Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
File: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft (raw, json)
Hash identifier: nkdjGUqCXeDUGiyLPngoYUddM/qQre0i1MuwgdY1yr0=
Subject key identifier: 7E:8B:2E:9B:A0:22:52:07:6A:78:29:CB:CD:6B:61:5D:06:D0:24:D1
Authority key identifier: 42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA
Certificate issuer: /CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
Certificate serial: 01967FEB38803F79ADF6F112887D197DFFD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
Manifest number: 09A6
Signing time: Tue 29 Apr 2025 05:00:43 +0000
Manifest this update: Tue 29 Apr 2025 05:00:43 +0000
Manifest next update: Wed 30 Apr 2025 05:00:43 +0000
Files and hashes: 1: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl (hash: iZ3swBgtHCBmLS5uIDm+U2uPfM0NhsvObY6vDIrDgEU=)
2: Y5evNC6nSTbaw2HNqlP-IIa_w8w.roa (hash: bcLU6wxFqb3pGDabhdJfOsSNGRX1c39YDi9EFe9onLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:eb:38:80:3f:79:ad:f6:f1:12:88:7d:19:7d:ff:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
Validity
Not Before: Apr 29 05:00:43 2025 GMT
Not After : Apr 30 05:00:43 2025 GMT
Subject: CN=7e8b2e9ba02252076a7829cbcd6b615d06d024d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dc:90:11:fa:5c:27:a6:cf:54:4a:29:44:73:
45:a3:4d:19:9f:55:e8:75:c5:e2:95:fd:c2:81:47:
53:6d:16:e8:99:17:48:76:25:1a:20:be:2f:8a:a3:
e6:90:a8:5d:97:11:53:07:92:84:5d:f1:44:3f:f5:
40:be:2a:ac:df:20:5a:22:ec:74:3c:1c:49:ef:86:
44:87:b4:9e:c5:cd:36:aa:06:55:45:d3:1e:90:ad:
19:63:60:39:8c:35:7a:67:10:e5:c2:6c:38:fb:7d:
28:0c:bf:80:38:53:0a:1a:20:a3:c0:3c:6d:93:39:
61:a5:c4:14:fb:b2:c7:b6:c4:19:11:ff:f1:5b:c3:
a7:dd:ad:26:97:dc:db:fc:72:83:e9:87:55:36:fb:
5c:73:07:73:f9:cc:34:25:59:14:72:05:87:3a:23:
2f:03:ab:d8:01:c4:13:9f:bf:5b:5e:2e:de:cd:be:
e2:a8:48:11:ef:a4:81:ef:3d:84:8b:67:6b:09:a2:
00:4e:a7:bd:8a:83:5c:1d:a8:a8:b7:d1:a3:11:f0:
9b:06:41:f2:b8:54:ca:a7:2b:23:6f:99:42:0f:b8:
1a:d3:6c:b4:95:89:ed:62:59:f0:8e:34:db:f9:8b:
11:77:c2:e7:4e:ed:c8:e7:8f:09:49:f8:f2:15:93:
e8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8B:2E:9B:A0:22:52:07:6A:78:29:CB:CD:6B:61:5D:06:D0:24:D1
X509v3 Authority Key Identifier:
keyid:42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:8a:3d:cd:14:6b:ce:a5:52:b7:1f:21:7a:f3:9d:1d:6b:a6:
05:f9:7c:1a:e5:66:34:9d:c1:24:7c:cb:61:b3:e4:24:eb:e6:
22:d3:84:77:39:f3:de:2e:76:73:dc:77:b3:ae:69:09:65:de:
7a:5f:78:60:24:92:43:b7:36:2a:a6:77:49:94:4b:24:cf:2d:
3b:24:d3:99:53:35:4b:49:24:a8:14:d9:db:68:90:66:8b:ca:
87:0a:20:96:bc:d8:97:32:52:a3:e3:47:a2:27:c9:cc:6f:f5:
6d:45:8d:f5:02:63:71:9a:ea:90:c7:6f:ba:0b:2c:9b:51:ea:
67:37:57:6d:7c:33:68:c2:21:9f:8e:bc:43:23:9c:f1:7c:5c:
f0:29:d2:01:ee:90:9b:5f:a2:91:22:e1:5f:3b:d3:e5:f7:ec:
ab:1f:3b:eb:f6:20:97:71:ac:26:0b:c8:96:bf:99:29:de:aa:
38:b7:52:72:b4:90:ca:7f:ab:04:75:0d:f1:f2:25:93:dc:04:
8e:24:3e:6e:dc:6d:00:02:d7:40:f8:eb:42:89:ba:1b:b5:a2:
da:9d:f2:c2:f6:f8:44:4c:57:67:09:ff:5f:28:5c:82:0d:4a:
95:73:20:05:6e:cc:b2:8f:56:e3:b9:97:73:09:59:24:ab:b6:
b0:89:01:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:21:55 2025 by rpki-client