Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
File: QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft (raw, json)
Hash identifier: XeRwYwOqHOxtWv4VNYikJ0MuL0GAmdj952OLiiN0JKM=
Subject key identifier: 4F:82:5C:4C:B4:9B:DA:57:74:D0:DA:AB:85:42:10:31:94:61:94:5F
Authority key identifier: 40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
Certificate issuer: /CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Certificate serial: 019699E1AB5AA34ADDCD43194219F1D2FE69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
Manifest number: 152D
Signing time: Sun 04 May 2025 06:00:25 +0000
Manifest this update: Sun 04 May 2025 06:00:25 +0000
Manifest next update: Mon 05 May 2025 06:00:25 +0000
Files and hashes: 1: QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl (hash: tN41Ez6XBfOG9a+k8u/qv61n7le+i/IlFwFsistMVcs=)
2: ULw_e6rY6wER2z1dGFmp31jEgd0.roa (hash: MY5YBBTJCozx9Da4ab7Dr9d2mlZWfjLXtBL3DR2CzxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:99:e1:ab:5a:a3:4a:dd:cd:43:19:42:19:f1:d2:fe:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Validity
Not Before: May 4 06:00:25 2025 GMT
Not After : May 5 06:00:25 2025 GMT
Subject: CN=4f825c4cb49bda5774d0daab854210319461945f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e1:ca:3c:38:6c:77:9a:99:91:10:f1:c1:c3:
1b:85:f0:13:1a:d1:0d:a4:b8:90:3e:d3:27:70:6a:
90:1f:d6:f9:46:67:47:e3:ae:65:b5:a2:b1:e1:35:
df:94:2d:67:f1:8a:bc:71:24:b4:f8:9a:b6:4d:82:
92:4f:be:69:43:79:dd:0a:4b:85:c2:de:6e:28:c0:
a3:f3:ab:da:db:cd:de:9e:68:89:76:a9:86:c3:5a:
02:59:0b:9d:ab:f2:15:51:ae:21:29:50:84:55:0e:
e7:f3:97:0a:24:5e:51:ad:7e:89:64:a1:50:5f:7d:
b3:73:a5:36:17:dc:3d:f4:ed:00:9e:88:20:0b:cc:
62:3e:c0:7a:3d:65:6f:7a:09:f3:f7:94:62:5d:49:
54:f0:41:f3:b7:83:7d:3a:e3:a0:de:42:92:47:82:
e0:4f:b5:60:15:ff:ec:e6:6b:fd:7f:04:b1:e7:32:
78:f1:0e:b9:42:b5:dc:82:dc:65:25:93:76:83:10:
da:32:10:14:0e:e6:34:15:d5:07:53:7e:0f:b6:89:
3a:01:85:d2:01:f6:c1:7c:1a:ca:0d:10:2d:ff:57:
d0:58:86:e6:94:aa:d0:40:b4:8e:dd:4d:9f:0e:65:
b1:a3:8c:1f:90:b5:9b:e7:6f:e1:b2:98:a9:ed:32:
c2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:82:5C:4C:B4:9B:DA:57:74:D0:DA:AB:85:42:10:31:94:61:94:5F
X509v3 Authority Key Identifier:
keyid:40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f2:39:cd:49:9e:e0:e2:42:c3:a8:e6:05:e0:9d:7e:e1:e6:
3c:09:d2:05:d2:d5:e2:62:e6:c4:e5:40:40:34:ec:e9:5d:ed:
c6:5c:3e:0d:90:59:6d:d4:f4:21:2e:d7:cd:17:c7:85:ae:58:
b7:3b:52:62:43:46:99:bc:ff:71:53:ab:cc:10:d2:87:d1:d2:
d2:75:9b:e7:64:5c:cf:77:b5:37:d5:f2:c3:34:5a:c8:9d:fe:
0e:25:f4:08:12:9e:15:11:2e:f9:10:ea:df:92:1f:66:d8:42:
0d:44:e5:38:00:e8:08:d6:22:c8:78:6a:85:f9:40:6c:a7:ca:
79:8f:d2:01:e0:89:dc:1a:96:11:b1:20:c2:fe:e9:4b:b5:32:
bc:94:bf:0c:e9:96:67:25:38:91:be:64:96:19:64:a4:29:3e:
04:c4:4c:18:c7:59:60:d3:7a:e3:a7:5b:c8:17:d9:62:80:c7:
06:62:ba:ca:b7:b3:46:8c:67:54:02:af:63:e5:1e:33:48:e3:
8d:f2:bc:c3:72:15:ea:f5:28:3d:53:08:27:52:a4:8c:fc:c6:
b1:9e:a6:58:15:2e:c7:6a:d9:0a:b9:ee:67:2d:b2:0c:c8:48:
9e:e0:0c:86:5b:c0:29:26:53:16:09:0d:12:1d:39:17:06:a7:
79:ac:d0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 15:44:39 2025 by rpki-client