Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
File: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft (raw, json)
Hash identifier: ymEIXgSesaSZjIXaWBQKOYicd63/tAJqrI317kefd9I=
Subject key identifier: 53:88:51:84:63:BA:1F:6C:EC:4D:A5:58:87:D7:2B:84:4D:EB:05:81
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial: 0196127D82FC633231D22300AB724A52FDED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
Manifest number: 14FE
Signing time: Mon 07 Apr 2025 23:02:17 +0000
Manifest this update: Mon 07 Apr 2025 23:02:17 +0000
Manifest next update: Tue 08 Apr 2025 23:02:17 +0000
Files and hashes: 1: 56-izg9fvz7DtMwkbjrRGx7K9M4.roa (hash: UW2kU7AwmdpcAwGnmK9hJHFYl7KIrM5tCoKFpCYSKow=)
2: BiaUFI7mtFx6GB0CmBa8l0IOo0g.roa (hash: /FrgqG1qWdI6mz/HTI3qK99IFRPgqld4Cs8VDMzu47s=)
3: IyYUpKw0--_xTxRl9d3th5rv4g0.roa (hash: K/UYIV6b9yF/7WAvBYAC99C040cplsRzeBT0uVL7Sj0=)
4: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl (hash: Qq4M+jInWiwZcpkwNx8Wp5R4eLtP03LQ9wwVTBCPbSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:7d:82:fc:63:32:31:d2:23:00:ab:72:4a:52:fd:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Validity
Not Before: Apr 7 23:02:17 2025 GMT
Not After : Apr 8 23:02:17 2025 GMT
Subject: CN=5388518463ba1f6cec4da55887d72b844deb0581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:be:b0:79:d4:7a:7d:1f:73:b5:cc:05:1e:91:
f5:23:2c:ca:8d:02:b3:5c:81:4e:c0:40:b1:8c:99:
3d:bf:1e:3e:9a:2c:a0:41:27:7e:93:7d:e9:85:ed:
d4:a7:94:b2:64:e1:30:3c:ad:2b:ec:0b:f2:3e:9b:
94:26:b4:66:1f:b2:54:96:53:06:ac:01:12:c4:34:
b2:a7:09:ce:aa:04:79:37:5d:b6:8c:8e:d2:f6:72:
18:3d:f6:3c:8f:7a:de:8c:c2:ff:d9:4e:27:92:24:
6b:11:72:1f:b1:92:96:e4:51:6f:30:b8:c3:a4:67:
d9:2e:02:83:0e:ec:af:e6:d6:a6:11:39:d7:63:f7:
c8:6c:60:d1:01:3b:d5:4f:fa:f3:be:3e:22:54:86:
e5:71:ba:c8:53:15:79:46:93:3b:7b:34:db:59:87:
e7:70:bb:85:07:20:f1:f8:6b:da:87:61:fa:d8:57:
ad:c5:e0:2a:18:7e:99:b5:ab:d9:ec:61:87:ba:4f:
23:92:a7:b1:66:ad:5b:85:bd:b1:9f:b0:60:98:c6:
07:fe:9f:3c:a1:f0:05:9a:93:a1:ba:e1:b6:04:cc:
d4:14:00:02:06:45:f4:ad:65:dd:7d:17:76:73:e0:
7f:d9:ef:ae:22:a6:26:1a:a3:88:4b:23:78:33:c0:
ab:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:88:51:84:63:BA:1F:6C:EC:4D:A5:58:87:D7:2B:84:4D:EB:05:81
X509v3 Authority Key Identifier:
keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:5e:f9:f5:09:43:bf:2e:35:84:c7:d0:73:2b:43:58:bb:32:
33:f5:7c:0c:c5:2d:e8:ba:a7:15:82:1e:e1:44:27:aa:3b:43:
a8:17:06:44:0f:e0:a2:9d:d9:73:b5:ec:0b:81:05:aa:4b:e0:
db:1c:d7:b6:0d:82:24:b7:31:15:d6:0a:ad:a3:64:c8:42:8f:
af:9f:fd:2e:57:d8:9e:a6:8b:a9:05:dd:20:77:e4:89:03:28:
b8:c5:cd:94:5e:dc:7d:41:10:bb:60:16:7d:57:2e:50:a4:8b:
df:b1:20:42:b2:4e:71:e5:90:ee:4e:7c:63:92:ee:8b:9e:8f:
54:bc:bb:b1:f5:78:93:38:8b:de:a1:18:cd:ec:12:bb:73:dd:
9a:86:95:45:04:c7:cd:9f:08:ad:e4:74:bb:47:0d:99:98:76:
61:df:de:87:f7:51:aa:8f:d7:d5:0d:3f:9a:ba:23:41:d2:0e:
aa:ce:a5:a6:45:90:e9:46:06:19:63:c4:90:12:4f:eb:27:82:
95:6c:01:d2:91:df:94:e0:dc:af:81:ee:0f:8c:3d:1c:db:5a:
e5:41:74:1e:88:d2:9f:33:96:05:38:96:69:b4:62:37:24:d5:
5e:2f:03:f5:0c:a5:c7:24:28:58:cf:cc:cc:e0:7d:05:e0:18:
6e:e4:cb:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:29:33 2025 by rpki-client