Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
File: QSasSvr9JpiBwQrS7KL03vjtvSE.mft (raw, json)
Hash identifier: 73SXdujXDPXcMhW8rfzIznp1qt4lvtw1uXmfAfIgEdw=
Subject key identifier: 8A:2A:AA:E0:B4:E4:E9:58:97:67:6F:49:61:48:91:CC:88:D0:9B:14
Authority key identifier: 41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
Certificate issuer: /CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Certificate serial: 019645C5EB9DCAC44A316C57E2EB4151279E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
Manifest number: 14F8
Signing time: Thu 17 Apr 2025 22:02:00 +0000
Manifest this update: Thu 17 Apr 2025 22:02:00 +0000
Manifest next update: Fri 18 Apr 2025 22:02:00 +0000
Files and hashes: 1: 1-OpArz-cvr3_w4LMxpPZzSxCtqI.roa (hash: p66SMlwKH8qksSnzyFy8M1MJ9eGvVUlsB0A2v++rXYg=)
2: BO2GxdENWf3nZf4IjS3W9dxIBdA.roa (hash: CoT9/NP4/6nCeDdnm6fFk7HZ3lUZardt1KwDlood7sQ=)
3: QSasSvr9JpiBwQrS7KL03vjtvSE.crl (hash: va36I+C9YBmPT2F7+XZBsiv3KUgpJ9wF++TaTb8SBww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:c5:eb:9d:ca:c4:4a:31:6c:57:e2:eb:41:51:27:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Validity
Not Before: Apr 17 22:02:00 2025 GMT
Not After : Apr 18 22:02:00 2025 GMT
Subject: CN=8a2aaae0b4e4e95897676f49614891cc88d09b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f5:5e:bf:49:7e:8f:31:c2:d7:64:aa:b5:c1:
4b:bc:af:c2:42:84:9b:54:93:6d:27:eb:9f:83:8a:
17:f4:5a:a8:55:c8:72:d8:25:08:36:e3:58:78:09:
67:1f:2f:52:af:da:d3:50:b2:68:43:a7:ed:99:f9:
07:35:25:4e:ae:16:09:3f:cd:84:52:fb:c5:41:48:
6c:ed:2b:31:ad:de:20:39:1d:23:94:7c:81:85:f1:
9b:7b:d3:77:fc:be:81:23:03:1b:d9:27:64:64:40:
41:68:c1:bd:38:9d:b6:4a:5f:5c:e2:d8:91:9b:1f:
59:cb:61:12:ae:94:e9:09:14:97:fa:de:0f:58:23:
94:cb:ca:0b:64:9f:14:88:68:ec:cb:52:bc:44:d1:
88:61:0c:e7:ac:3e:f3:ef:a6:ac:fd:db:f3:d9:df:
9b:a0:2e:8f:43:bd:33:62:5f:75:94:aa:fa:7d:c2:
ab:83:e9:fe:de:b4:28:8a:3d:c8:6e:77:df:3e:26:
23:68:2b:55:2f:67:2f:f9:86:3b:70:47:7d:bf:b8:
42:77:3b:29:50:bb:9f:62:5e:00:ac:2c:78:54:65:
9e:bc:29:89:43:a5:f6:9c:01:4b:b7:ee:c8:cd:2f:
77:5d:dd:3a:7b:2e:56:30:76:b6:92:75:a9:33:df:
50:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2A:AA:E0:B4:E4:E9:58:97:67:6F:49:61:48:91:CC:88:D0:9B:14
X509v3 Authority Key Identifier:
keyid:41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:20:f1:15:be:f9:ac:3b:33:be:b6:5a:0b:b7:bd:e9:6c:33:
7b:4e:e8:7d:17:d3:6f:b4:12:a3:e5:7f:cc:f6:df:a6:ce:a6:
31:de:89:c1:9d:79:8f:df:6f:70:2f:bb:08:d2:69:af:52:63:
a3:b5:d2:da:11:0c:7d:cf:0e:6f:bd:75:35:e9:54:79:aa:2d:
b0:8f:65:fb:e6:33:06:9d:8e:f6:b5:a9:58:2d:13:6c:56:e2:
8a:3f:f7:e0:b7:56:d7:f2:68:42:05:8e:5a:f2:14:f3:f9:6b:
e4:b3:9c:ec:7e:d8:dc:76:10:ca:1c:7f:ee:a0:bf:19:fb:25:
28:9b:63:de:60:df:64:c2:c8:5f:fa:2a:da:11:81:d7:25:c7:
e2:b8:98:69:b6:e8:17:ba:69:0c:b0:3e:c7:9a:7b:8f:55:26:
6f:4d:05:2c:ca:4d:35:80:cb:bf:20:b0:bd:f0:60:29:9b:5b:
bd:5b:13:8e:17:41:ad:57:ce:1a:8b:1d:d3:3e:ea:2d:43:5c:
48:20:30:c8:e6:50:7a:c6:c1:da:a2:6d:10:16:28:5d:7e:12:
16:f4:a4:a1:86:2c:9b:da:02:ed:a0:9d:c6:c2:0a:ce:11:aa:
ee:88:3e:a9:c9:e1:ee:e2:89:26:e0:8d:70:de:30:c9:4f:de:
a1:82:a1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:37:27 2025 by rpki-client