Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
File: QIAlx94EAODzyI1KEioxfjLF4hw.mft (raw, json)
Hash identifier: 7a1MfSUFSnUW8Kbdd505iwC5GlKE1Y1PC+nTnxSWYko=
Subject key identifier: CA:F6:1E:72:54:B7:65:B1:E5:91:A9:41:19:EA:D0:1D:E1:8E:57:7B
Authority key identifier: 40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
Certificate issuer: /CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Certificate serial: 01964A7D11BEB8727367F5220D6C6283C6E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
Manifest number: 1501
Signing time: Fri 18 Apr 2025 20:00:32 +0000
Manifest this update: Fri 18 Apr 2025 20:00:32 +0000
Manifest next update: Sat 19 Apr 2025 20:00:32 +0000
Files and hashes: 1: GYkYwSyMjSff2hGRE7TeYNMjHAA.roa (hash: L63ZPeMKf3x9Sz6aPgJwaNunh2cW66rmUBDYxNx9F1E=)
2: QIAlx94EAODzyI1KEioxfjLF4hw.crl (hash: X5P0sTpP1H1svxfKhuiYszfEvfA19OmSW63P1XNa3fA=)
3: UauqkNEmM03HfyR0DfZ-u4VKpi4.roa (hash: awMAcPwR6G+MfeZBXCCLJ68VGxx4mPcomrMOc4HQztA=)
4: XuDenjm8kUtBAuV4QGpzOH7mGc4.roa (hash: JNV/wOADSaN3R96qV0GAYEvW10iJH7xuBlcwSDA4/FE=)
5: c1UFEngK3GGY1urY5KGBx69byP4.roa (hash: +n2tU72CIBGho6rrhlHMLTcRKx6Op/7dsiuNf5HzdOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7d:11:be:b8:72:73:67:f5:22:0d:6c:62:83:c6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Validity
Not Before: Apr 18 20:00:32 2025 GMT
Not After : Apr 19 20:00:32 2025 GMT
Subject: CN=caf61e7254b765b1e591a94119ead01de18e577b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a2:b7:30:53:11:32:28:d7:99:cb:df:f9:9f:
13:2c:1e:ec:fb:70:ae:2c:40:3a:11:ce:41:25:ea:
94:23:ed:63:38:3d:a8:12:ce:ab:f3:e8:33:bc:83:
6f:fc:eb:8d:8e:f8:bb:22:34:48:d4:70:4b:fa:21:
89:06:28:be:ff:07:eb:5e:6b:1e:1c:1d:3d:d6:88:
cd:35:cd:15:93:61:b4:ee:fe:49:9a:25:b7:c1:35:
96:ab:1e:8e:20:89:9e:53:9c:ad:54:bf:b6:f4:b6:
99:3f:e5:37:43:cd:84:b1:58:f4:ec:41:b1:8f:05:
fc:a4:9c:48:83:a4:b3:48:1e:16:4e:57:63:00:f5:
ef:79:8e:e5:e8:78:7f:10:38:54:05:06:7c:8f:a9:
81:04:39:7b:50:b5:f1:bd:d6:74:8c:ba:4e:34:e0:
02:27:e8:bf:45:a9:6e:8f:b5:e5:75:1f:5e:a6:90:
33:8d:ee:74:b0:d8:ec:9a:50:88:1d:eb:10:cf:ef:
89:f0:04:32:94:54:00:9f:c7:7c:9b:ed:2c:b4:fc:
78:c5:0f:18:b9:20:3e:37:55:db:ac:01:df:08:4c:
78:e2:58:ce:46:e0:0a:7e:2b:f5:1b:db:e3:33:6c:
52:c1:27:bf:6a:ca:1c:0a:31:6c:22:69:d5:22:29:
82:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F6:1E:72:54:B7:65:B1:E5:91:A9:41:19:EA:D0:1D:E1:8E:57:7B
X509v3 Authority Key Identifier:
keyid:40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:28:84:60:f7:33:bc:3f:20:6f:5e:91:0e:ed:bd:43:9c:8d:
35:a9:01:6a:ed:d2:f1:47:0f:54:c0:b3:d7:de:10:de:7d:9e:
f6:42:3c:f9:7e:32:d8:5e:77:3b:72:32:22:d1:b7:73:f6:9e:
e8:75:18:49:60:48:c1:47:b1:44:b5:8e:bd:5c:b7:7d:e9:32:
65:b6:36:06:1b:3b:03:c0:c1:33:3a:53:fe:31:95:5c:88:c6:
06:13:af:aa:6b:8f:8f:be:79:43:3d:66:e7:cd:f6:a9:fa:90:
0c:cd:19:cc:b8:25:a7:de:6c:a2:fd:5d:04:f3:80:f9:93:fe:
7d:fc:03:44:ce:34:de:ae:4e:89:56:3a:e1:2e:36:03:eb:f3:
0c:b5:97:4c:a6:00:cd:55:65:d7:07:5b:a6:ed:75:09:13:4c:
2c:71:70:06:45:1e:c5:8f:d2:97:85:25:c3:a3:e5:59:8a:76:
1b:07:64:fc:9c:de:a7:d2:1d:90:75:82:53:26:ed:ff:31:4c:
30:60:38:3f:7f:ee:c6:67:10:f4:f5:44:16:1e:25:25:bb:81:
01:3e:8c:13:6d:52:39:42:71:47:d8:28:c6:27:92:02:24:2d:
1c:c4:c9:f4:2d:7c:4f:79:3f:bd:d6:44:9e:e6:f8:34:0a:4e:
69:17:6c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:04:42 2025 by rpki-client