Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
File: QYbmudH3jJTWP6yTSrmq3AyW1D4.mft (raw, json)
Hash identifier: cUd0Q7hYKIU8j3vMZmruCULP7oasEiFhBhlbO6HwxqY=
Subject key identifier: 2D:46:7B:8A:BF:87:D4:C2:CD:3D:F2:C0:0D:F0:52:2F:10:D0:5A:81
Authority key identifier: 41:86:E6:B9:D1:F7:8C:94:D6:3F:AC:93:4A:B9:AA:DC:0C:96:D4:3E
Certificate issuer: /CN=4186e6b9d1f78c94d63fac934ab9aadc0c96d43e
Certificate serial: 019687DB9CBBDFE8BE70057060ABEC24FA6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
Manifest number: 151A
Signing time: Wed 30 Apr 2025 18:00:38 +0000
Manifest this update: Wed 30 Apr 2025 18:00:38 +0000
Manifest next update: Thu 01 May 2025 18:00:38 +0000
Files and hashes: 1: 4siTv1cIQqiRqqbBP3me0G2tMEA.roa (hash: SDh+UpJOyjnagfNdrfriJXPS5zpz808h3YCOrbfCctg=)
2: QYbmudH3jJTWP6yTSrmq3AyW1D4.crl (hash: yNHc46VlVjgz8HhBNDDVrBQLht2q/og9sYHcO+ZTXQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:db:9c:bb:df:e8:be:70:05:70:60:ab:ec:24:fa:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4186e6b9d1f78c94d63fac934ab9aadc0c96d43e
Validity
Not Before: Apr 30 18:00:38 2025 GMT
Not After : May 1 18:00:38 2025 GMT
Subject: CN=2d467b8abf87d4c2cd3df2c00df0522f10d05a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b1:52:b2:02:96:ba:fd:f3:c8:42:0f:64:30:
47:f1:c2:aa:13:39:21:18:13:24:a5:d0:48:10:13:
b7:eb:b2:6e:8a:8e:6d:60:68:0f:50:f4:28:63:04:
93:2f:b9:39:90:5d:a0:9a:1e:bd:0f:86:a1:35:5c:
9c:9f:41:65:cc:31:8d:09:58:04:b7:01:12:88:c8:
9d:eb:73:56:2c:a7:b2:7f:fb:51:c4:d7:cb:6c:c4:
7c:e9:02:b5:ba:f7:43:a2:6b:a1:2d:3f:73:d5:4e:
0e:5f:2a:5e:49:eb:fb:10:e2:73:fb:44:0f:4b:db:
88:28:6c:93:db:69:7e:bd:fe:bb:8a:96:ae:7f:67:
a4:a4:27:e7:ef:d2:56:d8:16:d1:ec:31:f1:1f:91:
e2:3f:c9:fa:c2:bb:58:6a:00:01:93:e6:19:e2:aa:
6b:b5:72:a7:b7:d0:a7:58:9c:f3:33:41:6f:d0:e5:
bc:61:c0:74:b8:c2:f7:20:00:7d:4b:24:d9:fd:63:
a4:3d:74:f2:9d:03:a9:33:79:cc:7e:bd:e3:11:4b:
96:f0:47:32:3d:96:b7:bd:61:34:6a:4a:e6:33:fb:
3d:4b:f7:14:8d:58:0e:dd:97:d3:e0:92:79:2f:cc:
05:63:16:a3:bf:3c:3c:33:d5:6d:cb:c4:08:99:41:
08:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:46:7B:8A:BF:87:D4:C2:CD:3D:F2:C0:0D:F0:52:2F:10:D0:5A:81
X509v3 Authority Key Identifier:
keyid:41:86:E6:B9:D1:F7:8C:94:D6:3F:AC:93:4A:B9:AA:DC:0C:96:D4:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:7b:7e:83:da:1e:8f:18:ac:04:00:fc:8e:19:d8:97:d3:5b:
84:fa:f3:4f:6a:97:44:cf:8a:70:aa:af:ad:3d:31:38:3d:0e:
a0:f9:30:34:09:ab:da:ca:a3:94:cf:9c:23:79:3e:ec:a6:28:
c3:e3:ea:e2:24:21:94:e0:24:dc:8a:12:96:9d:ab:0d:7d:1b:
fe:91:91:3e:a3:0a:96:a6:45:a6:ec:b5:a5:4b:fb:85:b5:cf:
6e:8a:6c:d2:0e:9b:5a:a8:94:9b:e4:17:28:d2:ba:0f:bf:1e:
86:af:dc:fc:b0:d0:9c:51:5d:9e:50:c1:a4:04:04:5e:f1:e2:
99:c3:ea:58:6b:1c:dc:62:db:f2:e0:fd:88:5c:24:59:24:a9:
39:55:5d:63:0f:e1:9a:7d:50:79:ce:c8:a9:36:6a:27:c6:46:
a2:f5:03:a3:f0:80:4d:68:d3:d2:c5:cc:1a:ce:7d:54:e6:62:
40:cd:8a:b2:b5:35:ab:ca:07:c3:85:77:08:24:6a:68:77:23:
90:50:13:48:75:7b:85:65:0f:ce:08:7d:9e:97:4a:a2:3c:dd:
f4:2f:14:4b:e5:e1:ac:9f:8f:67:76:1c:0c:77:9f:2c:9a:a2:
28:bb:4d:92:68:b8:4e:44:7f:28:f8:50:49:c9:94:5a:ed:e4:
42:0d:97:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:37:32 2025 by rpki-client