Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
File: QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft (raw, json)
Hash identifier: /VfRCIufeHurGdy55dXFviEw1WtArCKtv9VxzH6lMQ0=
Subject key identifier: B4:F4:B8:BF:2E:A8:EE:2D:A7:0A:3B:89:D9:A8:CC:F4:E4:19:BC:72
Authority key identifier: 41:2A:DD:94:55:BC:13:2B:73:0E:72:70:51:F0:B6:4B:A4:5F:CD:A4
Certificate issuer: /CN=412add9455bc132b730e727051f0b64ba45fcda4
Certificate serial: 019687DBE22B6463151FF469CFC258DB0AF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
Manifest number: 0209
Signing time: Wed 30 Apr 2025 18:00:56 +0000
Manifest this update: Wed 30 Apr 2025 18:00:56 +0000
Manifest next update: Thu 01 May 2025 18:00:56 +0000
Files and hashes: 1: DuKvCk6weo_jRBIvDVj8Yjk0KTM.roa (hash: V+Me01+23/zbVQCoEw1CvcMCR84Y0P8j12b7Z3im4Sk=)
2: QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl (hash: 7NTaObvnDeAPWrmzWYOkrPFm6kdxTo3KbDMNPdASHd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:db:e2:2b:64:63:15:1f:f4:69:cf:c2:58:db:0a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412add9455bc132b730e727051f0b64ba45fcda4
Validity
Not Before: Apr 30 18:00:56 2025 GMT
Not After : May 1 18:00:56 2025 GMT
Subject: CN=b4f4b8bf2ea8ee2da70a3b89d9a8ccf4e419bc72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c3:61:67:e8:67:bd:51:e2:42:73:7e:65:2a:
18:dd:3a:ba:c7:b8:b3:a0:fb:fc:1f:15:20:99:24:
9c:6a:bd:8b:f1:0a:f4:7b:4a:07:28:a9:d5:1c:53:
a5:b9:c8:bd:0d:fa:75:ce:3b:71:f1:9a:a2:8e:69:
4d:ca:9d:b5:b3:2a:16:29:ff:9d:38:f2:50:ee:54:
f8:3e:6c:87:26:0e:78:40:5c:6c:71:c6:91:2b:56:
1b:80:48:71:10:24:32:a4:b9:ee:81:8c:6c:6c:56:
46:60:be:38:c8:2f:00:be:03:88:7e:e1:21:24:b3:
5a:40:aa:4d:92:7a:21:2a:d1:45:71:bb:b8:61:98:
e3:4e:ab:89:e0:ba:de:a8:14:17:ce:e9:b9:b6:72:
79:40:26:e2:41:c6:54:f5:f4:87:f0:d3:77:51:5a:
c2:af:76:58:21:76:bd:9a:a1:4d:75:9a:1f:de:87:
d8:8e:6d:20:57:3e:37:51:4b:c7:a6:a4:6f:3d:cb:
01:a0:70:aa:9d:72:08:b8:95:d9:d5:bc:0a:46:cc:
00:17:4d:16:32:1c:2d:dd:cb:d6:3b:24:cb:7f:fd:
ec:f6:f3:f1:50:f5:24:be:5c:f5:6d:34:06:d3:f3:
e2:e0:d3:c8:0e:6c:82:85:c5:ee:40:3c:58:6e:92:
c0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F4:B8:BF:2E:A8:EE:2D:A7:0A:3B:89:D9:A8:CC:F4:E4:19:BC:72
X509v3 Authority Key Identifier:
keyid:41:2A:DD:94:55:BC:13:2B:73:0E:72:70:51:F0:B6:4B:A4:5F:CD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f1:60:05:ec:cf:56:9a:b5:b6:a7:42:2f:a0:26:99:7c:a7:
7a:4b:b3:32:d3:73:9f:ac:15:c8:6a:80:ab:2a:72:52:75:a4:
0b:92:61:fc:f9:88:cd:98:61:97:a9:64:a1:8b:6b:f7:23:d7:
11:54:e6:9b:30:5a:77:55:2f:84:7e:11:87:47:83:d4:5e:91:
7c:85:1c:cd:11:be:c9:86:9a:4d:46:1a:29:f5:69:22:10:75:
07:2f:91:9c:cd:dc:cf:9b:f3:04:90:9e:4b:ae:44:39:ee:e5:
3f:c3:d9:67:c5:36:e1:c5:62:3e:bf:26:e8:21:31:23:26:07:
0e:96:71:b6:b9:1c:eb:0d:1f:90:c6:3c:e4:ba:a6:5f:78:6f:
6e:32:26:a9:bd:21:b3:67:33:78:6c:0a:60:32:7a:2a:98:05:
56:61:d5:09:d6:2d:81:1c:89:89:4b:11:d2:02:8a:05:09:83:
91:f0:1b:c3:61:af:f9:34:19:d4:e8:f6:d8:08:1f:38:5c:74:
73:40:97:ed:7d:55:fc:fe:ee:89:b1:76:4c:21:53:a1:0a:95:
f2:be:6a:b1:38:cc:b6:05:1d:1b:8d:3f:d5:0c:57:3c:81:5b:
ec:f1:ce:69:b0:02:36:d3:09:ef:4a:0b:50:c7:97:8d:84:db:
f4:7d:8d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:41:12 2025 by rpki-client