Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
File: QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft (raw, json)
Hash identifier: +kBDkfuBJm0dtjVe2xSJAlfGXTRRl016tErTpYruNd4=
Subject key identifier: 3F:34:07:7E:24:FC:58:85:AD:E1:54:5F:29:4E:94:61:09:DB:D2:EF
Authority key identifier: 40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
Certificate issuer: /CN=4003350bcc7b540fadea951e046081d8da06c145
Certificate serial: 01958FCF2ABB11011ED2601722A0CA0498EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
Manifest number: 0672
Signing time: Thu 13 Mar 2025 14:01:13 +0000
Manifest this update: Thu 13 Mar 2025 14:01:13 +0000
Manifest next update: Fri 14 Mar 2025 14:01:13 +0000
Files and hashes: 1: QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl (hash: vClGdqNIipF/9gN7rabQSc5oPMUjDwUh5l5SU4iw4cI=)
2: pqlsmAxEb6u37QxzF6qCzpQ4SBk.roa (hash: teI/DPbnnC6ro04KC4yzmzn/SS2I9ht6+3TdoQMOA3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:cf:2a:bb:11:01:1e:d2:60:17:22:a0:ca:04:98:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4003350bcc7b540fadea951e046081d8da06c145
Validity
Not Before: Mar 13 14:01:13 2025 GMT
Not After : Mar 14 14:01:13 2025 GMT
Subject: CN=3f34077e24fc5885ade1545f294e946109dbd2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:db:65:7a:c3:8a:c5:82:0f:34:fd:0c:22:70:
5e:07:0d:8e:80:58:a5:1a:8a:73:41:a9:54:66:ab:
42:5b:4b:9e:42:43:c0:48:33:13:92:af:a1:4c:b8:
ca:b6:da:fe:a5:c6:df:35:d9:c2:54:a4:43:71:3b:
3b:12:05:02:a6:04:e2:73:19:6d:4a:57:a0:50:9e:
9c:70:f3:39:0d:ff:a1:67:52:7d:55:b3:51:08:67:
08:b1:5c:00:03:4a:03:a6:e3:91:f8:fe:38:1f:bc:
31:93:14:f7:f0:2b:55:0a:fa:12:7d:15:ca:4f:5c:
a5:3c:f5:a8:d0:42:49:a4:91:d5:41:4e:e7:c1:ec:
0d:5c:c3:f8:6a:4c:94:bf:47:d7:86:19:29:08:2f:
38:4c:03:dd:91:26:8c:2f:72:e8:60:05:be:d1:63:
4e:dc:3f:6b:62:ec:7a:c7:c7:c1:c2:bf:bd:24:c0:
7f:15:16:88:a1:45:bc:f7:75:ee:3a:5a:be:ae:7e:
84:c0:79:60:7b:28:85:00:be:31:3a:86:de:f2:ba:
88:4c:25:3e:ca:81:6f:2e:9e:27:b6:ca:5f:01:5d:
2f:68:ab:fd:b9:49:8e:af:13:87:35:a8:91:31:c5:
bb:d2:1e:0a:cf:2e:cd:dc:67:08:f9:84:f5:eb:13:
18:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:34:07:7E:24:FC:58:85:AD:E1:54:5F:29:4E:94:61:09:DB:D2:EF
X509v3 Authority Key Identifier:
keyid:40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f3:a8:cf:f1:03:d5:cc:f2:33:d0:67:53:1f:5a:46:77:04:
0a:07:41:b7:ad:a5:af:57:6b:6b:9a:bc:1f:7c:2a:ad:fd:d7:
ea:c0:9f:9c:2c:b2:5d:10:eb:f3:13:a3:8e:dd:93:88:fd:cf:
57:31:9c:6c:9a:78:cd:d0:bb:ca:63:e8:53:0e:63:2c:ce:12:
2c:4b:64:48:2d:62:f7:9e:24:05:0a:92:0e:02:f1:5d:e7:b2:
45:5c:b4:be:76:47:d2:6d:8d:f1:30:bf:af:d4:ea:6c:cb:e8:
cc:98:a1:c4:ee:d4:d7:ca:49:47:b7:34:c5:cb:0b:06:82:01:
48:dd:d0:0f:2a:38:e5:a4:84:a1:43:16:1c:b1:63:cb:04:de:
37:51:5a:59:eb:cd:88:9a:d1:46:08:41:6b:54:24:02:4f:fb:
26:d1:7e:26:39:a3:1a:32:f5:eb:2d:48:18:8f:b7:14:d5:16:
65:4c:09:aa:7d:5e:eb:8c:07:0a:01:89:50:29:03:d9:c4:ed:
fe:be:44:fe:ee:fd:ea:3f:d5:fe:fe:1d:57:48:c2:e4:a3:94:
4b:b6:cd:1b:de:bd:c1:a9:b3:1e:ff:1e:37:1a:60:2c:e6:47:
40:12:f4:76:3c:dd:81:c7:03:55:25:74:78:7c:6a:60:43:9a:
59:7e:09:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:40:32 2025 by rpki-client