Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
File: QCHf817fDObkKNav_CEsRxdnnuE.mft (raw, json)
Hash identifier: gxips/DHmGJgP658x1gBQC0YliRT/Ln3r2BORbjo8j8=
Subject key identifier: 19:9D:8A:BD:26:D0:CF:D9:BF:EB:06:0A:D9:E7:E0:C7:04:89:F8:55
Authority key identifier: 40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
Certificate issuer: /CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Certificate serial: 01968BEF4FDB3BD6EAB318E2ECE449D72970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
Manifest number: 151B
Signing time: Thu 01 May 2025 13:00:38 +0000
Manifest this update: Thu 01 May 2025 13:00:38 +0000
Manifest next update: Fri 02 May 2025 13:00:38 +0000
Files and hashes: 1: QCHf817fDObkKNav_CEsRxdnnuE.crl (hash: J4bLeJWvcd7WF2vPK3YO26BMCOlJ1ZnGf5plGleFZTA=)
2: RWXMqjkV2JSmE_jNgsIntDAZ40E.roa (hash: JlOZyqtU1Xw8rdg1LgiJgni//bw4mMZ1Qt4Pvh5z6tE=)
3: VWg3f0Gbf8sa5f2R-1SRG52r7-8.roa (hash: /HyVmsWd+2rMbD1GgNRa5CoP6uMJQMzjsYwposvYEw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:ef:4f:db:3b:d6:ea:b3:18:e2:ec:e4:49:d7:29:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Validity
Not Before: May 1 13:00:38 2025 GMT
Not After : May 2 13:00:38 2025 GMT
Subject: CN=199d8abd26d0cfd9bfeb060ad9e7e0c70489f855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1e:b9:3b:35:6b:aa:21:d9:fb:18:28:63:8a:
6b:80:af:92:09:84:3b:ae:15:ee:bd:d8:18:a7:db:
af:6e:90:d0:97:f8:8d:8b:61:e3:6a:40:f2:14:be:
25:72:9d:a9:0e:ff:12:16:22:d2:90:55:63:8e:b3:
3b:d0:8e:be:d1:f3:65:0d:80:6b:e1:2f:09:ee:f3:
cf:e8:1a:c0:04:3d:1a:90:b1:5f:55:74:ef:6e:4c:
67:2c:d9:e8:cd:48:67:bb:63:5d:37:e5:5b:51:13:
9f:0a:b2:ef:6a:84:e2:53:4a:50:a4:d5:d2:4b:d8:
28:20:dc:1b:7d:35:cb:d0:98:15:f6:6e:2b:6c:41:
54:1f:6d:05:c9:72:e3:c2:39:8a:f8:f5:2b:91:97:
70:91:bb:17:7f:5c:ef:2f:9e:27:29:98:22:38:6f:
ba:35:72:aa:7d:0f:89:9d:08:78:de:f7:b4:91:c9:
c5:ef:dc:40:36:20:4e:74:d5:97:d7:3a:c6:fe:b4:
56:58:8e:06:df:be:9f:87:bd:bb:e4:0e:1d:8d:a5:
27:11:d4:48:6e:80:ae:95:c4:a6:0f:d4:7f:39:d0:
81:07:82:63:9c:be:66:fe:28:bc:b2:f6:5c:ac:53:
19:25:7d:50:f5:1f:06:ed:3b:34:51:b9:3f:f1:96:
28:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9D:8A:BD:26:D0:CF:D9:BF:EB:06:0A:D9:E7:E0:C7:04:89:F8:55
X509v3 Authority Key Identifier:
keyid:40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:73:62:74:9b:5b:91:82:40:92:ae:ed:5e:77:e4:cc:79:4c:
16:ed:f1:48:cd:13:90:6c:5c:ad:ed:7b:89:59:93:2d:79:44:
ad:2a:c1:6a:7b:98:93:ce:75:00:87:a9:30:1d:54:fa:b5:50:
f7:dc:b7:72:83:a9:5c:5c:16:4d:74:c1:1c:31:03:c6:72:c6:
b8:25:b1:cd:34:4d:d9:66:8c:cd:6c:48:9c:c7:96:4b:72:86:
84:02:75:70:07:f7:b4:4f:58:6a:b1:71:92:2f:31:0c:e2:3a:
fb:9c:09:39:43:53:eb:1a:77:19:49:bc:1e:5b:fd:2e:07:99:
48:fe:82:ea:93:81:70:f9:ac:44:95:01:8e:4a:11:7b:8c:5b:
82:e9:f7:c7:88:2a:a1:41:7f:75:f8:05:19:24:08:4e:ce:40:
54:27:d9:16:8f:14:88:56:c0:24:0f:02:40:f1:43:4d:f3:2b:
2a:ec:38:b8:c8:5a:65:f8:fc:f1:e2:f8:80:35:5b:94:81:58:
3e:6c:39:33:1e:43:01:ec:92:48:8c:a5:40:85:b4:e4:1d:14:
87:c1:58:15:7a:b3:12:33:1b:ca:95:59:d9:40:77:97:a9:40:
2b:d3:c1:b9:54:a3:49:c0:85:87:2a:4f:35:ab:d6:38:63:a6:
77:62:c8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:13:06 2025 by rpki-client