Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
File: QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft (raw, json)
Hash identifier: DguoxuyU44rh5wc/zu0rXjqYa86epyrOnVcv6iWFxnw=
Subject key identifier: 45:A0:6F:52:8F:1B:1D:0B:88:20:ED:E9:7C:2D:9E:08:69:74:E7:A2
Authority key identifier: 40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
Certificate issuer: /CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Certificate serial: 01968992A341E1DADBCF44F1C0A1C30FFA2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
Manifest number: 11F4
Signing time: Thu 01 May 2025 02:00:10 +0000
Manifest this update: Thu 01 May 2025 02:00:10 +0000
Manifest next update: Fri 02 May 2025 02:00:10 +0000
Files and hashes: 1: QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl (hash: fzQ2/AJHZV36rnyZWUCPaYZAwQe0xjvGjmj57fQUCD0=)
2: oQC9sPpcZyPZwpQuNTqhI-X9Nlw.roa (hash: vCUpk6P/EjQs3Tpm0wCNehcuCpZGGg9z5aDmzRFQJKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:92:a3:41:e1:da:db:cf:44:f1:c0:a1:c3:0f:fa:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Validity
Not Before: May 1 02:00:10 2025 GMT
Not After : May 2 02:00:10 2025 GMT
Subject: CN=45a06f528f1b1d0b8820ede97c2d9e086974e7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:40:0a:46:02:32:bd:69:ef:28:4f:9e:15:6e:
a6:de:37:2d:37:cc:cd:c8:43:c7:82:eb:01:2c:e9:
b9:ac:3a:ed:37:2b:a0:91:7a:42:42:2f:28:f8:41:
7b:53:e8:5d:a8:6d:e6:bb:d8:9b:2b:c7:72:d0:a1:
41:36:70:e2:56:b6:ea:e0:19:a5:32:43:15:08:10:
9b:26:fa:a0:b9:2d:be:46:de:c7:18:e4:09:82:34:
13:0d:bb:6d:d0:e3:64:f4:c5:f7:9e:ab:5e:2c:11:
49:1c:a2:fb:c4:47:a0:ae:15:02:e5:7b:b5:43:de:
c0:8b:3c:7c:51:1d:a0:08:42:bd:8a:de:af:25:e3:
d6:f4:81:81:a4:ee:77:37:9c:4a:39:c0:25:f2:c6:
3a:b5:b6:0a:11:57:56:d0:59:dd:3d:63:5d:8c:c1:
10:ca:a5:48:0b:89:4f:f9:6c:40:d1:71:12:18:fc:
3a:d8:a0:f7:eb:03:20:30:74:23:00:4f:1a:f2:61:
e0:5b:15:0c:db:c8:85:ff:2c:69:4b:a0:f0:da:97:
14:bb:10:8a:4c:d3:f3:2c:27:2c:20:00:65:94:12:
42:62:1d:50:93:ff:2d:b8:fa:4d:08:7f:87:f6:41:
c8:04:dd:78:ed:c0:c1:17:3a:2c:6d:c2:ac:5a:32:
09:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A0:6F:52:8F:1B:1D:0B:88:20:ED:E9:7C:2D:9E:08:69:74:E7:A2
X509v3 Authority Key Identifier:
keyid:40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:58:a3:26:9f:cf:22:44:9c:f3:a9:b0:a4:45:d5:d1:40:61:
ee:c5:72:2d:aa:8d:7c:dd:81:16:3f:e1:1f:01:74:41:5a:ed:
62:6d:8f:b3:e4:d9:cc:e8:ee:67:f4:9d:4f:fa:6c:5b:7f:ca:
0f:b5:56:4a:eb:97:7b:a0:84:68:11:8b:9c:17:4c:79:80:59:
6b:4d:88:c2:10:6e:a7:ad:71:ff:9e:96:aa:69:91:67:95:56:
36:4e:f9:3c:f3:a3:93:ab:81:6c:74:5f:78:26:fd:9c:58:01:
52:67:04:78:48:15:cf:bf:a2:ad:1a:bd:22:b4:ce:db:b7:15:
e7:fe:23:c9:27:44:51:55:f4:ea:0c:4a:8d:9e:c1:cb:a5:ef:
11:9e:e6:b0:84:8b:4a:60:ba:94:cf:ec:94:73:54:dd:89:3c:
5a:c8:67:2a:69:7b:3d:3e:8e:2a:18:b2:10:33:3e:2e:13:d3:
a7:2b:13:ca:a2:66:56:87:3c:0f:de:8e:54:f0:c4:06:4d:9e:
86:dc:61:48:56:9f:7c:be:5d:87:48:5c:a0:57:3b:f2:77:c6:
52:a0:76:c9:a0:8c:42:b7:af:a5:83:1c:a1:f5:21:a6:3c:57:
20:17:05:b5:21:37:65:37:89:72:b1:4b:18:32:26:84:1f:ea:
a5:93:0b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:03:56 2025 by rpki-client