Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
File: QSrIOifKhyPGGxRGw-Z4EQxlBok.mft (raw, json)
Hash identifier: G5KRniWUhhB+gMZrrqechdROlllbuqZr4QP9om1n6vo=
Subject key identifier: FC:69:2F:B7:B2:78:C9:34:1A:27:79:07:DD:7F:AA:8F:10:18:98:90
Authority key identifier: 41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
Certificate issuer: /CN=412ac83a27ca8723c61b1446c3e678110c650689
Certificate serial: 01968F94C07C624A80C91543B00C1096E42F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
Manifest number: 1520
Signing time: Fri 02 May 2025 06:00:12 +0000
Manifest this update: Fri 02 May 2025 06:00:12 +0000
Manifest next update: Sat 03 May 2025 06:00:12 +0000
Files and hashes: 1: BriG5n_d334rZ6dRB6OmkxalNXQ.roa (hash: gR3OKMrFwiMtW4+rQqu+QkKInRaAYo99fA48hRcfRho=)
2: QSrIOifKhyPGGxRGw-Z4EQxlBok.crl (hash: L4sPAaMinhFcTntrOIE5bX7wAKl2uE7xxVSVb7E1Fo8=)
3: fFU1nOvAp1rSs4Piya9lGEHH2qQ.roa (hash: 2ngeI6kdV66tUb5OqMLCCP5yBBWk//A11XWcWwTz/1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 06:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:94:c0:7c:62:4a:80:c9:15:43:b0:0c:10:96:e4:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412ac83a27ca8723c61b1446c3e678110c650689
Validity
Not Before: May 2 06:00:12 2025 GMT
Not After : May 3 06:00:12 2025 GMT
Subject: CN=fc692fb7b278c9341a277907dd7faa8f10189890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:56:ee:b1:b2:58:91:f9:d4:e3:28:15:7f:73:
de:d3:cc:a4:b7:32:ea:08:99:f5:af:78:da:8a:df:
c7:b8:37:c9:1e:5f:31:27:50:3d:bd:06:d6:7f:12:
37:d3:30:05:8c:67:28:ad:48:23:1d:ae:13:b5:cd:
4f:16:ba:b6:83:15:f7:ff:4b:3b:58:ef:2b:1a:15:
62:25:6e:9f:36:11:9a:cd:19:cf:05:87:e2:db:6b:
55:3c:ef:14:3a:41:21:a2:5e:29:13:41:a8:48:b1:
09:55:b2:3f:25:ed:84:a6:6c:0c:66:7e:f5:c3:a5:
cb:ae:5a:d8:47:57:84:75:e6:af:d7:14:67:9b:46:
30:cb:7f:1d:ab:d7:ef:87:1e:0c:7f:41:9e:96:da:
95:66:37:2a:61:ac:08:77:c8:38:74:51:63:5b:37:
a6:11:01:ec:6e:cb:ab:97:79:59:be:9e:3d:2c:8e:
8b:b1:3f:dc:0c:ed:56:4b:bb:56:c3:27:35:9b:a1:
99:bd:2f:31:be:f6:86:35:18:71:37:37:2e:dd:42:
92:c7:3f:6e:0b:d9:23:16:6e:77:eb:e4:f5:9b:17:
27:90:e1:2f:98:f3:06:88:d3:60:20:fe:69:f9:ae:
7a:dc:e9:c5:e9:5c:20:01:92:22:9f:9c:84:96:a8:
22:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:69:2F:B7:B2:78:C9:34:1A:27:79:07:DD:7F:AA:8F:10:18:98:90
X509v3 Authority Key Identifier:
keyid:41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:00:29:8f:e7:93:27:99:c4:90:2b:0b:21:b3:46:53:f2:ef:
60:5a:41:3a:dc:e3:2f:e6:63:ff:ee:04:37:5a:8a:8a:5a:51:
c3:ff:c3:cc:62:bb:54:e6:4b:46:a7:62:69:95:0d:f3:95:e1:
30:a7:60:d6:9f:46:25:5e:5a:4b:e1:10:12:77:fc:b2:54:57:
01:85:43:72:66:6d:81:4b:1f:71:9e:eb:36:90:3b:22:84:f9:
8b:d3:91:cd:b1:12:e6:55:55:2c:5f:3a:23:c4:a7:6e:7f:0a:
d3:4a:1a:01:50:99:fb:c5:32:2f:3a:e3:bf:7f:01:44:69:86:
a5:fc:05:4f:b2:57:09:7e:8d:6d:e9:36:4a:22:7a:7a:66:86:
5b:61:9e:85:50:94:0d:d9:b0:fe:8e:1d:f7:a4:64:fb:4d:ac:
39:55:73:1a:b9:c5:e8:54:18:e2:d3:63:77:e9:03:d4:64:53:
52:ee:79:75:d2:76:cc:36:37:1e:93:a3:31:1e:95:6d:5d:58:
36:fc:72:60:f3:5a:5d:53:2c:c7:22:84:87:0d:bb:1d:8a:f7:
14:e2:2c:16:ca:b6:29:bb:4b:97:3f:8c:f7:df:6f:68:da:c5:
c6:8c:de:2a:54:60:0b:91:a3:c5:65:56:6b:18:0d:1d:05:6f:
af:1f:a9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:33:46 2025 by rpki-client