Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
File: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft (raw, json)
Hash identifier: J+lLofI7VnDRhq0dU0hmyXRE4sD4Lha2yA3Mxpr6Hlw=
Subject key identifier: 3D:25:C0:7B:43:5E:19:D2:55:96:1F:58:75:08:1C:F5:46:16:71:ED
Authority key identifier: 43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13
Certificate issuer: /CN=43fad79548afc5c83e59bbfe388c64492cb55013
Certificate serial: 019640D521B77D47D66A74D2F6EA28F38E97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
Manifest number: 14F1
Signing time: Wed 16 Apr 2025 23:00:31 +0000
Manifest this update: Wed 16 Apr 2025 23:00:31 +0000
Manifest next update: Thu 17 Apr 2025 23:00:31 +0000
Files and hashes: 1: LV0PrwUwApuyDUZikJDi74P4PbM.roa (hash: CRURkBwcTmvzFW2izVL5pwlfr/5l3k8aD0Pamg8MVGM=)
2: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl (hash: /obRfFkGsS8n5fbf9j4GA0o9IVwGHc8u9UptEdJHjEY=)
3: sG_rr6I8pDA92eA5vBpgqLHPlcc.roa (hash: VBbgkzxs+YQuemItqSI61ff6E1GX47Q0q9j9ZQDjYJM=)
4: z3CwNMmW91OeZadetIEGWrLgAV8.roa (hash: TBa7E7IHnq9QvWerYacnX6IUM0n0LVVjA36Ue+17mgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:d5:21:b7:7d:47:d6:6a:74:d2:f6:ea:28:f3:8e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43fad79548afc5c83e59bbfe388c64492cb55013
Validity
Not Before: Apr 16 23:00:31 2025 GMT
Not After : Apr 17 23:00:31 2025 GMT
Subject: CN=3d25c07b435e19d255961f5875081cf5461671ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4a:46:ed:7c:ee:fd:2f:ac:70:7a:57:d5:e6:
d4:6d:db:9d:2c:bc:7c:32:8a:64:df:66:9d:c6:57:
90:2c:11:28:06:08:4a:12:f5:9b:00:93:3b:13:fb:
08:6c:d8:c7:fa:f2:27:b0:fc:79:36:50:c2:06:bc:
14:70:39:de:9e:71:45:d6:f6:26:f3:e5:ca:e4:ad:
3a:3d:aa:f3:b2:07:10:8d:a6:d6:d6:9d:91:22:d8:
d7:b1:39:94:1e:27:df:d7:92:54:a8:4e:bf:00:28:
b3:48:50:e0:08:3c:c2:db:9e:77:da:39:5e:a9:ce:
85:39:94:b8:bc:26:85:4f:c9:d8:5f:72:8c:1a:37:
9d:ba:21:dd:1f:ee:3e:99:69:5f:6e:e3:93:53:23:
e6:95:43:e8:9c:ad:d9:34:55:6d:e2:23:ae:16:80:
84:ae:cb:73:bc:00:c4:2b:bf:9b:35:9f:77:3c:6d:
43:df:dc:37:68:d8:81:c7:56:44:e2:79:a6:1c:1f:
23:98:62:be:39:0d:13:9f:2a:a9:57:40:49:25:e5:
26:2e:98:86:60:ff:d2:58:68:49:4f:c2:06:80:0d:
ec:e4:93:a0:57:ea:54:28:f5:8a:d3:a8:fe:9a:3c:
65:87:20:04:f7:80:9c:fd:56:e4:f8:96:67:0b:db:
ae:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:25:C0:7B:43:5E:19:D2:55:96:1F:58:75:08:1C:F5:46:16:71:ED
X509v3 Authority Key Identifier:
keyid:43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:8e:99:72:63:f9:07:b0:63:1c:70:69:44:c3:2f:42:b0:69:
98:90:2b:79:c8:85:4f:ab:a0:3a:fc:d7:9a:95:5f:55:73:bd:
82:21:e2:f5:c2:7a:5d:ed:bc:a3:58:7a:28:29:d4:f6:b4:15:
7f:33:c5:d8:b3:c7:5a:51:42:f0:b8:d5:c3:0e:62:51:0a:76:
eb:38:0c:20:b9:1e:83:ef:a9:e5:b2:16:93:fc:38:d6:28:21:
bc:d5:d3:85:49:89:61:43:d0:18:08:a3:5f:ff:55:40:51:ab:
84:01:5e:fd:a7:d6:bb:42:83:10:50:71:69:2a:af:f4:3b:fe:
a8:85:d0:6d:77:d2:13:ad:b4:39:3b:4c:07:0e:ec:bc:a9:b1:
51:0b:56:41:c5:8c:65:75:f4:3f:d7:de:7e:d2:aa:43:a4:f4:
a3:4e:57:0b:c5:10:34:23:68:1b:61:3e:03:b7:32:8d:5a:96:
1d:15:f8:8f:6e:74:e5:50:55:4e:e3:f5:7c:1d:9c:1e:fd:c5:
f0:2d:0a:af:8e:59:57:0c:a0:b2:4c:8a:c0:0c:e0:8b:97:6d:
97:2a:00:99:eb:fe:d4:75:49:d1:df:20:7b:20:07:81:5f:54:
27:50:6c:53:b9:a5:75:a3:58:96:73:a6:15:22:52:99:b9:67:
b9:f4:a5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:39:47 2025 by rpki-client