Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
File: QONYGt3WuZ3YdEueKIb7sCrpGOM.mft (raw, json)
Hash identifier: +mrXLnCOuPP14gCAcHOugywIf5y9MDSOlSvOW+u+qs4=
Subject key identifier: 72:92:44:44:2B:82:65:7E:61:94:13:4A:37:81:C9:0A:20:20:F6:26
Authority key identifier: 40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
Certificate issuer: /CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Certificate serial: 01968CCACC4D15CC541CC1B90ED14380847D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
Manifest number: 151C
Signing time: Thu 01 May 2025 17:00:22 +0000
Manifest this update: Thu 01 May 2025 17:00:22 +0000
Manifest next update: Fri 02 May 2025 17:00:22 +0000
Files and hashes: 1: 7sL1UBW9oIL-S5vfH1jOO3eYhUk.roa (hash: WnpcdVTaXzH616PZ8mN25gQu/poO33PVXu+tGiulqjA=)
2: QONYGt3WuZ3YdEueKIb7sCrpGOM.crl (hash: zvE6lAPP2NpeEOExpKtCszLSuJ6iyIOt62Y7F80K6Ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:ca:cc:4d:15:cc:54:1c:c1:b9:0e:d1:43:80:84:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Validity
Not Before: May 1 17:00:22 2025 GMT
Not After : May 2 17:00:22 2025 GMT
Subject: CN=729244442b82657e6194134a3781c90a2020f626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c8:66:e3:b4:65:e9:8a:59:c4:ca:77:5a:e9:
5f:eb:87:4b:71:42:a4:4d:70:b5:30:9a:75:32:0e:
32:78:7f:25:9e:76:21:64:e1:5e:03:4b:85:57:bd:
a2:8e:98:c7:3e:16:bb:71:42:cf:9f:11:9b:d3:e3:
4c:cc:9a:3e:34:47:19:20:70:f3:a0:94:66:d8:ce:
1e:53:43:bd:b4:f9:5c:7a:83:a2:6e:1f:a5:c1:01:
cf:19:28:04:90:b6:bd:80:06:02:b7:e6:76:60:78:
bd:9c:5e:60:3d:3d:19:f8:36:f4:46:51:82:ed:dc:
e0:bc:1e:4d:ae:f9:d1:c4:7a:22:e5:30:0d:3a:d3:
39:c9:72:ff:63:5c:9e:d6:ec:4a:6f:7b:cf:62:66:
cc:21:1f:14:67:c1:60:9c:8e:fe:85:3f:c1:c5:fc:
c6:b8:cb:da:e8:0c:31:03:c8:f2:aa:54:56:5c:8c:
51:46:63:1d:da:2f:34:7d:a6:ca:0c:ec:3f:0f:57:
8d:5b:79:f6:fe:fd:3a:71:1d:eb:56:f7:e0:9a:f4:
0b:d6:ef:b8:69:17:18:c8:e8:ec:eb:80:bf:46:10:
4d:2f:d8:9e:3e:9d:f1:8a:b6:bf:f7:fe:d5:d0:51:
6f:e8:df:a3:ef:1f:13:d3:e8:1c:45:b9:1a:5d:03:
23:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:92:44:44:2B:82:65:7E:61:94:13:4A:37:81:C9:0A:20:20:F6:26
X509v3 Authority Key Identifier:
keyid:40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:de:00:a7:ca:03:21:06:d8:77:40:95:4c:6a:77:ac:60:02:
65:62:09:41:04:9e:15:9c:1e:ae:5d:43:bd:c5:26:58:60:ea:
55:6f:40:c0:48:a8:8d:26:36:b4:89:17:c9:2e:51:f0:4c:3c:
cd:56:7d:f2:34:32:09:7e:b2:cf:4e:6d:65:ef:89:db:8a:c3:
d2:9d:3f:ce:85:79:48:51:f9:1e:f9:65:1a:b9:e8:4a:28:f0:
0c:b4:66:d2:6b:18:8d:76:6e:70:4e:04:6c:8f:d0:34:ff:30:
5f:32:aa:19:b1:98:f8:3a:99:9f:ab:bf:26:32:7d:ec:13:27:
73:47:ca:f1:27:0d:19:48:44:94:7d:f9:1c:51:7e:79:e8:14:
95:0b:d9:62:f5:d0:5e:7f:67:d9:7c:b2:8f:9e:60:89:cd:bd:
06:5b:e9:30:30:6f:26:4e:c5:e8:b0:00:34:a2:2a:90:cf:79:
99:69:5f:9d:cd:d5:a3:35:b5:b7:f3:ed:4a:26:d7:04:63:cc:
61:6f:01:af:af:42:13:e0:11:ba:56:bf:28:b3:ec:b3:8a:b2:
63:8c:df:51:8a:48:b2:35:e8:39:b2:17:4b:e7:b2:e6:e7:c1:
70:76:95:d5:38:94:a0:7b:f0:ec:b5:51:e7:8a:ed:c7:ff:fa:
b3:e7:66:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:56:28 2025 by rpki-client