Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
File: QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft (raw, json)
Hash identifier: PfcPtJ/MVPjtWdjrYTZZMGm2GJ5eTsRMrVtTVZTCUPY=
Subject key identifier: 90:4B:59:05:F2:65:D7:EC:F8:1B:E5:35:A9:63:5E:BA:43:F0:B2:47
Authority key identifier: 41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44
Certificate issuer: /CN=418df868f7d9e98d4fd41e6da597a283c9141b44
Certificate serial: 01964DEBAF76393FE97CAE6C40BAA7ACC41C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
Manifest number: 14FE
Signing time: Sat 19 Apr 2025 12:00:13 +0000
Manifest this update: Sat 19 Apr 2025 12:00:13 +0000
Manifest next update: Sun 20 Apr 2025 12:00:13 +0000
Files and hashes: 1: NrBghBDxVUP3b8K-s4QfPajtoEw.roa (hash: PXmrD91Lu77kd9R7RmMEPIR9q62nZX3KSQVZITYjO7o=)
2: QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl (hash: sabBJW/Ll9JP4MJJ6nyrB660PppW/VQ0PvsYtqGNWbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:eb:af:76:39:3f:e9:7c:ae:6c:40:ba:a7:ac:c4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=418df868f7d9e98d4fd41e6da597a283c9141b44
Validity
Not Before: Apr 19 12:00:13 2025 GMT
Not After : Apr 20 12:00:13 2025 GMT
Subject: CN=904b5905f265d7ecf81be535a9635eba43f0b247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:87:60:5d:3f:2c:78:bd:40:ea:6e:4d:64:ef:
87:55:bc:90:e9:75:78:df:99:ed:fd:0c:f8:8d:2f:
37:5b:09:17:74:16:e4:38:19:da:00:43:b8:f9:eb:
8b:9d:96:5d:6d:1b:42:0a:cc:27:0b:7b:53:d2:9c:
c8:00:15:be:1f:8b:22:ca:e1:c8:6b:a6:54:06:2f:
a6:58:b5:fb:d5:21:8d:fe:b3:0f:9a:c9:32:5f:82:
db:bd:79:26:10:3b:4e:fa:6d:d2:02:2d:0a:41:9e:
26:81:21:23:f4:30:60:74:55:d4:53:de:b5:39:89:
50:b9:34:16:06:5a:ae:b9:2f:37:d8:a9:d2:c9:6d:
8a:bc:86:7a:35:ab:7f:57:a4:ba:26:76:8a:32:91:
13:81:cd:ba:52:c1:15:0a:17:6f:7e:59:df:27:65:
7a:5c:7d:2b:b2:1b:91:d5:79:26:69:48:1d:5b:3e:
47:98:ea:55:9c:cc:01:69:4b:6a:fe:ae:ee:eb:ad:
5d:98:b5:9f:15:89:70:3c:90:85:eb:62:d4:00:90:
56:94:35:5d:21:ee:05:f1:80:94:ad:de:ef:dd:9a:
71:2d:b2:e9:a6:ce:a9:a9:f7:64:57:41:e7:57:57:
38:89:2b:70:b0:c6:99:fe:60:42:d8:4e:80:a6:7e:
6c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4B:59:05:F2:65:D7:EC:F8:1B:E5:35:A9:63:5E:BA:43:F0:B2:47
X509v3 Authority Key Identifier:
keyid:41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:1f:51:0e:75:31:f9:5a:af:f9:b4:04:a9:38:cd:f1:16:9d:
65:15:3f:f4:e2:8a:c9:40:a3:5f:8d:82:5f:e2:ea:5f:5c:3a:
01:97:63:1d:fc:25:d6:e9:03:6c:b2:0f:25:1f:19:dc:b1:24:
bd:6f:91:a1:7c:4c:40:7f:25:d6:37:17:53:9f:de:82:de:ee:
ad:ed:21:4b:ac:cf:50:37:50:b5:b5:47:e8:8a:4d:0a:c7:c4:
33:d3:b6:47:68:2f:54:31:e2:55:39:28:e1:70:29:bc:19:c0:
b8:ce:cd:2e:09:53:77:35:3f:ac:75:85:16:69:ba:83:00:67:
12:3e:db:bd:3f:c7:21:2b:dd:41:fd:a9:ba:70:a6:8c:27:a0:
5a:8f:9a:16:86:14:4a:27:f3:12:69:6c:51:cd:51:22:87:b9:
fc:a4:bc:68:39:1e:c1:70:ff:09:27:a8:db:21:7c:24:95:96:
03:e5:52:8f:a8:f2:fc:9d:99:ac:2b:14:b5:67:aa:d4:c0:76:
0c:9d:e1:b3:c2:76:86:ec:e9:80:1d:aa:df:c9:53:6a:25:92:
f4:88:de:13:36:b6:3d:71:c7:73:29:80:a5:f5:49:57:55:3d:
96:43:92:de:1c:01:4b:2d:e1:44:c5:06:90:0e:d0:2c:09:60:
7e:ac:dd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:31 2025 by rpki-client