Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
File: QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft (raw, json)
Hash identifier: XMYqDoOc+jkCcipOa2ruzeNwVhi26JOSjfI+hMAu8sQ=
Subject key identifier: 35:04:43:5D:8B:71:C7:8F:69:C7:7A:D6:94:03:91:33:57:03:76:A6
Authority key identifier: 41:F2:82:CC:1C:07:69:7F:F5:B5:19:0C:71:43:93:D5:42:40:6D:43
Certificate issuer: /CN=41f282cc1c07697ff5b5190c714393d542406d43
Certificate serial: 0196778C98C0FF402A3C16E96585FAAC2142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 14:00:24 +0000
Manifest this update: Sun 27 Apr 2025 14:00:24 +0000
Manifest next update: Mon 28 Apr 2025 14:00:24 +0000
Files and hashes: 1: PbpHI1ZC_qh6Iqt-kTdMP4W_DEg.roa (hash: K3Udc58xv21OmQH+u7wn/kXbZhJ9O+Rk784GDSjalf0=)
2: QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl (hash: U5PNtGOomZNSFwL/5n9eKacshtjQDTu96NT/+4C8Qn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8c:98:c0:ff:40:2a:3c:16:e9:65:85:fa:ac:21:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f282cc1c07697ff5b5190c714393d542406d43
Validity
Not Before: Apr 27 14:00:24 2025 GMT
Not After : Apr 28 14:00:24 2025 GMT
Subject: CN=3504435d8b71c78f69c77ad694039133570376a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2b:61:5e:1e:8a:f8:a1:04:f7:d7:3e:a6:1d:
5d:1e:71:bf:ec:4c:f5:8b:72:21:34:09:3b:6e:ac:
13:35:b9:c3:8f:96:de:88:83:72:b8:8b:40:3a:2f:
d5:dd:38:c3:ab:4b:05:1f:2e:35:b5:12:82:00:d0:
29:f4:6d:01:18:83:2f:50:d2:2f:65:3f:ae:15:bd:
2e:f5:74:a4:71:26:37:b6:89:65:18:74:04:54:81:
26:e6:93:4e:a3:65:4e:3c:64:6c:56:99:5e:9d:e4:
68:43:b3:a9:9e:88:df:cd:5a:f8:c8:aa:cf:77:d0:
45:dc:7f:0e:87:68:e7:eb:6e:8c:e4:78:3c:db:69:
5a:f1:19:70:34:43:92:aa:6d:09:e5:06:29:71:c3:
de:fb:06:a5:96:6b:78:fb:a4:40:be:24:42:d7:7a:
99:ad:03:15:5e:81:c6:ae:2f:30:89:e6:35:23:4b:
20:3d:ad:c2:e3:4a:f6:f4:38:2a:c2:97:6a:da:6c:
51:7a:55:6b:58:63:42:e8:61:f1:67:6b:59:42:59:
59:1a:7e:68:9b:b5:91:a7:cd:47:ac:0c:d8:7a:2b:
07:ba:07:5c:6c:62:a1:85:47:93:58:ff:1c:66:57:
08:f1:a4:db:c4:af:4e:fd:ed:a7:f2:82:35:e5:1f:
99:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:04:43:5D:8B:71:C7:8F:69:C7:7A:D6:94:03:91:33:57:03:76:A6
X509v3 Authority Key Identifier:
keyid:41:F2:82:CC:1C:07:69:7F:F5:B5:19:0C:71:43:93:D5:42:40:6D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d0:03:2a:4a:e7:ad:0a:96:4d:21:75:49:91:53:ae:5a:8e:
06:6b:25:aa:6f:bc:71:f9:61:a4:e2:66:11:c7:e1:f5:bf:06:
06:d4:7d:84:b1:09:bd:87:f8:51:68:28:9b:08:20:b1:77:41:
e0:a4:4a:6c:57:d5:28:9f:d8:9a:36:36:b6:b2:38:d5:b9:2e:
bc:bc:11:10:9c:c2:ca:07:7f:20:07:62:2c:2a:45:b9:3d:cb:
5d:f7:a9:e3:7f:1f:f7:b9:b2:6c:18:3e:bd:1f:23:8d:c9:aa:
fe:bd:39:00:d2:f9:44:88:93:49:c3:4f:21:72:17:84:bc:a8:
71:c0:b3:7b:d4:87:85:c0:6d:54:ba:4a:0f:a2:fc:15:a8:05:
54:42:a0:37:61:61:b4:b6:84:2a:ec:96:be:b2:fc:7c:9e:72:
78:c5:d6:77:22:df:49:07:42:3b:3a:ba:99:6a:97:b0:2a:50:
aa:e2:e7:36:18:43:3f:2e:ac:fe:18:04:7d:40:9e:e1:65:ce:
c2:60:ee:a3:68:31:1e:09:33:aa:ec:bf:d6:66:62:ca:2a:c5:
4b:51:08:11:1e:ff:43:28:8d:ae:49:a7:9c:97:86:04:9a:49:
9d:44:d9:06:20:f8:d9:6a:50:26:e5:c0:b0:3b:1f:d3:2b:9e:
82:d9:1f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:22:15 2025 by rpki-client