Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
File: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft (raw, json)
Hash identifier: EHT+HvsFetkEmRc2puKwqldGMUW10hKyfFbDv71vfDs=
Subject key identifier: 3D:E4:B6:70:76:A2:49:58:F2:CE:58:B0:6A:6D:A5:2C:2C:3C:C1:D0
Authority key identifier: A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
Certificate issuer: /CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Certificate serial: 01964BC68FF720E994F98D164DE566486EDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 02:00:26 +0000
Manifest this update: Sat 19 Apr 2025 02:00:26 +0000
Manifest next update: Sun 20 Apr 2025 02:00:26 +0000
Files and hashes: 1: lxBXnG-4rYAQUCGbktacJsJcscU.roa (hash: d11nQxBRc+xMvxpKWxAVqfhsk9tCL6Ja3DwWQ6WsmPo=)
2: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl (hash: mAQM6Og61qMBNXoG19pdyjB9BC90iAZUc9bCvZNBeFg=)
3: u2p9YZ_LXa4YZ8T6-whJAsnzXuE.roa (hash: HvG5oZRfAf2DkODgozvYS7e+xqSp2NYm+qp3YwzyYdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:c6:8f:f7:20:e9:94:f9:8d:16:4d:e5:66:48:6e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Validity
Not Before: Apr 19 02:00:26 2025 GMT
Not After : Apr 20 02:00:26 2025 GMT
Subject: CN=3de4b67076a24958f2ce58b06a6da52c2c3cc1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:69:83:8e:1d:e6:e2:d9:1a:37:69:d2:dd:
3c:3a:fa:c9:6a:16:5a:e9:96:79:ea:2c:17:da:2a:
cd:07:1d:5e:7a:d1:30:87:29:bf:dc:3c:2a:71:62:
a6:3a:a7:00:a9:e4:c1:5a:c4:b0:99:7d:c6:df:93:
a6:33:fa:93:ad:69:50:83:7d:cd:33:e8:0b:45:4e:
57:83:7c:b6:1d:18:e4:14:ac:5b:70:b3:33:c7:ff:
39:64:06:e1:6b:1a:9c:c2:50:5a:f9:a2:07:b4:cb:
38:0c:a5:a4:d9:6c:08:7f:7f:c8:9e:29:50:b9:80:
de:fa:e5:6f:dd:0f:49:cc:03:50:d8:d0:4f:5e:02:
f4:87:e3:5c:95:74:f9:7a:74:6a:8f:b2:ce:83:85:
90:f9:e2:05:9e:41:e4:1b:47:da:c6:bf:1b:05:41:
37:d1:1b:be:14:e3:52:ae:46:8a:3c:3d:42:24:d2:
59:da:98:43:67:04:a7:66:23:81:0a:b2:1c:c8:73:
cb:cc:db:aa:e5:1f:d4:6d:f8:bd:d2:40:49:1a:71:
8a:29:32:8a:0b:18:27:10:61:63:ee:03:90:ab:34:
93:09:a1:8b:90:11:27:91:d2:f6:a1:fb:91:fb:e4:
ed:93:b8:5b:7a:12:ce:6e:cd:27:3e:4c:ba:10:67:
3f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E4:B6:70:76:A2:49:58:F2:CE:58:B0:6A:6D:A5:2C:2C:3C:C1:D0
X509v3 Authority Key Identifier:
keyid:A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:2a:5c:ef:80:19:8f:fa:33:b9:18:d6:4f:e1:66:75:cc:e5:
f0:b6:8d:e3:4a:d4:9b:c9:04:1d:d0:8e:95:3c:87:10:2a:9e:
21:80:32:c5:41:74:54:63:5a:30:2d:13:ee:a9:63:de:16:7d:
f9:dc:a5:fa:db:88:93:60:1c:e5:45:65:2d:78:fc:73:06:99:
43:2c:63:e1:18:66:48:f6:e0:9e:28:43:48:0d:5d:c2:ca:c6:
71:95:34:05:f5:6e:00:9c:6c:ae:28:2d:c5:2f:1f:fd:9f:24:
e5:4e:52:97:d0:c8:0b:c9:03:b1:a9:8a:b1:7e:7e:fc:2a:1d:
2d:4e:a5:b4:46:52:e5:70:f8:32:af:ef:9f:54:b4:8c:a0:0f:
0c:1b:ea:42:bb:09:03:35:da:31:18:9c:e9:97:0e:f2:5b:2a:
4c:78:1a:3c:2f:91:22:04:4b:34:08:7a:f4:cb:aa:43:f4:98:
85:18:b6:23:20:8d:e2:6f:85:45:5c:a1:72:76:64:81:d2:6a:
4c:fc:89:d1:3e:15:d9:ed:14:39:d6:9c:d0:ef:84:a0:82:49:
f0:da:7a:40:9e:91:f9:d5:5c:f1:27:25:1b:33:18:2c:99:fe:
71:6d:c4:bb:2b:1f:bf:c0:a6:97:1a:1e:c5:d5:81:02:69:a5:
9a:cf:68:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:08:35 2025 by rpki-client