Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
File: qmeVicHEiJfQmy1P7XpmBEqHbqM.mft (raw, json)
Hash identifier: cRuvGXQsYlNRPPJNxq0O2TPR7E6RONQnIxvUNkhWnpU=
Subject key identifier: 82:47:B8:0E:F9:1F:4C:6E:2E:26:40:80:36:F9:FA:DB:CC:9A:21:85
Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
Certificate issuer: /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Certificate serial: 0196CACDF8EBD50C9712BE922E24D151F6DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
Manifest number: 14FD
Signing time: Tue 13 May 2025 18:00:18 +0000
Manifest this update: Tue 13 May 2025 18:00:18 +0000
Manifest next update: Wed 14 May 2025 18:00:18 +0000
Files and hashes: 1: 6ePgS-H7Yzuq3toYao1SpcCwfpw.roa (hash: 6wwpW2bNKeFKmlaR35jx40rgyoKDaJsTG+ac1jtGsgs=)
2: h7iUVsathfWiZn6MUEREGc5Lrns.roa (hash: 6VmzPFIIIU0V6MlQJOV1H1bykzKrpknx8IQ1i3Vq0eM=)
3: qmeVicHEiJfQmy1P7XpmBEqHbqM.crl (hash: LIwEwiyHbq3DvIHCmctpPWnQTknW13/O7b4BGVpqCVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:cd:f8:eb:d5:0c:97:12:be:92:2e:24:d1:51:f6:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Validity
Not Before: May 13 18:00:18 2025 GMT
Not After : May 14 18:00:18 2025 GMT
Subject: CN=8247b80ef91f4c6e2e26408036f9fadbcc9a2185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:16:d0:ce:b8:73:8e:b9:28:e2:e0:7b:7b:af:
83:65:96:90:8e:7b:48:40:83:3c:43:35:cd:f2:78:
cc:15:8c:b4:a2:06:34:50:a5:98:3e:c8:e4:33:25:
24:64:63:8d:23:96:a4:1f:ad:54:65:2e:ba:0b:aa:
7d:70:59:c5:64:46:23:80:2e:59:61:80:47:13:24:
df:ef:af:ef:f7:b3:88:57:73:57:45:7e:f4:f8:a2:
ee:60:42:55:db:c7:53:f7:08:6d:aa:67:c5:b5:21:
af:d6:f6:b4:e4:a1:84:51:60:d0:c2:1b:36:91:53:
10:58:3f:e7:4f:1e:63:9f:86:1c:0b:58:5a:5d:90:
ae:29:45:73:9b:7f:2d:54:cd:8a:79:55:c6:f0:f6:
d5:56:72:09:fc:8c:99:42:b6:89:6d:2d:96:01:6a:
b9:9e:c2:1d:01:4a:bb:be:5c:56:e8:fd:43:1a:68:
30:b5:04:50:1f:8b:02:03:7b:d1:bf:49:01:87:5f:
ad:d9:a0:45:a0:77:93:89:4a:41:99:f8:45:dc:d5:
92:d7:96:3e:71:2e:18:78:bd:fc:03:5c:de:db:5e:
3a:a8:ef:81:49:bc:e0:57:0f:07:26:44:51:c8:c8:
e8:d1:de:16:62:23:63:8d:0e:6d:0c:b8:ad:30:66:
36:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:47:B8:0E:F9:1F:4C:6E:2E:26:40:80:36:F9:FA:DB:CC:9A:21:85
X509v3 Authority Key Identifier:
keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:64:93:d5:48:9c:bb:81:ee:4b:66:03:79:a6:f0:d6:ea:70:
b8:0b:f1:0b:77:44:32:e3:2d:75:3e:a4:8a:0a:8b:d2:44:b2:
27:a7:af:50:ac:03:11:c5:57:5c:2c:b0:bb:27:6b:12:84:01:
1d:f0:c4:7f:6f:a9:78:21:d4:3c:41:21:ab:b0:95:c6:7f:71:
6c:b1:64:6c:2f:9e:4c:4a:d4:3a:a7:5a:65:17:56:3f:15:04:
ab:f7:b0:2b:c1:d9:59:ed:e1:da:c0:24:ff:77:f8:c8:2e:9b:
cc:e9:df:b4:d7:dd:1e:90:48:e0:8b:3e:04:8f:23:0c:a0:8e:
7e:22:57:c5:d1:a9:db:ff:7c:36:45:a5:e9:18:99:2e:a5:b2:
93:d6:67:38:a8:4b:38:06:d1:6c:98:21:40:c5:23:c9:7c:90:
f9:3f:2a:13:9d:b1:57:5f:b0:dc:55:0b:6a:3c:fe:a2:eb:f0:
cd:6c:67:e7:98:b4:c5:a5:16:12:6b:be:49:a3:10:c4:4e:75:
f0:3c:d2:51:e4:3c:97:b1:cb:24:80:f7:63:7e:f8:18:2e:59:
77:7b:f1:01:29:a5:1b:58:f3:c1:11:25:89:a7:0b:5f:89:5b:
be:7d:2e:47:a8:b2:20:02:2c:a5:83:0d:b3:ea:f5:f3:28:48:
41:db:72:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 23:05:56 2025 by rpki-client