Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
File: qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft (raw, json)
Hash identifier: MFP+VNn0BATGymqh8NmHDbdsdXNlTZ7vrg0Z5YTnJfI=
Subject key identifier: 76:23:BC:E6:9F:F3:3B:80:76:8A:FE:81:5F:14:F8:A1:31:84:42:24
Authority key identifier: AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
Certificate issuer: /CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Certificate serial: 019686C89AE248D9A0C67A5A6135F492A76A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
Manifest number: 14F0
Signing time: Wed 30 Apr 2025 13:00:15 +0000
Manifest this update: Wed 30 Apr 2025 13:00:15 +0000
Manifest next update: Thu 01 May 2025 13:00:15 +0000
Files and hashes: 1: EtuX617xzyrB71Hjc1hl3WMzRjI.roa (hash: QSVoTvnTqOuhcGfy2h2iEu7xdB5mNRvXSamlWm6WYuo=)
2: MBp32VcQqAbMoARjt7V1PCPscvg.roa (hash: pI5Os3fewlyJzy3/SsAFuRA7NUz4NSu4MCASZkD0XZY=)
3: qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl (hash: 5fw5s3ila2GY0DSaMC9dBn0e+jrF4OzxRlrZye+Zeyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:c8:9a:e2:48:d9:a0:c6:7a:5a:61:35:f4:92:a7:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Validity
Not Before: Apr 30 13:00:15 2025 GMT
Not After : May 1 13:00:15 2025 GMT
Subject: CN=7623bce69ff33b80768afe815f14f8a131844224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ba:b4:47:5e:09:e8:b3:4e:10:46:fb:ce:44:
df:dd:b1:5a:e0:06:43:8a:fc:f0:25:d2:8a:83:a4:
7c:ad:86:03:b8:9f:4d:5c:6e:d9:16:7e:0c:a8:25:
ab:db:de:13:1c:41:c7:b1:ee:a6:c6:19:4c:8e:e0:
4b:3f:78:1c:40:cd:2e:a3:71:0c:51:4f:68:1a:d0:
b1:be:48:04:35:f0:52:f4:bd:78:01:f7:25:93:0f:
37:43:74:98:c3:14:79:1b:56:6b:9c:af:1c:76:34:
cf:5d:43:0a:b4:2c:9d:b8:26:f4:ec:b7:a0:e6:a3:
7a:e4:a1:63:36:71:3e:4f:62:b4:d5:f9:64:56:cd:
9b:70:73:a6:46:0a:5d:66:e5:66:f6:f2:d3:f4:b4:
8c:8a:00:e7:c3:f4:a3:c2:74:c1:b7:76:f7:3a:12:
61:cc:80:36:5e:d1:d5:67:3c:fe:58:a2:06:8d:cb:
97:5e:27:d8:54:87:e7:4c:6f:25:52:11:4d:4a:3c:
c1:46:72:6b:5e:b0:9c:5c:ab:89:81:94:fd:61:bb:
16:0b:af:86:e6:43:e2:a2:f0:04:aa:21:e7:f6:1e:
6c:9d:c3:bf:8f:9e:4f:ad:af:22:9b:3e:3f:9c:02:
7d:da:91:38:d2:d7:04:73:e7:f8:78:9b:39:07:76:
1b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:23:BC:E6:9F:F3:3B:80:76:8A:FE:81:5F:14:F8:A1:31:84:42:24
X509v3 Authority Key Identifier:
keyid:AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:0e:60:33:3f:12:81:4a:86:82:c2:be:89:09:58:95:e9:c3:
4d:7d:5b:07:54:4a:80:bb:e2:bd:9c:35:0f:df:f7:be:f7:5f:
92:72:1d:fd:57:9d:f8:ab:f2:35:c7:6d:7c:ba:ac:7a:79:a2:
d1:0c:cb:79:d2:96:0f:66:b9:58:69:db:8c:af:ef:9b:f1:a6:
bb:f3:85:4d:71:cf:2c:cc:1d:2b:b7:4c:ea:32:4b:cb:0d:d0:
a3:eb:d7:9e:34:4d:da:4b:bf:d5:81:9d:58:45:11:d2:dc:d8:
99:38:2c:b0:2e:15:e2:f7:05:a1:fd:9e:fa:f1:cc:15:5f:68:
9d:80:84:1b:23:30:da:a3:4d:52:5c:5c:2e:3b:85:46:7a:50:
3e:06:99:b1:dd:0b:df:5f:ec:fc:c7:77:a0:4e:0c:61:59:85:
d4:43:78:72:0f:d7:61:84:bd:91:1c:90:b6:da:44:e2:95:ff:
e6:b3:0b:41:c6:84:cb:44:21:18:10:d0:b9:f0:25:d6:7a:df:
7c:16:55:c3:03:fd:35:d5:38:f0:65:d4:e3:b2:d7:7b:75:fc:
e3:db:df:09:08:22:75:0b:f8:9c:db:9f:05:ef:68:a7:d1:bc:
d4:9b:51:38:ab:54:2d:b0:ae:a7:6b:58:c7:9c:a0:c1:42:67:
29:aa:58:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:39:27 2025 by rpki-client