Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
File: QZHlgmJw9J6umZ1InoXezMhHc4s.mft (raw, json)
Hash identifier: l7eS9J9kSfWhjVrDkViY8lGeVEGBG4+HpoevaHuolY0=
Subject key identifier: 95:CF:D1:9C:8E:B4:D7:EA:35:A0:38:9C:BA:7F:C2:93:AE:12:E8:B0
Authority key identifier: 41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B
Certificate issuer: /CN=4191e5826270f49eae999d489e85deccc847738b
Certificate serial: 0196A72F8FE05F3AFAF3EBD69B241A5771D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
Manifest number: 1044
Signing time: Tue 06 May 2025 20:00:34 +0000
Manifest this update: Tue 06 May 2025 20:00:34 +0000
Manifest next update: Wed 07 May 2025 20:00:34 +0000
Files and hashes: 1: 5a04uRMLuLPqwpXzKrFBWV5ma_s.roa (hash: pqBMscBUXLlLFYQmwhp2Q/lEjdKvHVjvXqUWPX0LeGM=)
2: QZHlgmJw9J6umZ1InoXezMhHc4s.crl (hash: WX5RC5TJMtEbs6JhaLGW9LJZQbQ3emilamPmYOiqRLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:2f:8f:e0:5f:3a:fa:f3:eb:d6:9b:24:1a:57:71:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4191e5826270f49eae999d489e85deccc847738b
Validity
Not Before: May 6 20:00:34 2025 GMT
Not After : May 7 20:00:34 2025 GMT
Subject: CN=95cfd19c8eb4d7ea35a0389cba7fc293ae12e8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:01:42:a3:14:e4:bd:bc:45:de:53:fd:58:ed:
7f:ed:37:47:d7:b1:81:2c:24:c4:e6:83:e3:85:31:
c8:25:c2:05:81:e5:4c:7d:d5:ec:09:24:b9:14:e9:
ea:d4:9e:4b:ea:96:0f:82:52:7b:8a:ac:9b:21:8b:
57:84:86:b8:06:97:ae:30:30:e4:a4:e2:7b:24:ac:
fe:c7:c2:ef:44:28:e8:74:d6:b2:9d:d0:53:b0:16:
a1:f6:4d:11:72:83:05:40:c1:bc:0c:f3:90:6c:48:
b5:d1:1d:9c:e0:e4:8c:8f:f5:4b:e1:c9:d0:42:0e:
fb:de:3a:74:8f:76:1e:87:d5:cb:fd:67:89:56:75:
a7:92:27:2b:10:f4:ab:c1:ad:ab:e8:c6:85:d6:9e:
30:32:8b:65:09:1d:d9:36:17:1a:ed:8f:2e:42:92:
12:3e:dd:26:a7:5f:fc:46:18:4c:3b:5c:98:18:44:
1e:ec:7b:b1:49:1e:2a:a4:39:12:25:8a:c2:35:7c:
6f:5a:ba:8f:d3:69:b0:bb:1d:e2:07:ac:0b:b5:e6:
d6:e8:9b:4b:ef:47:bd:0b:a9:e7:af:18:0b:06:40:
7e:e2:a0:96:b0:19:0c:a1:ff:65:ba:ca:fa:d0:0a:
c2:ad:de:8b:87:c7:1b:25:3f:d6:62:bc:23:0e:9f:
8e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CF:D1:9C:8E:B4:D7:EA:35:A0:38:9C:BA:7F:C2:93:AE:12:E8:B0
X509v3 Authority Key Identifier:
keyid:41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:d9:64:a0:d5:50:31:dc:4c:d0:cf:3b:e1:84:c3:c0:2a:b4:
cc:52:3d:57:dc:03:91:0e:86:89:71:ce:b4:db:61:ec:fd:a5:
b3:63:45:b3:2f:d6:b6:6a:33:27:31:f5:51:89:00:f8:94:ab:
a6:c1:8c:f3:59:2a:5b:3d:54:d2:d5:90:80:fa:88:22:b9:96:
cf:9d:a1:04:f4:a6:0d:5c:46:7e:88:e3:41:14:60:19:6d:26:
aa:ef:cf:64:6a:94:bc:af:2e:2c:de:4d:25:54:59:2c:48:e2:
41:bc:0f:d5:48:bf:2c:6d:ea:11:84:38:b3:8c:0f:68:ed:88:
68:eb:5f:6f:90:c2:3e:25:6c:c0:9c:82:8b:db:ee:92:14:c5:
bd:ef:36:2c:64:74:a5:bc:08:be:86:a1:81:e5:77:36:7b:27:
4e:6e:e3:52:27:c6:1f:35:68:cc:46:8c:3a:7a:de:66:29:68:
9e:ca:ab:8f:64:60:b8:bb:78:ab:aa:18:33:9c:aa:11:32:e4:
dd:e0:d9:f9:2c:57:e8:44:56:49:43:58:00:b4:45:56:9e:59:
1f:2a:5c:06:bc:74:97:a2:c8:ae:35:30:6f:f4:35:49:fb:ac:
15:c4:fa:b5:9d:d0:44:87:5f:5d:bb:8e:ef:28:fb:96:08:68:
1f:fe:1f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 04:15:12 2025 by rpki-client