Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
File: qo_QXutuoFoR1mer7djqEJPScbM.mft (raw, json)
Hash identifier: 3Uxdl4anBZQmEeag7aIO28JiUpJSJktsHQtKJ5t0WJY=
Subject key identifier: F1:F2:21:26:0B:0E:11:43:06:89:AE:E0:4B:E7:D6:E7:38:E0:84:BA
Authority key identifier: AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3
Certificate issuer: /CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3
Certificate serial: 01965492D7061B24C7A45FDB4F86C03636D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 19:00:31 +0000
Manifest this update: Sun 20 Apr 2025 19:00:31 +0000
Manifest next update: Mon 21 Apr 2025 19:00:31 +0000
Files and hashes: 1: lfJUEj9OpKtkyjj6xaEeSMukOrA.roa (hash: 9AsF2IZpbVSPw/O9UldkVW9AyHlVo6jZ0snpU1eDlm8=)
2: qo_QXutuoFoR1mer7djqEJPScbM.crl (hash: e3Jr9Xu5zCPTXnjHVDr5uM7PHjTD/i1fWgpiRRS+SHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:d7:06:1b:24:c7:a4:5f:db:4f:86:c0:36:36:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3
Validity
Not Before: Apr 20 19:00:31 2025 GMT
Not After : Apr 21 19:00:31 2025 GMT
Subject: CN=f1f221260b0e11430689aee04be7d6e738e084ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:25:4c:8e:0d:8f:50:12:e1:38:87:22:1d:06:
0b:8d:ad:58:d1:e5:c8:ea:47:c3:10:34:64:f4:3f:
ae:d7:23:56:be:b9:d2:6e:5b:18:6d:7c:f7:89:8e:
a2:75:a4:62:49:ef:64:55:d4:b3:03:f2:37:98:7c:
60:13:a4:9e:f2:34:41:00:8d:7f:83:f0:b1:93:d3:
86:a1:9e:a0:70:99:79:4c:c0:89:5d:d1:0a:62:c4:
2e:4a:12:cf:b5:e6:9b:ff:bf:c3:f4:18:70:d5:a6:
a6:73:fe:cf:a6:05:33:d4:a2:5e:f1:6e:76:85:78:
42:30:b0:aa:81:dd:a6:55:c0:89:81:c4:d2:04:05:
1d:14:b3:92:17:4d:24:0a:af:10:0e:41:1e:1e:5c:
17:0e:e8:77:9b:7e:16:72:db:80:b6:4c:27:a4:22:
d5:dc:cb:b9:b1:0a:b4:46:8f:6d:bb:a4:67:a1:3e:
9c:00:4f:39:1f:55:b4:65:d1:0c:2f:36:d6:e1:2a:
0c:37:96:db:7f:b5:7d:66:74:e9:3c:02:5a:68:74:
bc:20:50:85:3f:6e:44:01:85:35:fb:b7:ad:dc:7b:
c0:36:78:52:bd:aa:a3:1f:ac:66:f8:3a:ae:1c:97:
39:50:8d:53:69:66:a4:3c:98:ea:29:22:67:99:88:
04:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F2:21:26:0B:0E:11:43:06:89:AE:E0:4B:E7:D6:E7:38:E0:84:BA
X509v3 Authority Key Identifier:
keyid:AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:26:17:ef:12:6b:01:53:95:66:f2:a2:45:95:89:cb:3e:d1:
e4:eb:91:81:18:e8:b2:60:1c:8c:2f:6b:3d:f3:81:62:2e:9a:
97:f5:76:9b:23:3c:50:31:db:6d:32:93:41:2a:1b:4c:68:53:
25:b5:b3:2c:b9:c1:ad:ca:d9:d0:11:a0:17:e1:a5:c8:a8:ad:
5d:02:3a:bd:48:ae:c7:68:e8:36:56:a5:5a:79:a4:8c:cb:8c:
76:33:44:90:47:88:61:9c:3a:db:92:d9:1f:c0:14:80:82:b9:
b6:6d:3c:93:7d:5d:8c:79:be:6e:ef:60:57:e4:4d:76:e7:08:
61:f5:7a:48:77:1d:82:17:f1:ec:e8:5c:76:d3:4c:25:8d:45:
23:56:60:aa:e4:8c:68:a7:12:f9:15:14:e9:a6:a9:4e:81:93:
c8:76:56:c5:d3:97:09:39:86:f4:4f:fd:18:48:59:22:28:77:
db:86:d5:f6:ca:d3:d6:a8:64:0a:3c:f1:8c:ea:6b:50:6a:ef:
b6:35:ee:fc:9e:47:75:08:4b:fd:4e:24:41:67:78:42:ab:7b:
d8:c5:11:f5:55:10:23:0b:07:c9:c5:b7:fd:da:3c:f1:a4:9c:
b7:ea:a8:6e:78:1c:f0:84:af:06:b4:0f:dd:df:23:26:91:e8:
6a:ba:9c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:28:50 2025 by rpki-client