Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
File: qkTrCRs6M6h7644ASrFe8Xj7qgA.mft (raw, json)
Hash identifier: nBgXzpFRcsp4K71hhjfxiDiWSa3iX2ClCKsaJkMFiPE=
Subject key identifier: 37:3C:42:EF:21:2B:2C:26:6B:4C:76:1F:A5:4E:7D:69:85:DB:D5:BE
Authority key identifier: AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
Certificate issuer: /CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Certificate serial: 01965F4D21F09B965C8E465D786F5CD01B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
Manifest number: 0F7C
Signing time: Tue 22 Apr 2025 21:00:12 +0000
Manifest this update: Tue 22 Apr 2025 21:00:12 +0000
Manifest next update: Wed 23 Apr 2025 21:00:12 +0000
Files and hashes: 1: FeP6ktHBNaRwft0H-_e4k3vqEEI.roa (hash: x0ixEBGos8NpJoIqdvMzUdlrdo9lEdaYvD23JVoVtb8=)
2: X_mEYYeWr9-8-K3hPb_xZPAlhyU.roa (hash: 6DNXGEiBb6ULQJ057yIjE1b50LAb3WIwVPg+KL0u4Kc=)
3: gr0cSL9Z20uNppJqsYayd8a1gu4.roa (hash: wqIhk/QGRclb/eyqHZ1XVvBzFk7hoCkYPXEVOlH8doQ=)
4: qkTrCRs6M6h7644ASrFe8Xj7qgA.crl (hash: F3DkxiZsF2C1FHdcaruHKCCLQL8WGcFn1Oc9yLrGWis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 21:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:4d:21:f0:9b:96:5c:8e:46:5d:78:6f:5c:d0:1b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Validity
Not Before: Apr 22 21:00:12 2025 GMT
Not After : Apr 23 21:00:12 2025 GMT
Subject: CN=373c42ef212b2c266b4c761fa54e7d6985dbd5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:b4:d1:8d:f6:93:95:2d:a1:ee:12:57:c4:
09:26:1d:aa:5b:50:25:9b:f5:02:4f:1a:fd:0f:57:
23:02:b4:f8:31:d3:a6:8d:6b:98:b7:0c:6e:d0:71:
91:fc:83:ab:97:b5:07:8d:ae:a1:5c:3e:8b:7f:b5:
be:15:cc:09:6b:da:f6:fc:de:28:8c:2f:ef:08:64:
69:08:2d:02:af:b2:8d:65:85:fc:74:2a:aa:97:31:
0a:39:6a:0e:b6:97:cb:30:f8:c9:1d:4e:cc:e7:11:
ec:30:6b:55:dd:37:89:f0:f5:88:1c:36:11:be:4e:
07:64:96:2a:42:72:8e:0e:b9:5e:f4:25:76:6c:7b:
dc:85:6c:b0:52:fd:3b:ea:78:5e:4b:13:91:19:30:
10:d3:49:ef:87:a6:c5:53:3b:a1:aa:5b:3d:d5:a0:
55:db:b6:d3:25:14:3b:50:4b:49:7c:f4:a3:77:fb:
40:d0:9b:cb:74:bf:e6:36:72:99:3c:2e:19:b8:62:
c9:1c:29:77:4f:7e:d4:33:ad:12:d7:dd:cf:3b:d7:
bd:60:d8:b5:78:fc:a3:6b:14:f4:3a:06:2e:ef:cd:
e4:46:91:0e:a4:b9:4c:5c:91:4d:03:b1:f4:6b:d6:
cf:82:d6:ff:38:6b:72:b9:13:bd:44:12:bb:06:f4:
d8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3C:42:EF:21:2B:2C:26:6B:4C:76:1F:A5:4E:7D:69:85:DB:D5:BE
X509v3 Authority Key Identifier:
keyid:AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:bb:aa:ef:69:c8:86:e4:84:8e:07:2c:00:72:a2:ca:aa:ec:
e9:3f:8e:99:4c:ac:fe:ad:91:b3:64:ad:0d:90:b9:de:b4:33:
eb:dd:72:52:0f:99:2a:c1:22:4b:23:ce:98:f4:08:33:53:87:
19:ae:f8:c4:61:31:c5:1d:63:d2:53:a1:d4:94:21:51:e6:2e:
23:b8:32:3a:5f:51:21:be:86:68:ca:4f:42:05:f8:6d:c4:0a:
7e:18:f4:52:1a:2d:69:35:8c:93:96:c4:0e:69:45:96:7a:96:
b6:dd:64:bc:b9:d2:e1:c2:ad:a0:09:5e:7c:65:32:a0:1d:3a:
ef:bb:f8:81:e0:c4:61:fa:07:e3:b2:be:b5:ee:24:04:c3:1b:
14:a9:be:a1:fc:1b:83:af:2a:bc:45:11:8f:cf:6e:93:65:07:
38:b9:2a:7c:6b:48:2f:2b:bc:2b:32:a8:7a:31:65:2f:b9:20:
c3:2e:a8:3b:bb:82:a0:2b:aa:d8:54:75:fb:15:2c:b1:d9:e0:
3d:1f:97:2b:87:24:c3:b7:07:ab:e6:a3:c2:d7:68:a2:18:bd:
a0:36:93:17:ed:65:33:37:8c:8d:6f:f2:7c:1b:cc:52:ec:88:
5b:a6:1c:3e:68:02:22:4a:9c:9e:06:94:65:7b:6b:d2:59:8a:
a5:78:49:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 07:04:16 2025 by rpki-client