Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
File: QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft (raw, json)
Hash identifier: QWkZgq25Y2KNL14DTThxInc6BZcDOqzEIN4S1j4BvnY=
Subject key identifier: DD:EF:EA:67:59:A9:DB:7A:BE:95:64:51:06:09:B5:5A:B9:D7:0C:B7
Authority key identifier: 41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8
Certificate issuer: /CN=411952046770f54e8be1fd7d673132265ad70fa8
Certificate serial: 019678318CC55ED2A13154E9BE026C862152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
Manifest number: 0BCF
Signing time: Sun 27 Apr 2025 17:00:35 +0000
Manifest this update: Sun 27 Apr 2025 17:00:35 +0000
Manifest next update: Mon 28 Apr 2025 17:00:35 +0000
Files and hashes: 1: QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl (hash: sX9/NQMufJ1FoVIO9PztelRU5YKbS02SDUaPgBWmhx8=)
2: Xpf8O2DfxtSRMYLfH4Jhe7jGcr4.roa (hash: mr8J89/SuXN+JPAXQsryCuEFWqmHZudkRiHUpBMVGnw=)
3: qliDDfSLIfyZKuJ9vwyYrHItz_k.roa (hash: D8mFTN20TsuGjGw8I0yHs9/gZXV7jBDiD7YQatfWrpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:8c:c5:5e:d2:a1:31:54:e9:be:02:6c:86:21:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411952046770f54e8be1fd7d673132265ad70fa8
Validity
Not Before: Apr 27 17:00:35 2025 GMT
Not After : Apr 28 17:00:35 2025 GMT
Subject: CN=ddefea6759a9db7abe9564510609b55ab9d70cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ab:76:ee:a7:96:c5:28:a4:ce:42:4b:e6:5c:
04:28:c9:ea:04:19:54:af:c6:8b:8b:85:35:8b:d0:
c9:ec:b4:be:52:8e:2f:ed:73:64:17:c6:d2:f2:bf:
50:9b:16:dd:84:e8:6b:cc:57:30:f5:69:ba:0b:b7:
c2:f9:a6:df:c3:35:67:01:dc:52:9a:17:fa:28:82:
31:35:0d:94:c0:46:12:de:e2:d7:c8:01:c1:64:51:
45:45:ee:ff:39:70:2b:aa:1f:e6:c7:a3:5b:4b:7f:
ef:ec:32:77:52:20:2c:ea:31:d5:09:51:14:57:32:
4c:99:e2:73:db:4f:6a:21:77:a6:f8:9c:4b:5e:e5:
bf:0d:8d:ca:1b:b7:0d:43:61:10:9f:84:40:9d:56:
00:3f:0d:78:23:53:63:c1:03:86:7f:8b:cf:b8:a5:
d8:aa:9c:27:0c:ca:12:65:00:53:97:7b:6f:5f:e5:
de:a0:b4:78:54:b8:fd:39:5a:86:5e:d6:0f:2d:00:
5d:91:cf:82:9d:28:ba:7c:8c:f3:ce:01:84:e6:64:
f5:cb:23:1d:65:19:00:46:04:bb:fc:6c:32:c5:cb:
ba:43:68:91:c0:ec:b1:07:d3:3e:c2:da:d6:a7:c7:
a3:44:33:91:e9:46:22:e1:67:b7:dc:54:43:5a:15:
fe:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EF:EA:67:59:A9:DB:7A:BE:95:64:51:06:09:B5:5A:B9:D7:0C:B7
X509v3 Authority Key Identifier:
keyid:41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:93:a8:bb:8a:24:ca:00:c2:76:d6:96:13:aa:8f:36:2e:d1:
34:5a:d4:5c:90:46:75:7b:73:13:89:74:0f:d1:86:9f:4d:ce:
c8:a6:98:45:14:4d:f5:3d:59:76:f2:8a:6d:19:25:f1:02:99:
7f:5a:f0:5a:1f:fa:b1:a3:ed:fe:7a:df:82:0b:af:fd:58:e8:
d0:02:fb:5d:50:1f:80:a2:7b:e1:da:9d:c1:18:28:cd:26:76:
4d:69:f5:2a:b4:ec:44:68:f5:db:38:54:63:98:bb:c9:5a:e7:
9d:76:b0:fb:45:3c:fe:ae:06:1c:04:36:cb:8d:3e:56:11:c1:
6b:9b:44:85:a0:7e:52:6b:1c:df:26:dd:6c:8c:e8:9b:36:a2:
bb:34:5a:c5:9d:dc:d1:bd:b5:f1:c9:1f:c4:00:9a:e6:87:dc:
b6:cf:62:10:15:d6:76:e2:a2:c4:64:b5:c5:a5:e8:26:69:cf:
bb:e9:38:6d:a0:bc:50:b9:2c:5c:47:db:c0:9c:05:ab:f0:7f:
b6:4f:f1:77:07:60:90:b6:19:11:49:72:08:f6:20:0a:32:f7:
7c:b1:f2:06:24:96:59:23:fd:ea:76:b2:cc:ac:66:59:c6:12:
c1:22:22:81:c8:35:98:43:a0:4e:c7:6f:21:8a:38:b8:ed:d8:
2f:46:25:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:49:04 2025 by rpki-client