Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft
File: qdvUwWus1i0mMqoeF7LozQEA1oQ.mft (raw, json)
Hash identifier: 6h7t0JTwpOxJy8j4qsJk3tYtYFpGSdK+5yRw4Jt3NUc=
Subject key identifier: 5F:09:ED:1A:E3:23:B6:C7:C9:FD:CB:9F:E7:5B:66:C9:02:1A:F6:19
Authority key identifier: A9:DB:D4:C1:6B:AC:D6:2D:26:32:AA:1E:17:B2:E8:CD:01:00:D6:84
Certificate issuer: /CN=a9dbd4c16bacd62d2632aa1e17b2e8cd0100d684
Certificate serial: 019600AD36FA30B57CEEA6D7217DFA9DA02A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft
Manifest number: 14DA
Signing time: Fri 04 Apr 2025 12:01:13 +0000
Manifest this update: Fri 04 Apr 2025 12:01:13 +0000
Manifest next update: Sat 05 Apr 2025 12:01:13 +0000
Files and hashes: 1: I4II5YG7LUFBoJ8SBtHVtTTsJRQ.roa (hash: EK6oOV8QOUxKFrS4ArdugAEfde8g8gPU3lkmuBHgdRY=)
2: qdvUwWus1i0mMqoeF7LozQEA1oQ.crl (hash: x5Gfwk7ixk3vu6qjejUidcctJ4jRbLoleDXQFfGNMg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:00:ad:36:fa:30:b5:7c:ee:a6:d7:21:7d:fa:9d:a0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9dbd4c16bacd62d2632aa1e17b2e8cd0100d684
Validity
Not Before: Apr 4 12:01:13 2025 GMT
Not After : Apr 5 12:01:13 2025 GMT
Subject: CN=5f09ed1ae323b6c7c9fdcb9fe75b66c9021af619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ec:c4:ad:59:a0:68:a4:0a:df:da:dd:70:91:
b1:90:b4:9a:2a:68:59:8c:5c:35:6e:90:9c:da:d2:
12:02:09:6b:90:7f:6a:d7:0c:bc:52:11:79:8a:8c:
8c:3e:d5:5a:9d:fd:0d:88:90:b6:5e:ee:32:5b:df:
79:ef:6a:41:d9:18:0b:76:0f:36:7b:6b:bc:8a:d9:
01:24:bf:16:40:e3:ff:ce:cb:b3:e2:f2:9e:bc:34:
93:59:5e:5d:fc:05:e9:7d:ef:a5:40:72:25:a4:b8:
04:95:5f:d7:4f:b6:62:df:12:5b:1b:09:9b:2c:32:
0e:36:a0:e6:e7:ef:66:0e:8f:70:41:ff:db:3d:5a:
89:75:c5:48:1b:6a:5e:67:63:bc:b0:fe:65:cb:68:
2d:d9:15:f7:7f:bc:cf:01:35:92:40:ff:39:fd:72:
7b:0c:9f:16:eb:14:37:7d:00:e5:d2:3c:d8:5e:f0:
87:33:15:eb:ce:9a:27:0b:34:1c:f1:9a:2a:7e:d5:
11:9a:06:33:53:f1:03:34:a9:97:5e:4c:79:31:6a:
19:f2:15:08:fd:43:54:54:95:90:b7:e5:36:5f:43:
c5:2b:c2:30:30:ba:2f:6d:43:da:2d:5f:c6:91:7f:
47:3e:ea:fd:aa:ed:61:23:cf:57:2f:fb:6c:e0:61:
c2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:09:ED:1A:E3:23:B6:C7:C9:FD:CB:9F:E7:5B:66:C9:02:1A:F6:19
X509v3 Authority Key Identifier:
keyid:A9:DB:D4:C1:6B:AC:D6:2D:26:32:AA:1E:17:B2:E8:CD:01:00:D6:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:82:10:17:6b:8d:de:71:f2:8e:44:8f:07:08:3e:eb:ff:ef:
67:4d:29:f1:fd:57:bf:01:f8:5a:e8:9a:ca:b2:8b:ac:90:ac:
07:52:01:44:45:71:bf:54:e6:54:3b:0e:14:95:9f:72:e8:c9:
5b:f7:26:6f:67:76:ad:a0:51:9e:04:10:92:9b:7b:a5:43:f5:
52:e5:08:76:53:70:02:0e:15:cc:60:d3:c1:af:d5:7e:d0:64:
d5:28:40:a9:60:06:0e:0f:05:f9:11:67:ef:91:22:e4:c6:49:
a8:29:d9:4f:0c:c9:aa:38:47:86:3c:60:40:df:14:d4:a4:ce:
50:0a:97:5b:fd:2b:e1:56:ba:80:c0:33:65:f5:c7:e9:10:ee:
42:a3:93:d8:19:66:2e:93:96:2d:4d:39:d0:32:cc:7e:21:05:
cf:c3:73:c4:82:ff:83:02:76:4d:c9:fc:82:25:a8:e6:9d:52:
6e:8e:fa:f4:01:e0:45:8d:15:20:dc:e9:ea:1b:c6:ad:47:65:
0f:f5:df:b5:41:5a:e9:ef:b9:a7:38:89:4c:3a:cb:59:83:b6:
e5:c1:3a:c4:46:b3:74:e6:0f:2e:97:f0:9d:11:fd:d9:30:19:
90:c1:fd:29:fd:9a:ad:ad:0b:72:b1:36:24:88:8b:6e:bb:03:
78:0c:a9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:37:57 2025 by rpki-client