Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
File: qjV0fbQXDtRXVsyaOk52iaDrYsc.mft (raw, json)
Hash identifier: cgcjlrPle0nIfaQGAJy1TQfnsX7hmBkZpmc8UBHKXz8=
Subject key identifier: F7:71:92:CB:70:5B:C6:4C:41:DE:A6:08:E1:C5:14:4B:50:24:88:E5
Authority key identifier: AA:35:74:7D:B4:17:0E:D4:57:56:CC:9A:3A:4E:76:89:A0:EB:62:C7
Certificate issuer: /CN=aa35747db4170ed45756cc9a3a4e7689a0eb62c7
Certificate serial: 019590AB9EF2210332995BFAB1B7070B6D0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
Manifest number: 017F
Signing time: Thu 13 Mar 2025 18:02:01 +0000
Manifest this update: Thu 13 Mar 2025 18:02:01 +0000
Manifest next update: Fri 14 Mar 2025 18:02:01 +0000
Files and hashes: 1: c4TxJnX6SULpOIlEbtsYVcPO_1E.roa (hash: mprESb6/2u0lim3u1bjN8fuUSWrOypjztHMO2wyLys0=)
2: qjV0fbQXDtRXVsyaOk52iaDrYsc.crl (hash: X0taG9+2LKcSWspX6wfA4Myq6Ow85J+fFJZKMacek7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:ab:9e:f2:21:03:32:99:5b:fa:b1:b7:07:0b:6d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35747db4170ed45756cc9a3a4e7689a0eb62c7
Validity
Not Before: Mar 13 18:02:01 2025 GMT
Not After : Mar 14 18:02:01 2025 GMT
Subject: CN=f77192cb705bc64c41dea608e1c5144b502488e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2d:32:b0:cf:5b:4d:19:7d:20:eb:f7:42:22:
70:d4:ca:8e:b3:68:16:a3:5d:c4:9c:02:45:ed:fe:
8e:b4:39:b2:69:5d:72:11:12:8f:14:31:3e:1f:9e:
19:71:9a:5f:7c:fc:43:15:8d:69:95:5b:6d:9c:3c:
57:5b:b4:8e:b5:68:2c:fc:31:67:0b:88:a2:10:f6:
ba:e3:63:7b:53:7a:94:b6:ae:a1:ff:ab:b6:3e:cb:
98:1c:c6:b2:10:57:d0:f0:57:df:5c:c3:19:a0:55:
b8:00:f9:61:c9:21:2d:83:25:05:35:bf:1f:84:c6:
6e:82:5f:0b:c6:e3:06:7c:fa:1d:81:d5:a8:ad:dd:
bf:a9:cc:6b:f4:f8:40:5d:c0:4c:bd:bb:ba:17:a5:
8c:98:54:b4:ee:40:15:ea:e8:71:1e:1c:10:bc:f5:
32:e4:b3:99:31:88:5a:7c:9d:aa:8b:35:64:fc:39:
08:4c:11:0a:06:b1:ad:f1:d0:e0:fa:6b:e3:95:1b:
6d:d0:c5:8a:71:1d:55:44:0b:8d:d4:a4:d7:e2:27:
a8:25:7c:3e:17:e3:bd:82:20:60:5c:12:a9:73:c1:
eb:b1:92:f3:c3:b2:f6:96:55:29:79:85:14:39:99:
75:67:4b:ed:25:69:e5:2f:fa:66:81:83:97:8a:91:
7e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:71:92:CB:70:5B:C6:4C:41:DE:A6:08:E1:C5:14:4B:50:24:88:E5
X509v3 Authority Key Identifier:
keyid:AA:35:74:7D:B4:17:0E:D4:57:56:CC:9A:3A:4E:76:89:A0:EB:62:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:1e:b4:5a:d7:e4:b2:1f:a9:cb:94:55:08:51:a7:2e:94:44:
df:0f:7b:42:62:39:50:67:85:02:fe:99:5d:5b:33:34:c1:f1:
e1:00:27:d9:54:a6:2d:3e:df:41:96:f2:8e:ba:4e:d7:46:48:
28:b9:db:91:62:c0:3e:68:16:c4:67:1a:97:e7:64:d5:b2:94:
66:ac:27:46:c2:e7:a8:73:a3:e8:58:41:55:ce:bd:57:79:a2:
0c:fd:44:a2:a5:3f:bc:b7:aa:b9:58:eb:b6:c7:3e:5e:e9:25:
b1:4d:ae:77:88:c5:07:3d:f2:37:a8:b3:ee:4a:68:72:2d:dc:
0d:f7:a7:86:82:b2:e7:d5:a1:75:a9:79:e5:94:2b:7f:0e:ff:
39:8c:de:d3:03:54:38:91:c0:9a:51:80:3b:cf:9b:c2:f7:71:
94:fe:e7:65:1e:2f:45:b5:67:77:16:c5:ba:3b:ab:96:4a:85:
a6:cf:0f:3b:76:26:de:6e:54:4a:d5:0a:b6:61:90:e2:4f:dc:
11:64:62:8e:49:c5:3b:67:c8:4c:cd:5c:4e:b5:14:d3:c2:0f:
44:28:ea:4c:c5:18:05:be:76:e4:6d:a3:8a:f1:e3:24:86:e8:
86:f4:d3:02:44:42:10:18:cc:d7:df:80:6d:d7:c7:61:5e:54:
f6:a2:72:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:34:25 2025 by rpki-client