5:22:c1:66:ac:4a:fc:16:a3:9f:ef:12:
69:c8:22:a6:92:8e:bc:85:85:eb:79:16:aa:6c:35:
28:55:14:2c:09:d5:b4:7c:36:9e:dc:0b:63:f5:0b:
32:1f:19:8f:f5:e6:8b:1e:23:68:26:ae:5f:da:f7:
1b:07:5a:7e:ab:f9:95:3c:5b:c2:9e:5e:f9:c0:e3:
92:49:cf:c1:bd:d7:ea:9f:b8:c3:66:ae:ca:86:3c:
3e:72:b7:a2:4f:04:c3:e6:c0:cf:2f:72:e1:77:91:
15:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E6:B3:86:B4:0A:92:A8:72:C8:79:FA:EC:A6:9A:DE:9A:72:F2:EB
X509v3 Authority Key Identifier:
keyid:A8:45:70:85:4F:E8:86:B9:4A:E6:25:36:3C:62:5D:DA:60:BB:3E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d3:d0:ff:d9:50:27:a3:e5:1d:01:56:d7:20:04:72:72:9d:
6a:60:3b:09:a5:99:ae:78:6e:c9:58:7d:5a:dc:d5:25:26:09:
5d:7e:d4:f8:92:f5:3d:a8:5b:4d:ca:0a:79:05:cb:46:32:4b:
d0:22:81:cf:fa:03:50:d3:0c:20:3d:72:7a:bf:1a:e9:7e:f3:
f8:2d:f6:07:80:00:8f:a1:43:f4:09:7d:50:ae:16:78:00:59:
d8:d1:42:40:29:66:de:39:7e:26:a7:71:48:16:6b:1d:e3:b9:
ae:f2:28:94:4f:8d:64:e0:73:74:67:b5:2f:75:75:17:c1:d1:
07:99:40:30:9f:ce:67:75:20:5d:55:48:bd:d1:61:e6:75:78:
4d:77:10:10:91:55:15:b5:ec:19:22:a2:d4:f9:4b:07:42:8e:
3f:5b:a3:c3:be:9e:fd:2b:27:ea:25:83:94:6b:48:b5:ef:e2:
4a:9e:e3:5c:ca:e0:4c:e4:94:75:b9:cd:30:26:90:e8:ad:c1:
6b:cc:76:69:53:4c:14:b7:50:12:e5:90:e7:8e:0c:95:a3:6b:
de:95:e5:9c:6a:bd:32:af:ca:56:7f:d1:65:4f:52:38:c9:61:
ca:8d:42:c1:e6:5a:82:40:91:e2:0a:76:6a:33:2f:c4:52:41:
21:b8:77:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:18 2025 by rpki-client