Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
File: q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft (raw, json)
Hash identifier: 832Cqer2e4k2mvg0PbMAv8TSyTspMkJskX9rQombh6g=
Subject key identifier: 8C:1B:57:84:E0:AE:3E:62:19:0D:68:8B:2C:C0:40:5D:06:7B:56:C2
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial: 0196157DC882D47EE97B945384E49C0C1E06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
Manifest number: 14FA
Signing time: Tue 08 Apr 2025 13:01:26 +0000
Manifest this update: Tue 08 Apr 2025 13:01:26 +0000
Manifest next update: Wed 09 Apr 2025 13:01:26 +0000
Files and hashes: 1: F9Xe_7jgOYvdTNT9YC7uc1m7clw.roa (hash: dbf14IPOhGmAOgdUCZzI8fhPd/ppi3DXyc8q1YDOSJo=)
2: HncO7o0Hx6kmO3BNCUVPbF42-m8.roa (hash: /pA5z2SwqwvGDpyWUHOM2Fy+nufCkYimVU2as7hvZq8=)
3: NiqjOlNTXM20fr7bb_Hu7fNVpnk.roa (hash: WMjXZpt8cy+IOzVtTivSuKAcQFZieAhNSlute/PEdJQ=)
4: VUze8_1n74uVa_uD6F7A6AioYKM.roa (hash: ugq/e8QeF0wIWa9W8bf0Wvpu26TSdCjGX0yCM4f1o1k=)
5: _PaUGjvJShI2nma6rn1q_5nZsbw.roa (hash: IISCWbKH8fVMYSEIH2kdkWijGfyVlaENW4tYYQwgOus=)
6: f7reVcrHhHE-i0os8pjDmr_KSH4.roa (hash: jXh5JkKzxulogW8DJqArisPnpXo5ZeSQOy/vsvzYL7E=)
7: jJkmu95ExwTShGBJvsJR7aBhoPU.roa (hash: nz14VG6Wmam+OFYqgavV7ACmkDO4KpLptIyk8PePgL8=)
8: q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl (hash: dxCHbonUFuhATFTyzpu2Qg+37zD6CM4XxNy+EpxMNxo=)
9: vJ-NNcH9s58i_6pVtY2137W58sA.roa (hash: gaXJVcSt6ugw0X061/2eBl5dxytqTi7AFjDEgazcu8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:7d:c8:82:d4:7e:e9:7b:94:53:84:e4:9c:0c:1e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Validity
Not Before: Apr 8 13:01:26 2025 GMT
Not After : Apr 9 13:01:26 2025 GMT
Subject: CN=8c1b5784e0ae3e62190d688b2cc0405d067b56c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7d:c8:3d:bd:50:95:87:20:be:34:bc:47:07:
9c:d0:6d:dd:d7:db:5d:d5:a3:68:7c:7c:34:7a:48:
be:2e:e1:8d:f4:e4:2f:fd:0e:68:53:77:b1:55:eb:
bd:df:3d:01:8a:fb:55:95:64:39:b7:cd:11:d6:bb:
3a:b0:f5:90:6b:35:34:b9:bd:89:6d:08:65:0c:dc:
90:fc:38:26:71:95:a4:cd:a5:7e:da:4b:73:da:9f:
77:43:b4:3d:55:2b:e0:7e:b0:b5:54:c7:e6:fc:08:
43:10:6c:9f:44:91:93:e8:b1:0f:ff:dd:82:75:37:
95:fa:66:94:12:30:8b:9c:94:55:8f:ce:eb:b5:7c:
67:52:56:d0:9b:0e:4f:35:42:2e:88:a7:6c:c9:a1:
d8:53:ad:e6:8e:99:83:c6:82:ec:66:99:f4:76:ea:
bf:54:87:48:86:de:ce:d7:ae:2d:d5:04:47:78:09:
b2:b4:92:b3:65:4d:53:5e:cc:a9:8e:be:c4:04:59:
e9:e9:ec:e5:f5:8d:2b:ab:6a:76:4b:68:34:1a:ef:
70:2b:90:28:58:79:63:b1:6d:d0:0f:13:09:c3:7e:
5a:0c:d5:3a:90:74:bb:a1:d5:c7:13:28:32:85:03:
b4:6e:8e:e2:d7:b3:19:f2:96:29:7b:57:02:44:be:
16:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:1B:57:84:E0:AE:3E:62:19:0D:68:8B:2C:C0:40:5D:06:7B:56:C2
X509v3 Authority Key Identifier:
keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:7f:4c:c4:a0:c3:99:05:b9:9a:c0:e9:5f:3b:8d:61:3b:7f:
ba:e3:1d:42:91:8c:69:ff:24:a7:ec:c7:be:e0:0d:63:b2:46:
b4:00:93:03:af:62:9a:05:84:c3:7c:ce:31:be:02:60:a5:87:
80:05:d9:b6:20:d6:33:47:5e:02:fb:38:a4:d9:cb:07:34:e5:
0b:b1:d5:94:78:f2:7b:5e:82:af:b4:18:06:23:1f:82:35:a9:
dd:1c:03:9a:ce:9f:4b:ab:99:93:10:da:10:75:d2:5f:98:74:
e7:06:06:dd:8a:10:37:f7:1a:f1:0a:22:89:25:f1:42:73:c3:
51:d6:20:c9:3f:0f:06:54:c1:56:6d:6d:b2:4f:56:ca:a3:fe:
04:1e:66:02:44:0d:21:ad:bd:7f:4b:62:71:ad:b3:60:31:16:
72:2e:5e:e6:87:b9:db:df:9e:7e:64:1d:e8:ba:09:47:49:1d:
b7:c4:8b:70:bc:05:f3:81:70:8e:28:24:68:d7:cf:00:5a:45:
34:c7:61:d7:30:c9:9a:df:79:44:27:70:c3:99:6c:a2:83:c8:
d6:fb:bc:5f:9b:d1:e7:58:b8:1e:38:93:91:63:1f:71:8c:f0:
d4:61:9d:55:5c:6a:f1:f7:83:0d:6a:b0:c6:70:b0:95:1a:d9:
45:91:d7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:39:13 2025 by rpki-client