Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft
File: QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft (raw, json)
Hash identifier: nBmfK2iOxVSkKtLD7pOdRlrJJRnDhBqlvht/DMzSnlA=
Subject key identifier: AF:38:D7:B8:14:43:4E:3C:4B:6A:A0:40:5A:F4:73:16:F8:5E:9A:3B
Authority key identifier: 41:55:08:7A:81:84:8B:F7:B3:7F:F8:BE:59:75:1D:79:44:0D:81:16
Certificate issuer: /CN=4155087a81848bf7b37ff8be59751d79440d8116
Certificate serial: 01967B32FB00DE0CAEA3AD45F355BFB04424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVUIeoGEi_ezf_i-WXUdeUQNgRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft
Manifest number: 046D
Signing time: Mon 28 Apr 2025 07:01:00 +0000
Manifest this update: Mon 28 Apr 2025 07:01:00 +0000
Manifest next update: Tue 29 Apr 2025 07:01:00 +0000
Files and hashes: 1: KZYzQ7jFzWYYwYRhQ-ZJNAP7g7s.roa (hash: bwXn17r3CjUQeiw9goACwMSayH6c9Rjo8urDQ0LO3DQ=)
2: QVUIeoGEi_ezf_i-WXUdeUQNgRY.crl (hash: iHEn4dzjwgQnceIGLoigZfGFFX4ryz1Y9eBkOCcMe4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVUIeoGEi_ezf_i-WXUdeUQNgRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:32:fb:00:de:0c:ae:a3:ad:45:f3:55:bf:b0:44:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4155087a81848bf7b37ff8be59751d79440d8116
Validity
Not Before: Apr 28 07:01:00 2025 GMT
Not After : Apr 29 07:01:00 2025 GMT
Subject: CN=af38d7b814434e3c4b6aa0405af47316f85e9a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:73:06:9a:8a:d1:6e:21:06:01:c5:da:24:00:
d5:ea:f6:8b:18:8e:04:8a:3b:f5:30:c5:44:82:61:
a7:25:0f:e3:a7:bf:5b:1d:36:33:3c:bb:07:fb:0e:
7c:e4:69:99:98:d1:0d:b3:7e:c0:36:34:68:5a:d5:
f5:cd:75:20:a5:33:8a:82:95:59:0f:a5:c2:83:1b:
b2:81:94:97:41:8b:1a:77:02:34:39:19:55:c7:fa:
cd:45:2d:5c:e8:34:5d:0c:1b:39:78:f6:55:7d:0f:
47:39:3c:ba:65:8a:4f:07:3f:81:9c:1b:79:12:83:
db:5c:03:f2:f5:05:28:b4:0d:d5:28:c9:1a:08:3c:
9e:83:30:6e:e0:53:45:35:74:5e:c9:17:12:d8:dc:
14:df:f5:a4:08:1c:50:1e:7d:9f:6b:34:3e:f5:c3:
4f:0c:12:48:0d:a5:7d:09:5a:99:7f:2d:77:32:1d:
67:81:eb:02:25:2b:88:da:bb:0c:46:d8:6a:f8:af:
ea:77:46:e3:2a:ed:e7:4d:65:34:7a:73:de:5e:42:
14:5a:ee:44:58:8f:8b:fa:07:f9:28:a9:08:e4:b3:
07:07:16:fb:cc:29:39:8d:08:8e:6b:1b:f7:a2:c6:
e0:fb:02:96:82:da:ac:3e:ee:8c:1f:9d:33:e8:ff:
61:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:38:D7:B8:14:43:4E:3C:4B:6A:A0:40:5A:F4:73:16:F8:5E:9A:3B
X509v3 Authority Key Identifier:
keyid:41:55:08:7A:81:84:8B:F7:B3:7F:F8:BE:59:75:1D:79:44:0D:81:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVUIeoGEi_ezf_i-WXUdeUQNgRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b4:8a:cf:d9:36:2c:be:47:d3:03:a2:18:c1:68:ef:22:73:
ac:92:70:a8:0b:a4:83:f0:63:55:ee:e4:78:54:fe:77:84:21:
3a:cc:9b:c0:e6:32:94:57:05:d9:c4:6e:34:9a:fa:ac:7c:3c:
2c:9e:03:05:80:a1:9f:62:dd:bb:3e:84:0d:d1:ff:8a:30:e8:
59:24:0d:6a:ab:f2:28:00:00:72:9d:84:a2:aa:18:f2:92:cf:
de:3c:74:b2:2b:94:ba:36:5a:e8:8a:f8:77:ea:07:52:4d:01:
1b:2e:4d:35:a8:45:8a:a9:ee:c3:ab:f6:3e:f6:a2:2a:66:25:
00:52:8d:9f:35:11:7e:85:31:d7:e8:a4:26:73:b8:cc:73:ae:
81:a2:b9:27:33:76:69:4f:7c:f3:18:4e:d8:db:9e:e1:fa:a5:
1e:00:a4:b2:50:20:6c:bf:9d:50:b8:e8:a4:88:6b:10:ac:99:
61:c6:1d:a1:52:16:72:de:a8:90:33:fa:32:1a:2d:f7:27:92:
ee:ac:dc:5c:86:b5:7a:44:7f:4a:eb:5b:83:6f:ca:a7:02:0e:
30:2f:19:c5:58:11:4a:c3:84:89:f4:e6:4d:7a:95:51:8e:35:
d6:7f:a8:f2:83:3d:1f:c9:57:21:48:3d:77:61:78:c0:f9:2f:
dc:78:61:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:18:03 2025 by rpki-client