Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
File: Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft (raw, json)
Hash identifier: d6R1VTi8ebFgesZhJnGneabQukzeRY+ITnHcfMqMnxA=
Subject key identifier: 5C:FA:49:61:07:27:E3:DB:CB:E2:37:3F:1F:89:3B:74:95:AF:AB:E9
Authority key identifier: 42:DE:27:FA:88:79:05:E0:C9:C1:F5:3F:67:F2:3F:29:6D:04:5F:0E
Certificate issuer: /CN=42de27fa887905e0c9c1f53f67f23f296d045f0e
Certificate serial: 01969F0816B110AC890E04D56F88404E7645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
Manifest number: 0AED
Signing time: Mon 05 May 2025 06:00:29 +0000
Manifest this update: Mon 05 May 2025 06:00:29 +0000
Manifest next update: Tue 06 May 2025 06:00:29 +0000
Files and hashes: 1: GjL9gwLKb-oKSYTlHtFQE_CZaJs.roa (hash: mCVCuaWcX9YvC2fV3yIwbRSQDcC/PmXYfMHTWio0d9k=)
2: Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl (hash: Ayk6eq69M9DbAyQCoxLNQdj81sqAoDjWwxgMlIlBZYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:16:b1:10:ac:89:0e:04:d5:6f:88:40:4e:76:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42de27fa887905e0c9c1f53f67f23f296d045f0e
Validity
Not Before: May 5 06:00:29 2025 GMT
Not After : May 6 06:00:29 2025 GMT
Subject: CN=5cfa49610727e3dbcbe2373f1f893b7495afabe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8b:40:77:48:1d:5c:3d:42:37:46:c5:f1:03:
8d:36:ed:ff:f2:35:77:fb:59:00:bf:c3:85:cf:a2:
68:71:22:ab:4d:fc:50:9e:38:f3:66:1c:1f:83:99:
9f:09:1f:50:09:7d:d8:6c:9e:90:8c:d0:96:02:ee:
92:b8:b2:18:4c:d1:86:01:cc:74:c4:f2:cb:f2:ae:
68:78:97:7e:d0:db:15:2a:7b:ed:1e:c9:9b:30:44:
fd:a0:dc:05:74:51:f3:b4:67:3d:09:bc:67:a5:69:
12:25:5c:17:bb:e3:17:90:63:18:b9:fd:b3:33:6e:
58:50:95:ba:95:fc:b9:6a:1f:cf:48:b8:5b:e8:41:
cd:f9:63:8c:82:49:d3:8a:c4:1f:87:9e:31:74:19:
05:3b:81:82:a3:d4:37:92:df:02:f7:fe:e3:75:a0:
13:01:d1:90:4f:47:bf:ee:69:fa:43:47:67:fb:40:
41:b5:1e:86:8c:89:cd:dc:f6:bf:f1:e2:7e:f2:9c:
0c:57:e7:1c:84:11:8e:a9:b5:85:71:b1:01:a7:c5:
ad:dd:cb:fa:73:4e:75:5e:0e:c0:b7:50:07:94:e1:
c5:2d:80:6b:07:d4:e1:39:5b:30:34:e1:42:e0:7c:
40:00:8d:62:b8:aa:71:8d:4d:16:01:71:d2:88:3b:
a8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FA:49:61:07:27:E3:DB:CB:E2:37:3F:1F:89:3B:74:95:AF:AB:E9
X509v3 Authority Key Identifier:
keyid:42:DE:27:FA:88:79:05:E0:C9:C1:F5:3F:67:F2:3F:29:6D:04:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:8c:bd:0d:06:27:af:d9:2d:c3:a4:be:fb:ad:20:11:1d:06:
01:d2:32:be:2a:21:80:b9:ac:c7:ff:79:3f:8a:67:40:57:71:
80:da:39:ce:75:e6:0d:27:29:ec:12:a2:8c:3e:4f:40:34:ae:
70:19:e7:97:b4:73:45:db:2f:4c:70:c7:5f:f1:8e:67:70:13:
b7:1c:13:8d:b6:c6:33:d7:77:52:a6:c7:48:c1:46:c2:1b:05:
fb:66:ee:b8:ad:9d:90:9c:f8:d5:01:ba:f6:3e:23:d4:a8:07:
43:4a:0f:e2:54:e5:2f:44:3f:a6:8c:78:d1:55:4d:42:cf:0a:
75:21:59:3a:c1:d4:96:62:fa:b3:07:21:d9:d9:09:94:73:c3:
1e:06:ea:8e:f3:31:d7:f0:48:f7:e4:02:94:eb:f4:5f:ec:56:
d4:ab:64:c3:e8:75:1c:75:a1:a3:08:ca:f8:f4:17:06:06:5e:
04:72:c4:75:b6:8e:52:5c:82:10:77:d1:fd:63:8f:22:e8:03:
c5:2d:6c:44:8e:4c:f5:51:da:2a:cf:e2:0b:f8:97:45:24:c6:
86:d7:0e:88:2f:4f:cd:5e:74:f5:fc:b6:13:17:3d:19:6e:7e:
94:7c:6c:e3:49:0a:f0:43:f9:22:ed:f4:86:7b:a6:5f:f1:21:
48:50:49:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:51:44 2025 by rpki-client