Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
File: QftrFwgzUAawpqrGUL-v8_yNKSw.mft (raw, json)
Hash identifier: HEfi34oOBogCtqz914szX2VIqg9NNMq2kHpx3uRnDg4=
Subject key identifier: 0D:21:59:82:46:D7:62:EE:AA:86:1D:D8:77:18:D5:8C:ED:D2:3B:55
Authority key identifier: 41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C
Certificate issuer: /CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c
Certificate serial: 0196771EBBDA8E30EA9EAAEE690B156A40C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 12:00:24 +0000
Manifest this update: Sun 27 Apr 2025 12:00:24 +0000
Manifest next update: Mon 28 Apr 2025 12:00:24 +0000
Files and hashes: 1: FmQTGAptfwQVIkuMpg8hJc2vZxA.roa (hash: e7opOpYhedUnony/T0f78z282oNfXK2DZuJyjlY4Q0s=)
2: N5QNqPYfQDsZsb3UbswlkLMUOVI.roa (hash: K+50oxv12Lx2bczUpm74apszZeVkTFLJaHzFVSZLhe4=)
3: QftrFwgzUAawpqrGUL-v8_yNKSw.crl (hash: iPI3QT4OamDFiRPq+GfdV77V1e+4z/fXi29tSNDXy60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:bb:da:8e:30:ea:9e:aa:ee:69:0b:15:6a:40:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c
Validity
Not Before: Apr 27 12:00:24 2025 GMT
Not After : Apr 28 12:00:24 2025 GMT
Subject: CN=0d21598246d762eeaa861dd87718d58cedd23b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d2:3b:bd:c9:6f:98:ad:e7:c1:ac:36:90:f0:
ca:cd:e2:c0:48:50:e2:66:d0:b1:a4:45:c3:36:83:
35:57:93:75:af:f2:a6:1a:6f:d0:93:17:6b:a2:95:
ed:d5:1a:ff:f7:60:73:b2:2c:41:91:38:28:f8:93:
b9:f1:80:cf:cc:7c:49:24:d3:ff:5e:5d:18:90:5b:
5e:4f:fb:cd:ca:b9:5a:68:92:aa:7c:e9:47:7f:b0:
62:62:28:69:02:2a:0d:ce:a5:a5:10:a9:8a:92:87:
d1:65:fd:4b:54:56:fb:d9:79:75:45:cd:7e:34:ea:
0f:f1:20:7c:21:d3:de:e9:d0:e5:89:ff:e5:07:ec:
7f:5b:63:19:2e:a0:52:68:f5:f3:9c:c5:30:d9:7b:
b3:d2:34:de:50:01:fc:c2:f2:73:c8:64:61:e2:92:
d5:a4:1c:57:0e:e0:b6:10:25:27:61:7e:68:d7:8d:
e7:f7:e3:4c:f3:bf:b0:a8:85:a5:22:ea:e6:a7:ff:
ac:19:d6:47:49:c6:ac:81:61:65:96:49:5f:7d:3c:
86:3d:55:01:c5:5b:5d:f3:86:d2:02:79:38:62:57:
51:46:f2:1d:56:43:e2:0b:48:73:5e:fe:68:ad:72:
38:2b:d3:d7:15:ed:63:87:30:1a:6a:ba:15:d6:65:
a5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:21:59:82:46:D7:62:EE:AA:86:1D:D8:77:18:D5:8C:ED:D2:3B:55
X509v3 Authority Key Identifier:
keyid:41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:77:3a:a5:22:e2:0b:6e:02:f2:b0:95:83:70:8e:80:e6:92:
7f:a6:78:95:52:33:3e:4b:76:63:7a:5a:43:06:92:f1:06:30:
25:1f:de:0e:3c:61:8b:74:4b:32:4d:62:ef:51:89:13:bf:45:
c0:4a:40:89:30:af:09:d0:af:81:61:d9:a8:e5:63:53:10:57:
4e:41:f4:e3:6d:be:0e:69:68:83:3a:1c:77:4f:55:92:10:c0:
91:2d:13:8e:93:8f:df:d8:da:4e:80:cd:79:22:37:48:eb:fe:
23:78:d9:8e:e7:be:29:1d:d5:b9:57:46:11:87:86:a7:cb:54:
fb:95:72:d9:30:6f:30:9d:f2:3b:20:44:47:c4:db:98:ea:65:
1a:79:bb:6b:f6:3a:db:9e:3f:40:61:be:35:7f:be:7c:ae:be:
7e:1d:fe:93:77:2f:35:1c:ad:95:3c:97:00:49:1f:8d:4b:0e:
6b:43:88:eb:d2:32:c4:f0:88:13:15:6c:54:be:1d:4b:a1:e7:
fb:24:71:ac:b9:41:80:b3:86:ea:1c:f5:49:e0:ba:6c:c1:8d:
49:b3:4a:bd:37:fa:7b:98:1d:8d:20:7c:d2:96:84:0b:a2:b2:
e0:6c:ce:b8:8c:12:12:18:4e:c7:b5:0d:c9:9d:af:2f:5d:01:
43:0d:65:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:27:35 2025 by rpki-client