Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
File: qmeVicHEiJfQmy1P7XpmBEqHbqM.mft (raw, json)
Hash identifier: f3hJyd17JmUVQjcZ7jtTa6zgkXgc8POVpCRR5fQv98U=
Subject key identifier: 33:21:9B:93:B3:8A:62:56:FF:66:93:2B:A5:27:7F:F8:6C:89:21:1E
Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
Certificate issuer: /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Certificate serial: 01969C74A9876C92B5F5CE8F1CBE57292B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
Manifest number: 14E5
Signing time: Sun 04 May 2025 18:00:13 +0000
Manifest this update: Sun 04 May 2025 18:00:13 +0000
Manifest next update: Mon 05 May 2025 18:00:13 +0000
Files and hashes: 1: 6ePgS-H7Yzuq3toYao1SpcCwfpw.roa (hash: 6wwpW2bNKeFKmlaR35jx40rgyoKDaJsTG+ac1jtGsgs=)
2: h7iUVsathfWiZn6MUEREGc5Lrns.roa (hash: 6VmzPFIIIU0V6MlQJOV1H1bykzKrpknx8IQ1i3Vq0eM=)
3: qmeVicHEiJfQmy1P7XpmBEqHbqM.crl (hash: kMEptHHmAx8nc9uujMTYC+DBykzVSYEazaXtQJVhXXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:74:a9:87:6c:92:b5:f5:ce:8f:1c:be:57:29:2b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Validity
Not Before: May 4 18:00:13 2025 GMT
Not After : May 5 18:00:13 2025 GMT
Subject: CN=33219b93b38a6256ff66932ba5277ff86c89211e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:65:2c:f4:7f:bd:7d:3a:35:2f:5d:3c:95:43:
11:9b:7c:15:d5:d9:ef:5c:de:b8:02:83:e2:3f:38:
f4:3e:da:1d:61:d3:c6:65:dd:7c:f4:4d:b7:25:cd:
80:dd:95:c4:00:54:ff:10:b5:86:6f:94:79:c7:82:
f1:4f:f8:16:81:97:7c:d4:c2:f0:61:e6:fb:8d:96:
e3:bc:a4:fa:fc:63:13:cf:8d:24:f2:a1:b8:36:29:
ea:56:13:e1:80:3b:b2:5b:4f:90:15:bc:a4:3c:50:
29:6d:15:b5:52:d0:17:af:51:60:fe:df:94:78:11:
01:d5:35:b1:9d:bf:b2:b3:f7:3b:9b:7c:ff:14:81:
a5:39:34:33:1e:5d:33:50:e0:5a:d7:f3:dd:ca:17:
63:4a:a3:3c:17:fb:fc:d2:e4:40:11:a9:3a:27:d8:
86:1d:18:d7:62:03:d8:93:c2:1f:29:2f:6f:a7:ca:
2b:01:9d:b2:bb:29:c8:b1:79:fa:f9:69:8a:c9:28:
f5:3f:f3:92:fd:05:4e:aa:17:a6:8e:20:1a:d8:ed:
6a:56:ea:3c:bb:a3:25:88:76:f7:c7:61:32:45:cb:
fe:96:26:7b:96:ac:7c:4c:a3:b5:ec:8e:b3:5f:06:
30:82:62:37:1f:e7:ee:aa:43:77:28:4e:00:38:50:
6a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:21:9B:93:B3:8A:62:56:FF:66:93:2B:A5:27:7F:F8:6C:89:21:1E
X509v3 Authority Key Identifier:
keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:9b:85:cd:ed:18:1e:cd:43:58:7d:12:04:4f:aa:10:54:b2:
ad:11:5e:ad:b3:73:71:3b:b0:0b:7d:bd:05:5b:94:5c:4c:df:
7e:11:a9:8e:f4:b3:87:c8:ab:f4:f9:7b:26:31:cb:65:87:9a:
fa:05:3b:70:8e:6d:3f:8f:d9:ca:7d:64:c0:45:bb:b3:0e:aa:
3a:6b:ef:53:85:af:1f:e9:92:ff:62:7b:0a:6c:bf:aa:b3:be:
2a:37:70:f3:0a:f5:cf:1f:a6:45:62:d1:e8:ca:e8:e5:b1:06:
87:98:ae:1c:c4:ea:ca:83:1b:27:96:6a:7f:89:54:0f:45:80:
c9:94:8a:8c:d2:25:1d:45:33:25:43:89:86:2d:60:bb:9b:56:
a8:3a:18:3c:e7:e3:c2:c2:42:3e:17:9c:6b:97:aa:72:3c:67:
fb:c6:c5:77:ee:d7:22:26:3c:c2:b1:3f:8c:ee:b0:a1:b9:bc:
ea:a9:47:73:4b:68:c8:f5:dd:48:4d:10:43:3b:3a:54:68:c2:
8b:e8:bf:f0:2e:06:0a:99:b8:f8:93:67:30:e0:89:a0:a8:55:
80:b9:d7:87:88:e0:e5:1b:1a:fb:c5:f3:3d:88:6f:5e:42:f3:
f3:b2:b7:46:38:d0:0a:59:70:d3:ad:c9:59:c3:be:3a:39:30:
f4:ce:0e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 23:41:36 2025 by rpki-client