Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
File: Quv9iRe1jwaG2T60jeQh7AE3Csk.mft (raw, json)
Hash identifier: K7c2g22SnaviPJlChiJlwg3W3NVVy84j6TZVB/abB64=
Subject key identifier: 83:75:EF:B6:67:AE:76:34:07:E6:AD:F4:37:0B:FE:AA:58:06:95:7A
Authority key identifier: 42:EB:FD:89:17:B5:8F:06:86:D9:3E:B4:8D:E4:21:EC:01:37:0A:C9
Certificate issuer: /CN=42ebfd8917b58f0686d93eb48de421ec01370ac9
Certificate serial: 019655A5A42860D1778B531E6AC5E96D6F35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
Manifest number: 14FD
Signing time: Mon 21 Apr 2025 00:00:40 +0000
Manifest this update: Mon 21 Apr 2025 00:00:40 +0000
Manifest next update: Tue 22 Apr 2025 00:00:40 +0000
Files and hashes: 1: Dct1KnHlMjQEBf8FzrUaVj8hNPo.roa (hash: GFTblhcJpBtD5bZfbGwg+0xfnKk6qwYm9g5i1rXxbnw=)
2: Quv9iRe1jwaG2T60jeQh7AE3Csk.crl (hash: UYCzu8yRVNPn+N0T2+fG5vqpDNDOB2TW5SOKOr02sMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:a4:28:60:d1:77:8b:53:1e:6a:c5:e9:6d:6f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ebfd8917b58f0686d93eb48de421ec01370ac9
Validity
Not Before: Apr 21 00:00:40 2025 GMT
Not After : Apr 22 00:00:40 2025 GMT
Subject: CN=8375efb667ae763407e6adf4370bfeaa5806957a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8f:15:41:06:45:23:25:58:75:a1:58:1c:da:
1f:52:86:04:4a:27:68:a3:5e:ec:71:16:88:81:68:
4f:20:5b:2b:f0:fb:13:83:a1:31:a2:7c:8d:08:f5:
03:a1:d2:fd:96:97:e7:84:3b:c0:ab:56:33:20:02:
17:2c:83:25:b7:56:56:76:fe:80:fd:ea:c1:01:4e:
f0:f8:d7:8a:9c:ed:bd:7b:df:0b:c7:a2:01:e8:d1:
c6:d1:b6:e2:61:92:46:95:e3:98:f3:a9:0c:c0:06:
71:db:f3:13:8b:9e:10:45:01:90:c0:d7:e9:e9:b3:
27:56:f7:93:ac:61:07:6e:c2:bd:59:7c:49:a1:32:
90:02:ef:31:9c:b1:a0:17:39:6e:ff:f6:2a:26:73:
12:27:60:b5:34:17:85:a6:9b:86:dd:e1:45:a9:b1:
a1:d1:6a:2c:b1:f0:85:8a:01:46:ae:6c:c3:96:eb:
c5:a7:bf:41:30:08:50:c2:79:be:46:cb:a1:68:1a:
2f:ab:7a:6d:e0:21:6f:18:67:c1:cf:83:21:f9:02:
e4:06:b4:7d:d9:ca:07:89:37:ea:fe:56:0f:67:db:
2e:34:61:39:78:f8:98:65:93:b5:74:b2:9a:52:8d:
99:db:c4:35:c3:8f:a1:43:5c:20:37:8f:41:de:ba:
69:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:75:EF:B6:67:AE:76:34:07:E6:AD:F4:37:0B:FE:AA:58:06:95:7A
X509v3 Authority Key Identifier:
keyid:42:EB:FD:89:17:B5:8F:06:86:D9:3E:B4:8D:E4:21:EC:01:37:0A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:5e:83:9b:0e:e5:99:27:da:5f:e0:90:1a:dc:b8:c3:d8:98:
5e:08:8e:9e:87:70:19:a9:12:f1:7e:40:57:41:e8:f7:50:53:
1a:a3:4b:87:dd:15:01:e0:97:b3:c6:52:bc:d1:9e:ca:5a:c9:
e4:50:8a:50:62:0c:1b:fb:77:a2:de:0c:c6:73:92:65:99:e3:
35:ca:da:41:24:e9:18:50:14:71:66:99:a8:08:e2:49:ce:1e:
f5:0f:9c:65:80:3b:b4:20:c5:fa:1f:d3:55:67:7c:81:c8:3c:
22:24:35:5a:26:dd:99:ba:91:66:85:59:35:7d:96:54:b7:5f:
15:73:2b:d3:06:bc:b6:35:58:26:2a:47:97:84:ea:92:7c:1b:
da:af:2f:a3:31:da:07:f1:9b:06:a3:ae:a4:85:6c:b0:92:4e:
1e:43:75:cd:62:79:9b:8b:87:dc:27:96:2c:e2:be:b2:0c:84:
03:58:06:e3:59:c1:93:12:ba:f7:cb:6d:52:49:bf:e8:5a:d5:
d0:7e:76:08:a4:23:fb:9c:ec:03:d3:2a:40:dd:b8:fd:e6:8b:
3a:aa:d9:db:13:47:18:a6:92:02:18:85:35:35:b6:78:e1:27:
e1:7a:72:b7:a1:f9:cb:48:35:c1:4e:6f:a3:8d:48:65:a7:bd:
0e:14:c0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:03:14 2025 by rpki-client