Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
File: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft (raw, json)
Hash identifier: waB8AjpEWYT0ngLBtEaj4gxjzWPHCbm+Everf1MtOzs=
Subject key identifier: CF:92:72:BB:4B:7C:0C:3B:96:F4:B1:30:05:4E:87:87:C3:6A:AA:40
Authority key identifier: A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
Certificate issuer: /CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Certificate serial: 019611A14168FEB7A58D45389786F74062C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
Manifest number: 14DC
Signing time: Mon 07 Apr 2025 19:01:42 +0000
Manifest this update: Mon 07 Apr 2025 19:01:42 +0000
Manifest next update: Tue 08 Apr 2025 19:01:42 +0000
Files and hashes: 1: N5E83UpLjMoi8mpIjadF8EBEZHc.roa (hash: cZc2s8T64g7zUGVGUfnt3YLhqIDpL+dicIuuj0vLjiE=)
2: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl (hash: TZGjCXKHG9D26G7xN8p3Z70XQR/MwHOlWlKxpqpm4X8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:a1:41:68:fe:b7:a5:8d:45:38:97:86:f7:40:62:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Validity
Not Before: Apr 7 19:01:42 2025 GMT
Not After : Apr 8 19:01:42 2025 GMT
Subject: CN=cf9272bb4b7c0c3b96f4b130054e8787c36aaa40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:50:f6:fb:83:ef:ff:2e:4c:86:9f:5a:4d:02:
bf:2d:33:a8:ec:e0:46:5e:92:45:67:25:20:6e:d1:
36:50:42:2d:99:31:94:ff:5a:07:1c:f1:5f:14:6c:
1e:0b:3e:df:bc:12:9d:6b:10:66:22:e6:73:cc:87:
e6:27:e0:c4:a8:59:d3:54:7d:e4:47:15:b9:d9:92:
14:82:09:b6:f3:a6:19:28:af:30:a6:1b:81:3d:fe:
00:d9:9f:08:97:0b:74:57:27:3d:08:63:a5:a9:c1:
91:ca:27:5e:40:9e:5e:3f:f5:3f:ba:97:06:2c:fa:
f4:f2:b5:79:1a:ab:0b:01:fb:bb:1d:fd:a7:c1:93:
30:d7:5a:d9:67:fe:99:1b:70:16:cc:76:97:1b:18:
32:c4:5a:27:aa:65:c3:3d:46:4e:4c:28:7c:a6:82:
b5:94:51:23:af:31:2c:c5:25:30:d1:4f:67:74:72:
e8:1c:13:b0:52:db:bf:4f:ed:86:a3:5d:da:c4:64:
b5:ea:df:83:50:aa:ca:6e:4b:52:02:00:b1:fa:07:
2d:cf:ce:89:f9:4d:16:18:18:a3:b1:4c:2f:bc:80:
dc:d4:17:35:8a:dc:58:71:bb:1b:59:88:e0:fc:c4:
dd:4b:5c:6e:d6:6b:ac:cc:22:3f:f1:dc:9c:20:6a:
9b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:92:72:BB:4B:7C:0C:3B:96:F4:B1:30:05:4E:87:87:C3:6A:AA:40
X509v3 Authority Key Identifier:
keyid:A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:2c:fa:3d:d5:6a:d0:80:c4:bc:b2:95:54:77:6e:db:cd:78:
a2:7b:62:0c:3b:5d:fd:2b:21:ed:cb:f0:13:3c:dd:59:9a:54:
d0:eb:a3:32:dc:6c:a1:41:2d:66:f2:95:0a:ac:5e:71:29:a6:
ea:cd:99:42:42:cd:33:e8:a8:50:a5:e7:1a:9a:86:6a:cf:cc:
6d:f5:7e:b2:5c:b2:4a:11:0b:95:27:dc:85:fa:6c:cb:31:50:
38:22:c8:07:6c:d2:65:db:92:cf:96:84:86:12:90:e4:07:31:
d3:6e:36:22:c3:39:70:1c:ec:e0:94:bb:30:3b:eb:90:9b:27:
44:3f:ac:8c:ab:ac:60:b3:c9:da:53:79:54:86:47:cf:ff:fe:
55:24:fd:a0:b7:5c:51:d0:a8:40:24:d2:90:72:dd:6f:49:87:
c4:71:62:fe:2a:51:c6:29:82:44:52:0d:bd:82:28:88:24:4c:
ae:b5:ba:e3:2b:65:4e:15:f8:66:cb:e3:d9:63:b2:7f:90:3e:
b5:b9:bc:b4:8d:f2:95:08:55:67:36:5f:1e:a3:61:d8:52:14:
dc:5b:67:ed:b9:54:83:ab:42:72:d1:61:1c:f8:f6:a2:c1:4d:
8e:6e:7d:52:f4:0a:12:7f:4f:f6:42:0a:c1:a6:86:96:72:bd:
38:e7:91:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:44:01 2025 by rpki-client