Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
File: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft (raw, json)
Hash identifier: 7duWpaP3ukq44pjthniyeEZVupNcfHLdU41r5Y4AtOg=
Subject key identifier: 0F:EA:43:80:B2:BB:AC:44:A7:FF:FA:24:73:5F:C7:96:C6:AC:25:94
Authority key identifier: 42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
Certificate issuer: /CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Certificate serial: 019684A3A9A7B6A30277CA8F20A71ECD9B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
Manifest number: 1517
Signing time: Wed 30 Apr 2025 03:00:40 +0000
Manifest this update: Wed 30 Apr 2025 03:00:40 +0000
Manifest next update: Thu 01 May 2025 03:00:40 +0000
Files and hashes: 1: 3wDf96BAjCwHPGLFXHfr6FPj5tk.roa (hash: n76aMPDVHHg0+waIaYLD5Tllb242OUUWngTT/Znka38=)
2: Crd7C8SVck2OIDtSkQeAyuMLu6I.roa (hash: wscKj8/Aoswv3PHZoE2nGYXdRz4QSyUb5GTz6Q8fmgM=)
3: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl (hash: pQSGIUWvKAZyvgYMwEAo9a6xOyKua+mA8Re2IgK5UTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:a3:a9:a7:b6:a3:02:77:ca:8f:20:a7:1e:cd:9b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Validity
Not Before: Apr 30 03:00:40 2025 GMT
Not After : May 1 03:00:40 2025 GMT
Subject: CN=0fea4380b2bbac44a7fffa24735fc796c6ac2594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:26:53:82:2a:55:6a:69:a5:ce:2c:d1:75:38:
73:2d:c1:40:a0:1c:1e:a0:2e:a0:c5:1c:6f:8c:66:
31:1a:59:f3:17:d0:d6:2a:5a:96:7e:2c:1f:c9:b0:
be:dc:ee:10:f9:00:f2:82:4a:e3:bb:82:03:7c:b7:
56:fb:21:75:7c:21:07:86:48:24:59:ed:28:17:8b:
a4:db:91:79:06:0b:70:a6:7f:b6:fe:f0:2e:af:ef:
d1:61:84:be:59:ba:69:8b:28:41:ef:be:85:36:64:
81:ea:3d:a2:de:71:96:2e:ea:55:7b:28:fa:0d:76:
94:18:e1:3d:5e:22:38:c2:0b:01:ef:2a:cd:88:d5:
f6:04:a5:c2:07:64:55:ce:2f:e0:42:12:e0:ae:e7:
0c:44:9d:8d:17:84:a9:08:53:83:42:d6:f8:19:95:
0e:dc:94:83:05:a7:8a:99:22:ba:63:b7:f2:78:17:
58:a8:b9:71:3d:b7:b8:a4:b2:95:a7:3f:0e:d8:8f:
a9:97:e7:be:bb:b5:0e:c7:46:78:50:09:f7:1e:3a:
11:0a:a9:7c:e7:ff:f3:bd:0a:b1:97:2b:a4:e7:9a:
51:c9:b9:2b:7a:30:2e:64:ab:4a:30:80:1c:59:8a:
ef:d0:12:ec:20:97:98:cf:ee:cf:5d:dc:fc:15:ad:
6f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EA:43:80:B2:BB:AC:44:A7:FF:FA:24:73:5F:C7:96:C6:AC:25:94
X509v3 Authority Key Identifier:
keyid:42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a8:0a:58:eb:e5:91:3e:f2:54:84:96:ef:32:e7:6b:76:8f:
bf:75:77:8d:f5:a1:fe:34:fe:bc:81:a1:50:5e:c1:f2:3e:a2:
01:dd:5e:9d:76:7b:64:ff:2c:af:70:b5:a9:ad:66:c3:52:e4:
0e:84:88:ec:64:f4:13:9e:61:ee:1d:26:ed:a3:a4:fe:22:e8:
8f:09:8c:d9:d5:82:46:d2:59:4d:ba:53:39:57:46:ba:83:ae:
0d:2d:01:f2:cb:9f:8b:d1:4a:20:c7:6c:3d:0a:b5:f1:d5:e3:
12:39:d9:58:b6:ae:93:bd:b0:b1:8c:3e:f9:a8:5b:c7:67:ae:
c6:be:09:da:45:82:b8:1e:ef:02:64:52:48:5d:18:82:4c:55:
35:a1:eb:a8:09:8e:ca:ce:c9:bb:78:2a:6a:c8:fa:7f:b8:3e:
c0:41:27:f5:4e:25:45:ea:e0:92:9c:a4:43:13:15:61:8a:62:
e9:85:e2:1c:13:0e:ec:74:2a:5f:a3:58:a4:ca:ac:c3:1b:89:
ce:2e:e0:d1:61:ea:1a:65:bd:64:7f:96:a4:f1:03:62:3e:a0:
ce:b6:2c:27:2b:10:aa:6f:5b:8d:c1:60:40:7a:f8:4d:77:5f:
79:dd:4d:ae:42:fb:22:99:5f:b7:cb:4c:49:84:4e:54:df:d9:
13:99:8b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:53:16 2025 by rpki-client