Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
File: QcjQJBEIsB9etwj-i7uEfVOjDxY.mft (raw, json)
Hash identifier: d1A8702ug162YidQghSYuz4aXAlEg0YJbYCqJRARrk0=
Subject key identifier: E2:A0:94:37:82:7B:E3:B8:F2:06:D5:32:D2:82:F0:EA:08:C4:0D:D0
Authority key identifier: 41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
Certificate issuer: /CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Certificate serial: 0196827E2CAAADEDADA0E731256AA921CC8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 17:00:29 +0000
Manifest this update: Tue 29 Apr 2025 17:00:29 +0000
Manifest next update: Wed 30 Apr 2025 17:00:29 +0000
Files and hashes: 1: EuVjqybteP4_2uP1qrjFTh6Ex84.roa (hash: VQ7r6aXcK3EoAppW65m/zYlli6sD8iLPznPeACkUL+k=)
2: QcjQJBEIsB9etwj-i7uEfVOjDxY.crl (hash: c1+fz0xnau6e8bkWIGzqWXFg+jPM3wdCRE16YbQypFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:2c:aa:ad:ed:ad:a0:e7:31:25:6a:a9:21:cc:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Validity
Not Before: Apr 29 17:00:29 2025 GMT
Not After : Apr 30 17:00:29 2025 GMT
Subject: CN=e2a09437827be3b8f206d532d282f0ea08c40dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:88:d0:ad:15:e2:06:da:7d:ea:e7:7e:ac:1e:
61:72:f5:4d:72:f3:86:16:44:07:42:b9:a3:03:04:
1f:07:32:5e:cb:2c:f2:1f:8b:dc:10:dd:14:d3:df:
4b:5b:f0:89:15:44:9b:f2:e1:d6:ee:7e:c7:75:44:
31:0f:f9:e5:52:00:37:8c:24:ee:b2:7a:af:35:06:
0c:38:8c:2a:9e:64:f3:56:25:0a:b6:ab:82:17:1a:
0f:aa:6d:9d:98:92:54:5f:a5:c6:97:7a:69:dd:dc:
4e:c7:74:ac:32:91:4a:a3:d4:97:01:c0:aa:6e:27:
0a:59:f3:0d:a3:d0:f1:3f:a2:05:bc:34:b0:38:35:
22:87:33:28:cc:b3:1d:16:72:34:dd:bb:df:60:89:
14:fc:72:aa:48:83:c8:62:a1:cf:1b:53:a4:e9:61:
f4:8c:47:42:53:c4:4c:28:c5:dc:e1:c2:e2:ce:2b:
d4:01:44:d7:61:22:ce:95:6e:46:74:1e:df:88:f8:
46:84:2e:86:1b:82:43:f8:2f:49:7d:9d:48:67:77:
ad:74:f0:d9:69:2f:dd:40:d3:f7:21:09:71:cc:09:
02:9c:15:47:2b:9e:18:e0:37:ab:96:aa:37:25:2e:
51:2e:d1:80:2d:7b:93:9c:e6:f2:bd:21:09:05:3d:
59:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A0:94:37:82:7B:E3:B8:F2:06:D5:32:D2:82:F0:EA:08:C4:0D:D0
X509v3 Authority Key Identifier:
keyid:41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d6:6a:5b:bc:be:90:e7:bb:0f:bb:27:3b:bf:9a:1a:9a:fa:
d8:76:d8:59:b3:ce:5e:01:37:ab:59:19:79:2a:72:a6:14:32:
33:f2:4d:0b:0c:06:5e:0e:ea:bd:83:4c:7d:8f:02:86:b0:03:
64:f3:c4:bc:32:11:1e:12:7a:bd:02:6b:1b:a0:4b:3a:12:99:
cd:81:7a:3f:44:c3:f4:77:0b:a3:4d:99:7f:23:92:d9:7a:cb:
17:8e:8c:9f:69:d8:c2:e0:77:71:15:67:e6:87:aa:cb:55:81:
11:1f:9f:b8:9e:75:d2:c2:2d:90:da:04:1d:78:be:95:94:b8:
a0:c3:14:ef:94:5c:41:db:51:7e:10:06:3a:0d:7b:42:89:ff:
74:6d:0d:e6:05:1b:97:8d:51:3c:37:e4:2a:6f:30:24:ce:a6:
40:1f:8d:ad:73:14:55:ef:cf:19:4f:03:bb:43:72:7f:74:ca:
52:e3:00:05:02:d3:45:9d:52:16:b2:b9:4b:ca:a0:ec:e7:d6:
e8:53:c2:85:21:22:df:d9:e2:3b:64:5c:23:a9:dc:0f:8c:77:
03:1d:1e:16:2b:34:db:02:a2:1f:ed:45:c2:3c:1c:92:f8:11:
46:40:27:a0:d9:95:79:4b:07:ba:52:95:b7:23:1d:10:e0:20:
65:f0:27:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:10:35 2025 by rpki-client