Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.mft
File: QPwHKZcRrfoiLiexKLdtHZdFBYI.mft (raw, json)
Hash identifier: X6DBO9NlHzC8LSxdlenZRjJ2vdGiXA7/OBGu7l4Mg48=
Subject key identifier: 14:33:27:6B:5B:25:FA:B5:D6:B1:EE:0D:FA:7B:C0:23:95:A7:E9:D6
Authority key identifier: 40:FC:07:29:97:11:AD:FA:22:2E:27:B1:28:B7:6D:1D:97:45:05:82
Certificate issuer: /CN=40fc07299711adfa222e27b128b76d1d97450582
Certificate serial: 019697F31AE9F994103D077A62218C80752E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPwHKZcRrfoiLiexKLdtHZdFBYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.mft
Manifest number: 11CE
Signing time: Sat 03 May 2025 21:00:13 +0000
Manifest this update: Sat 03 May 2025 21:00:13 +0000
Manifest next update: Sun 04 May 2025 21:00:13 +0000
Files and hashes: 1: 6KpfPRVUGyFsCkAEFBqf-wSXAyw.roa (hash: kWhiEuOzAfB/QvRqngqpda0Xfcej2KhLVFQbnAjy7tQ=)
2: QPwHKZcRrfoiLiexKLdtHZdFBYI.crl (hash: +bSXwn1fRFF3nF+QEA3RsSv9ldt0lDlOhckdj1OGEiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPwHKZcRrfoiLiexKLdtHZdFBYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 21:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:97:f3:1a:e9:f9:94:10:3d:07:7a:62:21:8c:80:75:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40fc07299711adfa222e27b128b76d1d97450582
Validity
Not Before: May 3 21:00:13 2025 GMT
Not After : May 4 21:00:13 2025 GMT
Subject: CN=1433276b5b25fab5d6b1ee0dfa7bc02395a7e9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:89:61:4c:d3:ee:c0:49:4c:b6:f8:f0:77:40:
92:e7:3a:75:b6:14:b3:49:e8:8c:7d:85:e0:e8:99:
a4:4b:49:9d:26:b2:36:74:20:c1:d0:25:28:78:5e:
f9:7c:3d:e4:49:90:33:39:e3:5a:19:51:39:f1:c5:
e5:bc:73:c3:39:f2:30:54:29:28:91:1e:5e:47:bc:
eb:a2:2e:7e:ae:28:aa:0d:f5:e2:f5:80:ff:a6:31:
06:6b:18:c2:6b:3f:df:0d:cd:32:45:56:e0:9b:e0:
4d:95:91:a0:25:94:68:88:43:7c:bd:b7:a3:86:69:
84:13:42:23:b6:3f:4e:c3:4b:66:6b:af:34:84:81:
bf:5d:db:e1:4e:e5:6f:f8:d5:7c:1d:55:14:3d:99:
06:4e:43:d8:4b:73:c9:ba:e3:a5:c1:03:e1:dc:ba:
a4:22:da:1f:7b:80:68:88:75:fe:67:98:cf:ce:7e:
ec:0a:4f:11:8b:b1:db:9b:06:12:f0:b1:bd:4b:c8:
f7:2c:87:51:04:a0:b5:e5:7d:0b:c9:c4:71:45:1a:
67:07:03:16:f2:ea:b0:5d:17:f2:3c:fb:4d:81:cf:
90:d1:f2:a6:e3:85:7a:ff:b5:40:e2:a7:db:4a:9a:
00:7e:95:11:a9:7c:72:5e:f8:d7:21:0b:ad:9c:2e:
01:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:33:27:6B:5B:25:FA:B5:D6:B1:EE:0D:FA:7B:C0:23:95:A7:E9:D6
X509v3 Authority Key Identifier:
keyid:40:FC:07:29:97:11:AD:FA:22:2E:27:B1:28:B7:6D:1D:97:45:05:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPwHKZcRrfoiLiexKLdtHZdFBYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:73:f4:e1:b9:45:53:54:0c:d0:5a:52:d4:28:71:d4:71:ce:
38:ce:08:2d:80:58:34:68:d9:6e:38:0f:81:7a:99:21:4f:6c:
13:4c:94:75:74:93:c3:2d:86:7c:da:78:8e:f0:1c:32:1e:1a:
cd:26:31:98:7e:5f:2b:75:ff:35:41:f3:da:a8:2e:8e:75:38:
e7:80:5a:7b:5b:60:4c:5a:80:6f:23:45:c8:c7:e0:c6:2c:f6:
a0:26:4f:7a:25:9f:e2:49:62:30:f2:9e:74:ea:19:df:54:2b:
5a:76:d0:0b:74:49:41:22:30:fc:0f:19:53:0c:22:45:42:f2:
ce:07:df:27:d6:fa:dc:fe:29:61:0b:a5:0d:ba:0c:ad:8b:29:
f9:0b:07:1c:10:97:ec:23:ec:8b:70:13:8b:92:aa:a6:3c:4b:
ad:5b:6e:51:ae:51:77:67:0f:ef:90:9a:c6:b1:56:d4:21:8e:
34:9b:3c:6c:ba:f1:2b:77:10:e5:84:6c:7c:68:e1:e8:38:f7:
5f:51:a7:b2:56:9b:36:6c:9a:ed:78:b5:8a:67:ed:4b:d8:08:
2d:56:32:24:7d:72:22:63:43:67:8d:e6:5f:6e:55:db:41:0c:
39:0a:74:77:33:a6:91:f0:eb:54:ea:89:76:64:07:44:45:f6:
2c:2b:e9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 07:09:19 2025 by rpki-client