Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
File: QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft (raw, json)
Hash identifier: CZJOhEzq6IOnk06g5mYhS9boH7/TtUBoGFGCPFenZhk=
Subject key identifier: 1C:72:72:63:84:FB:C8:E3:B5:92:29:0F:F4:CF:F1:86:64:1D:FE:48
Authority key identifier: 40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44
Certificate issuer: /CN=40fac6a32fe4baa7d89b91ec5165a3d96688e144
Certificate serial: 019685805487025D38CC46EC8709BE84F19C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
Manifest number: 0D5C
Signing time: Wed 30 Apr 2025 07:01:41 +0000
Manifest this update: Wed 30 Apr 2025 07:01:41 +0000
Manifest next update: Thu 01 May 2025 07:01:41 +0000
Files and hashes: 1: 4hn1wVatZQI4O44VQ9afg3_3YCE.roa (hash: Wip87SKY/zyuxOVUXFbAARGlH7AAphh/zZD7B0INIf4=)
2: QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl (hash: KhFR/fQ/wpXgDXk0U9JIMDikg+1yM0Iah7JBK+0Jgdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:80:54:87:02:5d:38:cc:46:ec:87:09:be:84:f1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40fac6a32fe4baa7d89b91ec5165a3d96688e144
Validity
Not Before: Apr 30 07:01:41 2025 GMT
Not After : May 1 07:01:41 2025 GMT
Subject: CN=1c72726384fbc8e3b592290ff4cff186641dfe48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:af:7d:ab:25:07:a8:49:fb:2c:0b:b4:b6:9c:
28:c9:fb:fa:e0:3e:ae:1b:0d:b8:10:94:02:f3:db:
b0:ba:3a:85:06:c2:1d:69:d5:77:03:74:87:1e:57:
9a:e0:e4:b2:ae:bf:bf:56:52:03:de:86:03:e4:34:
58:24:5b:c9:a8:67:84:e8:25:3b:73:4a:ed:c1:f0:
8f:35:a5:e9:ec:e8:09:57:92:ef:71:82:62:35:e8:
6d:b8:4f:00:8d:85:02:6b:8f:49:8b:e2:76:05:20:
b5:8c:90:d2:01:5f:d0:8d:a0:cf:2f:49:93:22:6e:
31:ed:a7:9c:d2:60:f2:73:28:ca:2b:e5:84:c5:11:
b2:cd:b1:fb:86:71:1d:88:3f:15:fb:d7:fd:b4:f8:
36:14:8d:50:dd:06:c6:ce:ee:65:b2:ed:ef:77:3e:
48:aa:3c:e5:28:af:a3:d4:f8:be:73:12:e2:06:cd:
ba:e0:78:07:eb:be:1d:00:97:b1:f1:18:58:fe:21:
90:a4:49:c0:0e:25:f6:65:2c:c3:19:f1:b3:54:37:
3c:80:91:9a:a9:37:f6:1a:a3:ba:96:3d:05:d9:6d:
74:d2:dd:14:a2:af:a2:2a:e1:63:14:b8:34:a1:20:
6c:b2:c8:eb:26:7c:c2:8b:83:e9:5a:a7:97:ac:d4:
8e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:72:72:63:84:FB:C8:E3:B5:92:29:0F:F4:CF:F1:86:64:1D:FE:48
X509v3 Authority Key Identifier:
keyid:40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a8:d0:83:61:b7:e5:42:26:de:9d:3a:77:bb:cb:72:48:74:
07:e0:bd:f8:7d:88:d9:55:bc:6e:e8:fc:fa:d8:bd:98:70:e5:
12:42:fb:ce:c0:96:1b:f7:d2:8e:cb:a6:fe:9e:d0:46:b2:7c:
df:13:f6:96:36:b3:dd:8c:83:5a:d5:4a:d8:ca:9e:db:ce:8d:
30:58:ce:65:6d:08:b0:88:28:b2:7d:05:4a:39:e4:e2:61:f1:
25:0d:dd:51:8a:1d:73:8e:9b:1c:b1:48:aa:47:21:d8:a5:94:
fa:d6:7a:5a:d5:8f:14:74:51:46:4c:6c:2a:1f:3f:07:df:5d:
b0:32:6b:69:09:b9:0b:40:a2:d0:b1:aa:90:56:50:47:90:ed:
57:bf:fd:52:3a:18:c2:db:d5:8b:a2:00:21:02:3c:fc:f5:11:
ac:b1:ae:b9:65:ec:e6:45:97:d5:ee:da:03:03:f1:7c:ea:4f:
55:96:3d:a4:b8:ed:ff:0c:05:1a:1b:1c:35:50:d5:0d:6a:93:
b6:92:2e:eb:7e:37:46:57:ba:aa:ba:a0:0e:a9:2f:51:18:13:
bb:2a:6f:2c:6b:62:e0:a4:8f:9e:e2:ea:c1:54:28:e5:d4:75:
e0:c8:a7:ed:fc:09:13:44:d4:eb:14:09:d5:df:aa:68:32:e1:
b9:ca:a8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:08:39 2025 by rpki-client