Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
File: qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft (raw, json)
Hash identifier: VvtyZc4C02JSO4uHz68lxn3xGeDc/Dw11Vdc7JAKNcw=
Subject key identifier: 8B:D4:EA:49:F8:B9:C7:AE:5A:02:25:FB:9C:86:FE:D1:24:9D:47:FC
Authority key identifier: A8:45:70:85:4F:E8:86:B9:4A:E6:25:36:3C:62:5D:DA:60:BB:3E:FC
Certificate issuer: /CN=a84570854fe886b94ae625363c625dda60bb3efc
Certificate serial: 01967567953B69EEC05A6DE4254D1903B55B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
Manifest number: 14A1
Signing time: Sun 27 Apr 2025 04:00:44 +0000
Manifest this update: Sun 27 Apr 2025 04:00:44 +0000
Manifest next update: Mon 28 Apr 2025 04:00:44 +0000
Files and hashes: 1: jdn52CanAogysSSsHvxl8oKYqEU.roa (hash: nA6uVwF0uVARnhrLjCGdNBrWcovmnCAcVghKvtj+qwk=)
2: qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl (hash: GzzmcWe/pfM4XTODfWqHZ0p1mrgPzLsdB0+pJVq0pck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:95:3b:69:ee:c0:5a:6d:e4:25:4d:19:03:b5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84570854fe886b94ae625363c625dda60bb3efc
Validity
Not Before: Apr 27 04:00:44 2025 GMT
Not After : Apr 28 04:00:44 2025 GMT
Subject: CN=8bd4ea49f8b9c7ae5a0225fb9c86fed1249d47fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2b:6c:00:7f:d5:9d:1f:c5:e8:d2:0f:97:84:
29:ad:4c:49:ff:5e:8f:5d:25:81:ec:ab:b1:d6:0f:
ff:55:6c:4b:52:ad:9a:6b:11:7e:29:eb:f8:bf:7f:
3d:77:38:8d:bf:ff:df:93:98:78:16:28:d4:24:72:
e5:a4:bd:a2:ba:e2:37:a1:d9:76:bd:48:4e:ec:51:
cf:0b:eb:65:c9:ae:ac:c9:a3:6c:89:25:a8:4f:d4:
6b:23:de:2d:54:a2:25:51:7f:0f:9a:7f:a1:4f:8b:
dc:90:ee:95:11:98:79:93:63:16:df:a5:f0:bc:ad:
ed:3c:45:4c:00:29:ad:5f:15:80:a6:03:c7:ff:39:
b0:8d:93:66:10:75:90:e1:a6:0c:df:0f:4f:11:43:
da:f2:3b:d2:33:77:30:c9:61:36:5c:b7:bf:8f:4b:
ae:3a:9a:fe:b8:66:9f:70:1e:aa:ba:95:57:4a:3e:
fc:d1:66:46:cc:4c:b1:aa:7a:21:3a:cb:8e:10:37:
69:1d:87:10:f6:fc:f7:8b:d5:7d:9c:0d:22:7c:55:
c6:92:4f:e3:56:97:94:35:5b:20:92:f2:2e:6d:5a:
c0:4e:cb:38:26:13:66:0e:93:f7:02:c6:25:d5:59:
03:b9:0b:3d:2a:30:5d:ab:e4:5e:97:10:c8:84:43:
03:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D4:EA:49:F8:B9:C7:AE:5A:02:25:FB:9C:86:FE:D1:24:9D:47:FC
X509v3 Authority Key Identifier:
keyid:A8:45:70:85:4F:E8:86:B9:4A:E6:25:36:3C:62:5D:DA:60:BB:3E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:62:82:86:08:b2:17:ca:0d:27:8c:24:2a:15:6a:24:dd:1e:
cf:6b:9d:d2:ef:d9:79:0d:2e:59:5d:c2:17:61:c4:33:90:ae:
47:46:73:b7:66:3d:f5:a6:c0:1f:3e:51:48:dc:bc:d4:14:7c:
6d:06:0f:15:c9:13:7b:4c:28:6f:58:7d:84:a4:8c:cd:92:25:
ce:ad:57:e3:a3:fb:f3:ff:dc:21:36:cd:22:00:ed:ff:e6:dd:
46:5f:0e:02:b3:20:de:32:54:48:b9:cc:49:ea:91:40:6a:45:
a1:81:91:a1:c8:03:65:aa:69:f5:4c:ad:ff:ea:71:83:d7:02:
59:98:5a:37:95:49:73:1b:4a:88:c7:e5:53:e9:88:9e:89:ab:
14:9c:34:19:00:2d:b1:82:10:23:53:39:ff:b6:d1:61:45:68:
26:ca:30:e7:9a:da:07:60:82:8e:4f:09:b2:a3:7c:56:03:1b:
7d:77:98:78:e1:c5:9e:40:e0:9c:82:9a:24:09:d3:dd:e9:d0:
47:01:b1:10:41:89:f6:ae:a2:a3:42:2a:40:e2:8d:09:ec:98:
6b:bb:ff:9a:3f:28:43:d4:8d:66:f6:ea:e8:7b:be:5d:01:71:
0c:17:c3:80:17:d9:79:e5:94:21:ec:52:8e:ee:fe:fd:81:2c:
6a:10:7c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:07:57 2025 by rpki-client