Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
File: QRxDIgghkceeLYbbThv50HGOJ-k.mft (raw, json)
Hash identifier: ExD+lGLtWP3U34Qo5eIcGsox1st2k7RPQV2X7nRSKmQ=
Subject key identifier: 42:C8:8A:C0:26:6F:DD:C5:77:09:44:22:4D:06:C5:33:15:96:8D:F8
Authority key identifier: 41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
Certificate issuer: /CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Certificate serial: 01967ED874FB5F072B97D8471B942FFDF891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 00:00:36 +0000
Manifest this update: Tue 29 Apr 2025 00:00:36 +0000
Manifest next update: Wed 30 Apr 2025 00:00:36 +0000
Files and hashes: 1: FVpdVuEnsDRMHRWVu11uzU70gi0.roa (hash: mJhCl2lN+VqxL/uU8LnW1pAhhjzpMKfJN4amGIlMec4=)
2: PoyytAvXOYVvBU28xnJ13dEQvjk.roa (hash: i4hitHtlLKsldZIYK5cClvI2iYzkK5dcUJcf/PHsfy4=)
3: QRxDIgghkceeLYbbThv50HGOJ-k.crl (hash: p6mOPZbUyMXPg4LLb4FboWXdyFHdqfkOI5JATaOsTLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:74:fb:5f:07:2b:97:d8:47:1b:94:2f:fd:f8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Validity
Not Before: Apr 29 00:00:36 2025 GMT
Not After : Apr 30 00:00:36 2025 GMT
Subject: CN=42c88ac0266fddc5770944224d06c53315968df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:d8:d2:8e:7d:ad:e2:95:5d:86:40:4e:50:0a:
d0:79:e8:35:67:b9:c6:b7:53:27:b0:1e:e5:bb:6b:
74:fe:41:57:4c:91:a6:4a:a5:4b:b2:3e:53:2e:76:
f1:56:5b:c7:56:f0:81:21:66:c0:0c:3e:c0:7e:a6:
a5:bd:2d:be:55:c4:17:fd:72:01:cc:74:5f:fb:db:
fd:c2:4a:e2:8c:e6:d8:91:13:1a:1e:41:97:c2:f3:
cb:a6:ec:bc:a5:6e:b0:0a:dd:b1:8d:04:17:84:45:
ee:29:88:eb:98:f9:c1:08:ce:4f:54:3c:86:45:a7:
29:71:29:fb:5f:f8:bf:3f:06:65:d1:50:ee:5d:fc:
d2:c4:ef:f8:3d:7c:ac:dd:1a:cb:c8:37:74:02:37:
37:10:c9:24:09:0f:d6:5c:08:7f:fd:e4:44:5b:3b:
87:ca:b7:02:4e:d8:d5:e7:ae:ef:71:13:36:a8:1d:
61:14:55:aa:5d:d2:4f:ad:b5:e8:07:94:d6:2c:80:
5b:10:c1:b1:09:b6:4e:fa:f7:77:13:89:b1:ae:9c:
7a:3f:f3:d2:47:87:ca:f9:63:04:57:3b:96:e4:e4:
51:f7:e9:53:50:d8:90:3a:bb:11:51:cf:b8:5b:47:
46:f7:95:a4:8d:a4:0c:db:7e:a5:c8:b0:30:c3:54:
82:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C8:8A:C0:26:6F:DD:C5:77:09:44:22:4D:06:C5:33:15:96:8D:F8
X509v3 Authority Key Identifier:
keyid:41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:99:a4:a2:78:63:a9:d6:16:e1:74:80:f3:33:af:13:b7:5d:
f1:e9:e2:8d:0e:eb:fa:2d:7a:45:d2:19:f3:ad:6e:83:dc:ca:
b7:9b:69:9b:9b:6d:ff:da:c8:0b:c6:e8:4d:66:bc:c9:3f:0f:
cc:56:a5:ed:18:40:bd:f7:53:ea:f6:3e:e2:70:7f:90:56:32:
e7:ee:56:73:e5:6b:d4:1b:f6:2d:de:8e:e5:9b:9d:25:92:9b:
da:79:2d:b3:ec:b4:a5:31:ac:cb:5a:66:c5:72:e1:c2:56:0c:
db:44:82:d6:75:b6:91:56:18:c8:5c:b1:78:b3:25:88:9a:81:
71:49:82:0d:4f:fe:bb:dd:00:31:c2:64:db:24:94:50:0b:f9:
2b:9b:e6:a3:12:59:b5:01:21:45:65:e4:57:86:fa:2a:d5:69:
13:e7:91:eb:a7:58:c5:6c:f5:42:1a:85:27:79:72:97:83:30:
94:4f:ef:a6:98:bd:0f:f0:ba:4a:ce:eb:86:e3:d6:d2:3d:2c:
1f:d3:89:a7:3d:87:4c:dd:fa:87:0e:3c:97:f6:9c:52:09:3c:
a9:27:47:ae:09:9f:43:a2:fb:42:e9:97:bf:4a:17:74:c2:11:
fd:21:88:04:25:cb:0c:8c:67:f3:b4:c1:29:66:f7:1b:f8:d0:
4b:32:6c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:03:27 2025 by rpki-client