Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
File: QcjQJBEIsB9etwj-i7uEfVOjDxY.mft (raw, json)
Hash identifier: bYwHee/IoNgA64YguQtSB98D8vCD+3Cgo88rZj+a45I=
Subject key identifier: 3D:65:FC:70:A2:DC:3F:2B:AE:74:27:33:1A:E5:29:1C:46:A9:63:4E
Authority key identifier: 41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
Certificate issuer: /CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Certificate serial: 01963EE66CFEB273924339045C3A913FDD83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
Manifest number: 14F1
Signing time: Wed 16 Apr 2025 14:00:10 +0000
Manifest this update: Wed 16 Apr 2025 14:00:10 +0000
Manifest next update: Thu 17 Apr 2025 14:00:10 +0000
Files and hashes: 1: EuVjqybteP4_2uP1qrjFTh6Ex84.roa (hash: VQ7r6aXcK3EoAppW65m/zYlli6sD8iLPznPeACkUL+k=)
2: QcjQJBEIsB9etwj-i7uEfVOjDxY.crl (hash: l2V4vnzSlAz7zqc+7XuMNlQD3wE/C6EyrN3UQ2ExyGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:e6:6c:fe:b2:73:92:43:39:04:5c:3a:91:3f:dd:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Validity
Not Before: Apr 16 14:00:10 2025 GMT
Not After : Apr 17 14:00:10 2025 GMT
Subject: CN=3d65fc70a2dc3f2bae7427331ae5291c46a9634e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6f:52:4d:88:b9:e8:74:6c:96:38:26:5f:d4:
a9:c0:6d:68:b6:f3:0a:79:41:7c:9e:9f:8d:0c:a9:
33:a2:c3:a8:cd:26:6d:f8:3a:fb:96:b1:da:40:22:
6b:79:e6:f4:03:61:63:e1:d7:5c:9e:b9:7d:27:39:
1e:72:b6:31:a6:f6:b4:20:61:95:89:17:7e:ac:65:
03:c3:2d:91:7a:7f:86:fd:01:c7:c3:33:89:0d:cd:
8d:fd:fa:89:34:0c:5d:32:cf:24:4d:ba:a7:f7:9c:
8b:8e:81:e1:c4:44:d8:0b:bd:d7:63:09:fb:5c:1e:
aa:ef:ef:38:b3:71:7a:94:fe:e9:33:c6:43:c1:78:
66:6a:d7:26:55:5a:62:a0:63:2e:42:ec:c7:28:18:
92:1d:63:ef:da:d6:b6:7d:18:df:6e:1a:79:a1:59:
ad:cd:27:2c:c1:90:e6:8c:2d:8b:1b:3e:a5:15:fd:
58:16:7c:24:0b:d8:05:0c:b2:39:f7:7e:12:8b:cb:
65:9c:45:8f:bc:8f:3e:38:a0:11:0d:41:2f:1e:45:
fe:cc:36:f3:6e:92:93:54:64:78:1d:0a:d4:49:6e:
1a:bd:53:39:c2:51:1d:87:d1:4a:57:b4:ad:79:47:
8b:cd:09:0b:60:a8:d7:c9:b7:77:1d:01:b3:3f:85:
1c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:65:FC:70:A2:DC:3F:2B:AE:74:27:33:1A:E5:29:1C:46:A9:63:4E
X509v3 Authority Key Identifier:
keyid:41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:80:05:44:82:11:d3:35:b7:0a:c9:71:1e:82:f9:cc:be:76:
72:c4:6a:b1:41:a7:87:3c:8d:5c:8b:a2:52:d3:c8:4b:ae:e3:
b9:70:84:27:dd:37:31:3c:05:02:8d:bd:bc:0e:fd:fc:d5:b2:
a4:03:1b:84:58:a3:6d:3d:6d:03:d4:ba:fe:83:fc:6a:c0:53:
56:8b:da:be:cf:ea:77:74:a0:29:7c:ec:be:97:ac:25:fc:68:
8a:14:18:fc:04:e7:51:51:2d:33:9f:45:ac:b2:ff:f7:69:9d:
a4:37:18:2e:76:52:38:23:61:94:66:84:2d:cf:cf:a3:8c:c2:
51:e6:c5:9a:2e:69:fd:8a:8b:80:28:a0:45:fa:82:2d:1e:16:
b1:fa:9b:b1:9c:f6:d6:6f:8d:26:19:77:76:20:2c:4f:7d:b2:
b3:cb:26:de:bc:1d:fe:1e:66:6e:6e:47:82:f7:4f:81:c6:6b:
af:9f:61:57:ef:97:97:24:71:1a:d6:51:0a:19:16:98:e5:21:
15:d3:93:a6:f3:d9:70:fe:5a:68:d3:62:9b:a1:bc:94:1a:69:
5a:18:e6:88:9e:49:56:85:24:86:1b:5f:37:b0:89:d3:66:03:
ed:8a:c6:4d:75:ae:5c:e3:71:84:e0:af:0b:1a:0e:eb:33:6e:
c8:83:14:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:31:53 2025 by rpki-client