Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
File: qC-5s0GMRYzbxs_WhFFL4krQw8k.mft (raw, json)
Hash identifier: yc2jKA5J3pOpsX4XOS4mpG0ZTl+s6QfZKofTEJrB9+0=
Subject key identifier: CE:16:A6:A4:50:BC:FD:AD:2A:DE:4A:F5:E2:96:D3:82:E1:75:52:9F
Authority key identifier: A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
Certificate issuer: /CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Certificate serial: 019646D76A652E33D82F31105CB383362620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
Manifest number: 142B
Signing time: Fri 18 Apr 2025 03:00:44 +0000
Manifest this update: Fri 18 Apr 2025 03:00:44 +0000
Manifest next update: Sat 19 Apr 2025 03:00:44 +0000
Files and hashes: 1: 4KqmJoEVUd9bhY-ntnaMTkNmA44.roa (hash: LLo6nOWCS1mxlNIUMzouZjN4HwCv7i5lI/hb4nBjcBQ=)
2: Jw4aASdhNdVI-FplW-882cj74Fw.roa (hash: ewm0/xps8d7RUrK5yQyWODWIjZ5yxmU6C2dpLRlFoTs=)
3: qC-5s0GMRYzbxs_WhFFL4krQw8k.crl (hash: QonFCeGcZdsoMG4moDJclKXRRMZ0p+d35apjoRZp1D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:d7:6a:65:2e:33:d8:2f:31:10:5c:b3:83:36:26:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Validity
Not Before: Apr 18 03:00:44 2025 GMT
Not After : Apr 19 03:00:44 2025 GMT
Subject: CN=ce16a6a450bcfdad2ade4af5e296d382e175529f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ea:0b:81:40:6d:17:7f:ab:06:cf:b0:f1:30:
e9:8c:1a:87:d9:5f:25:20:3b:20:2a:fb:9e:13:2f:
c6:aa:25:fd:12:45:39:80:e6:09:14:45:fc:d5:a6:
1c:53:ad:ef:ba:08:33:ab:6a:2b:b6:0a:08:27:ab:
3c:c5:88:0b:e2:b8:37:84:d3:c5:49:a5:12:f5:23:
66:df:2f:87:65:17:8e:30:09:ac:19:e4:31:ea:bb:
f0:4e:5c:fc:6d:72:f7:be:75:9c:df:ed:05:33:99:
95:b4:f9:1e:5d:4d:b7:3c:4f:ec:3c:2f:9a:a2:7e:
d2:c4:5a:c6:a7:5f:36:54:15:aa:61:3f:38:a2:4a:
4f:22:ec:d6:1e:28:3d:d6:6d:71:c3:5c:8c:51:43:
c1:20:5d:b4:6f:d4:eb:26:53:bb:38:39:b9:b2:7b:
9f:9e:91:eb:b5:e8:22:12:ed:5b:7e:06:8d:8c:b6:
73:a4:7c:7d:56:1e:1a:c3:73:73:b2:ee:eb:3c:d6:
8c:96:08:3b:22:5b:61:ba:75:72:8a:a6:d3:ca:4e:
72:e2:a0:f3:46:99:6a:03:e1:ee:f9:84:9a:e8:de:
af:3e:ee:1c:26:27:e5:1e:e5:ee:07:97:2d:2c:4e:
9a:6b:c5:24:c2:9b:98:e9:48:83:89:dc:20:ca:7e:
f9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:16:A6:A4:50:BC:FD:AD:2A:DE:4A:F5:E2:96:D3:82:E1:75:52:9F
X509v3 Authority Key Identifier:
keyid:A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:be:ab:37:db:31:61:cf:6e:2d:ab:6e:ed:c5:b8:72:d4:73:
1c:6f:f3:bf:bb:59:20:08:90:84:ae:ed:51:06:e2:f2:9b:30:
a3:73:91:0b:10:f0:cb:13:18:45:47:78:11:9a:ea:b8:de:ca:
7c:09:f8:a9:45:2f:2f:ae:14:e9:e7:dd:c9:da:9f:d8:38:d3:
74:53:3e:8f:3e:da:4d:37:9e:9a:39:a0:0c:06:27:74:f0:89:
86:ae:6e:b4:3f:53:44:40:8a:01:e6:eb:8f:5f:65:53:07:78:
ae:7b:82:f5:76:a2:09:80:ce:a8:76:91:29:e5:e6:51:6b:92:
aa:c5:ab:65:f9:b4:7e:1e:78:d7:f1:d9:03:97:1e:a0:8e:31:
c9:32:2e:cb:94:9a:20:dd:56:52:53:91:53:ba:e5:ab:00:5d:
c2:e5:dd:f3:fb:e3:57:8e:f1:e0:60:33:83:94:63:52:57:b6:
60:65:2a:79:1c:9b:05:ee:02:a3:df:31:09:a7:6c:e4:90:7f:
19:66:e9:98:e2:15:40:6c:b4:07:c8:e3:12:9a:6c:f7:68:b0:
24:16:fa:2f:5e:62:29:bf:64:26:0e:0b:f8:ae:46:85:07:9b:
95:8e:5e:93:c6:e3:22:38:6a:17:ce:5a:d8:b3:3c:6d:27:d2:
e8:27:30:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:36:29 2025 by rpki-client