Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
File: QxfdFbYr3XESWZuBQjNg7uegEpY.mft (raw, json)
Hash identifier: 0v9foTfQby1Rnmy+WpPUzfPSccpgIl1fSZ8IMsBvIbs=
Subject key identifier: F8:78:46:FF:01:11:CA:EB:60:8A:C4:1E:51:BB:31:C6:8C:3A:17:78
Authority key identifier: 43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96
Certificate issuer: /CN=4317dd15b62bdd7112599b81423360eee7a01296
Certificate serial: 0196C83AC8B7233D4C6FE1F8C28F12D97281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
Manifest number: 069F
Signing time: Tue 13 May 2025 06:00:17 +0000
Manifest this update: Tue 13 May 2025 06:00:17 +0000
Manifest next update: Wed 14 May 2025 06:00:17 +0000
Files and hashes: 1: DRGQu6VcNUxgbC-i_8UH42qgDUM.roa (hash: Tkt8CjSKbVkubPBErWJwsPegnkm3xx4+YfHW6WMiPHA=)
2: QxfdFbYr3XESWZuBQjNg7uegEpY.crl (hash: jykGNVKVpN1a18CJ3cI+dPQjU7Pt8Gyk7RyYosfL87Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:3a:c8:b7:23:3d:4c:6f:e1:f8:c2:8f:12:d9:72:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4317dd15b62bdd7112599b81423360eee7a01296
Validity
Not Before: May 13 06:00:17 2025 GMT
Not After : May 14 06:00:17 2025 GMT
Subject: CN=f87846ff0111caeb608ac41e51bb31c68c3a1778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:84:22:0a:b4:e3:e1:af:ac:61:b3:7b:90:36:
ac:5e:9d:04:eb:8f:ca:ee:2e:88:cd:cd:66:a7:60:
ed:b5:c8:0f:c8:c0:5e:20:1c:a4:ea:22:73:6c:ad:
44:38:46:e8:2f:23:81:c7:de:e1:ff:7a:86:c2:ca:
a2:99:ab:c9:13:b6:0d:94:61:fe:40:8e:6e:eb:a4:
ee:1b:58:71:c1:b9:54:02:6f:4b:af:7d:b5:91:f2:
fc:d2:89:31:85:03:4e:55:c4:99:e3:7b:d0:58:8d:
a7:07:c0:69:be:10:33:cb:7a:3a:54:bc:da:78:18:
79:1a:33:3d:66:dd:97:42:2a:28:6f:dc:cf:c3:6f:
41:30:36:d5:c7:1a:4d:2e:58:11:65:cb:12:9f:01:
2c:d9:cf:57:39:c5:87:44:57:06:a5:9d:12:55:0f:
94:b2:78:a1:4c:d9:b5:9d:01:79:7a:cb:f2:97:2f:
2a:da:8d:db:f7:91:59:de:2e:b3:08:15:e6:77:fc:
4d:cc:16:bd:a3:6c:83:4d:53:ed:f5:79:cc:d9:94:
2b:8c:55:dc:32:b0:d4:c5:ea:f0:71:af:20:0c:c9:
2b:50:37:3a:a9:5c:90:2e:27:62:b6:75:91:7e:00:
1e:5c:39:9a:75:dc:b8:6d:41:e9:f2:69:f5:08:91:
e6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:78:46:FF:01:11:CA:EB:60:8A:C4:1E:51:BB:31:C6:8C:3A:17:78
X509v3 Authority Key Identifier:
keyid:43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c1:54:e0:f9:55:97:78:17:8d:ed:87:5a:7a:06:8d:de:65:
d7:35:c0:fa:58:5d:35:ed:8b:5a:81:7a:4d:86:f1:23:1c:a7:
e9:f6:5e:6e:54:4d:43:43:8e:8a:8f:90:71:ac:d6:39:51:e7:
bc:74:4d:d8:c0:de:2c:eb:5b:e5:57:01:81:dc:7b:2a:3d:fb:
15:16:99:4f:26:d7:5c:bc:7b:9c:2d:3f:70:f8:97:93:33:93:
b4:0a:3d:ba:74:e3:57:d1:3a:df:65:5b:00:dd:48:d9:7c:d3:
4a:b3:23:5e:db:6f:5f:96:5c:49:fd:f7:4e:bb:23:f5:ff:04:
be:95:0a:a4:4b:cc:7d:15:83:b6:88:d7:ec:54:b9:22:2e:ef:
c3:b0:6d:8f:68:8f:7e:be:de:c2:63:9d:f2:90:2a:f5:39:f6:
50:ef:22:b3:90:48:5e:60:a9:50:b6:18:88:ac:2d:21:44:fd:
93:5b:53:9b:d2:b5:89:cf:c2:be:07:be:8f:68:42:45:2d:54:
95:93:0a:b4:fb:8d:7c:ef:61:e3:51:be:6a:ce:1b:27:0d:d1:
60:c9:03:43:6f:3f:cb:b5:f5:30:b7:8a:55:a5:ca:66:94:c6:
8b:14:0a:bd:65:1a:52:7b:c2:0d:81:c8:e9:f6:11:a9:26:5a:
79:5c:18:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:22:13 2025 by rpki-client