Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
File: qexXvIRk_sLpobCY_840whqvnKY.mft (raw, json)
Hash identifier: QoLSm6oe5LL/fsp5JuD5RfnWnstQZyiKXEjPoo/o+is=
Subject key identifier: 6F:1C:01:A8:B9:D4:BE:43:58:2E:69:32:5E:D0:AA:1A:95:24:E7:E5
Authority key identifier: A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6
Certificate issuer: /CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
Certificate serial: 01960FB2BF254252F46908E159155EF30006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
Manifest number: 14E2
Signing time: Mon 07 Apr 2025 10:01:34 +0000
Manifest this update: Mon 07 Apr 2025 10:01:34 +0000
Manifest next update: Tue 08 Apr 2025 10:01:34 +0000
Files and hashes: 1: 1-CZEw8pGGdh9Gwph40yHsdoq1ag.roa (hash: C4R2UwFpzsqxbaKGdNIAuHg0NhGWKQyDYz9JMjta9y4=)
2: KkLe_YT5Uk0GdABl6GPnDWFGMNQ.roa (hash: aAELh0L1Pt+xus/0OHPywPbhavPNQTpi8tpROW9r5vw=)
3: bvkEOSa8BWLrsJXoOS6vPdUb-3o.roa (hash: avVdlCWpdgw57lZLBjVHwn93ctSM7J2JECKH0ZE6DSs=)
4: qexXvIRk_sLpobCY_840whqvnKY.crl (hash: pKPcz4C2tfrfKVtzlh/0i7qJZzx5Iu/Wo31YqmeCs0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:b2:bf:25:42:52:f4:69:08:e1:59:15:5e:f3:00:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
Validity
Not Before: Apr 7 10:01:34 2025 GMT
Not After : Apr 8 10:01:34 2025 GMT
Subject: CN=6f1c01a8b9d4be43582e69325ed0aa1a9524e7e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c5:82:4a:be:21:75:7e:4d:7a:67:49:21:e5:
12:be:9b:3c:e5:f4:0b:6a:56:73:7d:fb:11:08:fa:
47:ef:f2:0d:3b:38:b5:37:e7:7e:72:24:58:33:73:
7d:1f:36:c9:f3:07:29:80:3c:81:2c:71:cc:e3:e8:
69:69:2d:26:10:05:80:c0:50:e7:1a:73:f1:ff:8c:
8e:ee:c3:4e:3c:93:62:0f:45:ef:71:3a:92:dd:0b:
16:73:14:cc:a2:63:53:ca:ae:71:9c:ce:7b:d7:35:
2f:09:d1:78:2b:d8:99:70:55:3e:96:9c:c7:77:26:
da:d9:64:92:3d:47:b0:2d:e9:10:3d:58:e7:1f:37:
bc:9a:69:31:bd:c3:70:06:63:cf:79:ec:5c:74:4a:
57:b1:67:22:a1:c2:46:36:c2:21:36:fb:1e:be:e4:
3a:c8:09:41:bd:0a:80:08:83:93:5e:4e:c6:79:50:
ec:b5:20:b8:09:dd:36:36:47:b2:fc:1a:72:5e:8e:
44:86:ae:17:f4:3b:c7:34:55:57:a4:02:98:63:b2:
9d:13:37:57:bc:3b:03:f3:e2:f6:1f:f3:11:59:d3:
ca:fa:58:b7:6b:f0:79:b3:c8:cb:14:a6:7a:4d:68:
e3:32:58:6b:54:67:d5:41:13:54:f9:df:c8:ab:10:
42:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1C:01:A8:B9:D4:BE:43:58:2E:69:32:5E:D0:AA:1A:95:24:E7:E5
X509v3 Authority Key Identifier:
keyid:A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:58:0a:23:41:00:3b:ae:ac:5d:2f:41:d2:07:e1:ce:69:14:
b0:f2:cb:ce:70:25:fe:9e:ec:64:e7:9a:76:66:68:fb:44:ce:
52:a8:a6:1a:b6:d0:f5:11:3e:04:27:02:02:67:b3:1c:28:6f:
44:b5:4f:c0:01:5c:5a:c6:2a:bb:9f:16:c9:de:fd:54:81:a7:
d3:88:8d:2b:01:1f:d5:d2:49:7f:16:cd:34:c7:a5:0b:e1:c6:
5a:6c:a5:8c:20:b0:46:81:b9:2e:9b:fe:7f:5d:2d:da:a0:89:
2f:97:6d:bf:d2:48:44:77:e5:cb:31:36:4b:ea:f4:30:c2:6d:
9f:e5:07:3a:8c:ab:06:b9:55:3f:0b:aa:cb:03:12:6f:06:5a:
49:eb:a4:94:70:ae:7b:83:e2:24:57:0a:ab:c1:02:78:a6:7e:
79:66:cd:3d:76:da:e1:30:23:bf:98:cb:3b:13:e5:f0:c7:9f:
03:28:0e:52:8e:7c:4f:00:c6:32:07:b3:85:ad:da:6e:5e:55:
f0:00:02:31:b5:39:fa:53:d4:72:f3:b2:9a:44:4c:28:54:88:
1b:5e:92:70:4b:38:0d:5c:83:2e:b1:44:82:4a:79:c8:62:07:
aa:28:10:14:27:f2:fe:9f:06:83:90:e3:01:dd:3a:b8:d8:82:
fe:19:bf:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:45:07 2025 by rpki-client