Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
File: Q8d7RzY2gTePrORmFB1UzIg5nPU.mft (raw, json)
Hash identifier: dqjfY7jELQKxsIP4WjpLAj8WfD4OvIit+Y1h5bdhqgo=
Subject key identifier: C8:72:E5:37:F3:82:A3:6A:05:D7:3B:E8:E3:81:DF:28:96:4D:5A:F8
Authority key identifier: 43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5
Certificate issuer: /CN=43c77b47363681378face466141d54cc88399cf5
Certificate serial: 0196B7B54A9F0BE620AB3BAFAFC10E16B827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
Manifest number: 14C2
Signing time: Sat 10 May 2025 01:00:33 +0000
Manifest this update: Sat 10 May 2025 01:00:33 +0000
Manifest next update: Sun 11 May 2025 01:00:33 +0000
Files and hashes: 1: LhVPheiP2Wbqe7xFjCy9IQ_CSc0.roa (hash: Jd5k/N8+tstl7PIZFFMbIYM8R6nDjGK5pnVrR8G85AA=)
2: Q8d7RzY2gTePrORmFB1UzIg5nPU.crl (hash: AvACpzjWwOcb94aA8IksLsMqDs3rfwQu17ZhDbyRtj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:4a:9f:0b:e6:20:ab:3b:af:af:c1:0e:16:b8:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c77b47363681378face466141d54cc88399cf5
Validity
Not Before: May 10 01:00:33 2025 GMT
Not After : May 11 01:00:33 2025 GMT
Subject: CN=c872e537f382a36a05d73be8e381df28964d5af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d9:5f:52:28:fb:6e:f3:cd:0f:f4:0a:d3:67:
ad:40:9e:ce:92:e7:b1:ed:b0:7d:84:2a:62:b9:e9:
f4:77:15:4f:a5:9e:72:d7:a1:95:53:a5:d6:29:90:
aa:e7:5c:a7:58:b9:e9:6d:99:41:c5:bc:b5:be:55:
d1:41:44:dd:bd:3c:ac:93:0b:17:28:0d:83:53:45:
bb:1e:7c:a0:2a:ec:49:c4:db:2c:d0:ac:35:b0:9d:
dd:ea:65:0f:19:bb:8c:53:4e:ea:fe:35:01:6e:7e:
f8:d8:03:1a:3a:ec:bc:54:80:2f:e6:71:7b:5b:4a:
77:bd:86:9e:38:aa:5a:3d:85:0a:97:71:c9:b6:2b:
4c:35:19:17:90:5c:52:08:b3:ad:08:bc:34:f9:2e:
6e:d1:f5:6a:9b:af:74:91:b4:04:1c:b7:47:85:ce:
a2:0e:82:b1:46:db:85:2f:73:96:c3:4a:b9:4b:fc:
05:c3:8b:2a:49:69:55:97:81:81:0e:89:1c:dd:12:
49:34:15:de:72:17:dd:1f:26:7b:39:7b:7d:68:db:
bb:3d:f2:62:b9:cb:e7:1f:26:00:a1:b1:01:d5:ea:
6c:48:f3:7b:f9:0c:97:f7:5a:e2:76:e8:22:b6:4a:
58:02:31:17:86:0b:2a:f5:50:ed:4a:b9:c9:99:28:
5e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:72:E5:37:F3:82:A3:6A:05:D7:3B:E8:E3:81:DF:28:96:4D:5A:F8
X509v3 Authority Key Identifier:
keyid:43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e4:72:86:e2:56:fe:f3:1a:30:51:9c:1b:bc:97:7b:ae:0c:
c3:55:a3:37:dc:f7:77:73:a3:79:46:b9:73:9c:5e:51:ef:c0:
79:47:2c:4a:2c:1d:bb:26:96:ba:28:dc:3c:3b:00:3c:63:db:
98:39:91:ee:93:2a:0d:6c:c2:87:3f:81:49:c4:50:ba:70:b3:
2e:2e:0c:e4:e4:a8:ff:1f:c5:bc:93:88:63:63:cf:5f:06:ab:
54:e3:0d:c9:51:f2:ff:fc:da:27:e3:b5:85:ce:59:3f:6e:36:
7b:d6:ac:a3:71:0d:9d:c1:e2:a3:f7:e5:fc:9a:98:3e:eb:01:
28:04:15:95:b1:b3:b2:8f:cc:59:e8:af:ca:5a:2a:0a:15:be:
fb:8c:55:cb:d9:e1:5e:64:a5:c1:16:16:06:1c:bd:31:3e:e1:
da:68:41:03:ce:ed:79:74:5d:d0:bd:dd:71:cf:3c:5a:4d:ac:
1f:1f:d2:24:4a:b2:99:01:01:77:13:82:6a:c4:d0:5a:4b:b8:
f5:56:34:71:a7:0c:c1:27:3c:3a:e5:6d:04:55:17:0f:07:0f:
49:a3:34:3f:47:43:f9:de:cb:b1:52:4c:ac:62:c6:82:39:1c:
c3:87:78:10:6f:70:74:2f:3b:af:53:31:21:4a:ab:b0:76:d7:
1a:02:c3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:57:23 2025 by rpki-client