Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
File: QRoqlAW9oWccEHdvRCYnPJBOStA.mft (raw, json)
Hash identifier: xSc9fFmeGeKdbjS7/0vVdLhWl3SZGQJ9NVItwZg1tZA=
Subject key identifier: 80:6C:17:D7:98:F0:4B:5B:F0:49:8A:89:7D:28:2C:8B:71:DB:C3:F4
Authority key identifier: 41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
Certificate issuer: /CN=411a2a9405bda1671c10776f4426273c904e4ad0
Certificate serial: 0196726608D36FC2EC4B4C9E2A2E00C40EA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
Manifest number: 150D
Signing time: Sat 26 Apr 2025 14:00:11 +0000
Manifest this update: Sat 26 Apr 2025 14:00:11 +0000
Manifest next update: Sun 27 Apr 2025 14:00:11 +0000
Files and hashes: 1: QRoqlAW9oWccEHdvRCYnPJBOStA.crl (hash: DhPyXIvuhWlNebp0ujOUHa3RzaSXnRjS1RvaAxNgdtE=)
2: htodApNLGhLpFMruOMlntyiGeOc.roa (hash: cFfgGJzFfvTMD4F+KAnyyiaMBsfRll7IR2YZJcMoxkc=)
3: wzndaPRsTi0mxWGQ8DwrTSyFIjc.roa (hash: kbPsqoJze+tNEJsbFqXpAiz/ui3VxFgmLT6No+U36XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:66:08:d3:6f:c2:ec:4b:4c:9e:2a:2e:00:c4:0e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411a2a9405bda1671c10776f4426273c904e4ad0
Validity
Not Before: Apr 26 14:00:11 2025 GMT
Not After : Apr 27 14:00:11 2025 GMT
Subject: CN=806c17d798f04b5bf0498a897d282c8b71dbc3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ef:ea:fb:bc:62:f6:d8:d0:da:71:7d:c3:16:
78:15:a3:8b:b3:82:bd:de:9c:25:ed:3a:28:c7:cf:
d5:fc:9e:23:c2:bb:73:be:a8:12:44:3e:8f:88:62:
18:71:77:e2:80:eb:7f:ce:4a:06:55:e9:bc:5b:cd:
93:45:18:29:db:a2:95:ad:d8:60:b0:75:b5:b2:ba:
fb:2a:06:88:c0:bd:b1:01:69:d3:02:9c:af:29:11:
86:d5:e8:f3:66:de:35:65:a6:73:44:db:70:66:10:
67:93:1b:d4:fa:08:fe:69:22:70:8a:3f:06:0f:28:
2a:8d:88:81:a3:a2:05:ce:23:7a:11:98:0d:81:f9:
ff:f8:8d:47:33:69:d6:8f:c3:0f:75:96:01:97:cd:
8d:d8:ea:cb:88:49:b6:ac:00:31:c3:76:3b:7c:f9:
2b:57:3a:60:09:51:f7:16:ad:f0:e1:91:bb:eb:84:
06:99:d3:be:2e:87:fc:91:30:84:a8:12:f7:39:52:
28:b0:58:89:a2:31:3d:5f:df:aa:54:d7:ce:03:3b:
76:17:9e:02:15:6a:d7:61:2b:c5:05:bb:f5:b0:c8:
87:5c:eb:a7:74:17:39:4f:f8:8e:d2:db:a6:02:d8:
1a:36:cb:4b:a1:27:88:fd:0f:c9:2b:22:e9:06:f6:
0e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6C:17:D7:98:F0:4B:5B:F0:49:8A:89:7D:28:2C:8B:71:DB:C3:F4
X509v3 Authority Key Identifier:
keyid:41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:55:42:25:39:09:72:e4:4a:da:99:02:b9:48:18:21:21:fa:
e3:89:91:7f:0c:41:47:2c:e0:e6:65:25:d8:d1:5c:85:21:30:
74:40:7e:58:27:02:76:89:ee:c5:24:a0:99:e9:c7:11:e8:6c:
a5:58:de:90:90:5a:1f:83:63:a9:e3:98:61:06:42:b2:f2:c2:
2f:0c:ac:42:0d:02:85:37:12:ba:0c:cd:79:b1:40:57:c4:cb:
45:7e:cc:46:46:b2:b5:8d:0f:8f:e3:cf:9e:fa:b9:16:74:ba:
01:1c:a4:99:5d:c8:35:9b:25:e3:be:c4:d1:00:13:42:0b:b9:
62:16:d7:a9:49:af:ac:4c:19:f6:4a:b7:41:e6:99:99:3b:0d:
a5:fa:73:91:32:58:2a:1d:35:7b:0d:2a:b9:ef:af:09:a3:a5:
1a:16:2d:fd:83:e4:64:60:35:25:95:6d:1e:de:80:a6:19:ef:
a9:5a:8a:db:85:b3:a2:ef:10:40:ff:d8:05:87:06:b7:d2:2a:
9b:20:44:75:7d:ed:f2:4c:ad:61:c7:f5:29:87:2c:97:fa:39:
a2:2d:6b:3a:9c:e3:16:7d:09:a5:88:ed:f2:e4:99:59:54:21:
56:21:c4:85:15:eb:68:39:49:72:59:14:a2:dd:46:f9:48:97:
30:b9:b3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:59:29 2025 by rpki-client