Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
File: QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft (raw, json)
Hash identifier: pay35UoMcDujPBPZkUAbfREnUHBz2JWA9BcxI+ejMjk=
Subject key identifier: 2B:F4:A4:45:E2:38:28:3F:5F:4C:B7:D2:34:B5:11:C3:0E:C3:76:90
Authority key identifier: 40:8F:A0:17:53:2F:F6:D9:FB:38:B4:00:37:89:6A:FA:F0:AA:CF:8B
Certificate issuer: /CN=408fa017532ff6d9fb38b40037896afaf0aacf8b
Certificate serial: 019686FFDAE8F48D6F21258BBF77391839B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
Manifest number: 06E4
Signing time: Wed 30 Apr 2025 14:00:36 +0000
Manifest this update: Wed 30 Apr 2025 14:00:36 +0000
Manifest next update: Thu 01 May 2025 14:00:36 +0000
Files and hashes: 1: QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl (hash: E3JqvBQ6Km0s1FOih2YaYaDjWrNbtkcUBCWAFLVqrWY=)
2: Z5KDHzf527U1qRAIHwgcHaWLd8Y.roa (hash: 2FLC0+uc30V7W0I0O5nyFk8rgVmBx+XIWSxS6WsMyJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:ff:da:e8:f4:8d:6f:21:25:8b:bf:77:39:18:39:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408fa017532ff6d9fb38b40037896afaf0aacf8b
Validity
Not Before: Apr 30 14:00:36 2025 GMT
Not After : May 1 14:00:36 2025 GMT
Subject: CN=2bf4a445e238283f5f4cb7d234b511c30ec37690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8a:ae:e2:e6:42:b1:e9:9b:1e:01:fd:64:c9:
d3:88:b6:31:57:29:39:54:81:e1:b3:15:61:83:4f:
07:5b:46:de:26:73:c4:bb:d1:e9:cc:aa:1f:63:6a:
b7:15:ea:83:3b:a7:d2:c7:11:35:61:fb:d6:14:64:
32:7b:dc:b4:a1:7e:e0:bc:aa:1f:c6:33:47:28:43:
75:cb:49:c2:27:1e:73:4b:2b:82:cb:e6:82:d4:ce:
99:4d:d3:b9:85:33:29:8e:a2:62:60:03:07:5e:92:
3e:36:dd:a8:4a:af:93:24:08:ac:10:6a:7a:50:a6:
e9:6b:7b:a5:b4:84:db:b9:20:e2:dc:b8:fa:1a:f4:
f5:6c:fc:ce:6c:da:13:dd:8f:87:28:03:9b:a5:c0:
66:93:bb:e3:a8:e7:f6:e4:48:4e:c2:7c:0b:78:a6:
52:c1:00:f4:de:89:59:20:52:df:82:85:d3:a7:a0:
89:27:40:36:9f:4e:dc:47:2d:b7:7b:97:45:07:bd:
a5:6f:39:d4:93:32:fd:3c:c6:a2:23:0f:63:c1:24:
ad:71:2f:1d:3c:05:d5:52:dd:0f:61:8d:2b:98:0f:
e1:a1:98:98:dc:01:a9:30:f8:a3:3f:ac:de:43:c5:
46:f2:3c:af:d9:cd:7d:ab:da:6f:f4:e9:43:84:40:
b1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F4:A4:45:E2:38:28:3F:5F:4C:B7:D2:34:B5:11:C3:0E:C3:76:90
X509v3 Authority Key Identifier:
keyid:40:8F:A0:17:53:2F:F6:D9:FB:38:B4:00:37:89:6A:FA:F0:AA:CF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:72:bb:20:b0:67:2e:69:c6:f4:74:21:ee:1e:75:e7:60:01:
89:53:4b:1c:1a:1e:5a:52:87:88:0c:13:b8:c6:e1:85:3d:7e:
ac:e1:26:3f:f9:27:2f:f9:d7:ae:98:a2:db:a7:a5:e3:49:9c:
cb:4a:9c:2e:6d:04:0b:d9:10:57:d2:e4:d7:e4:cf:e4:11:bd:
d9:7c:e2:99:aa:1a:82:29:6a:71:bd:62:03:fc:91:08:58:36:
37:4e:e2:d1:ae:f4:b8:14:52:05:e5:01:16:bf:f3:07:59:ff:
25:96:79:a5:3c:06:7b:93:31:a2:0f:24:53:0a:27:90:ff:46:
ac:dd:c8:4c:69:f0:63:fc:18:83:8f:ae:56:9a:fe:1d:e6:db:
d7:1f:af:0f:b4:3a:c4:42:cb:b4:77:0c:38:a4:47:07:1d:f8:
a8:08:72:42:8b:36:f0:b8:55:6b:b2:df:ae:a7:3c:aa:6b:a0:
68:fe:42:2b:fa:ae:58:dd:42:25:be:f2:cd:93:4b:cb:37:77:
41:f1:d3:e7:7b:eb:be:e8:5b:d2:44:01:06:29:b2:85:18:02:
c6:5a:93:f6:af:13:2c:e8:e6:04:a1:b3:a9:e9:7e:37:8d:53:
d4:97:aa:86:27:5f:b9:85:eb:70:8c:e8:1b:c1:af:88:93:52:
41:23:0c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:49 2025 by rpki-client