Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
File: QL_e36qTma09VTH6RxoSs7_jfhI.mft (raw, json)
Hash identifier: zIW6H4djS9eAgZGmbFAz28dCjJV+L9Leulv91YIQ45o=
Subject key identifier: BB:F0:95:B2:84:08:A9:02:23:FA:09:EA:E6:07:77:F1:13:72:EF:04
Authority key identifier: 40:BF:DE:DF:AA:93:99:AD:3D:55:31:FA:47:1A:12:B3:BF:E3:7E:12
Certificate issuer: /CN=40bfdedfaa9399ad3d5531fa471a12b3bfe37e12
Certificate serial: 019677FB4E7B5A997DE07E3B191DF60C223D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
Manifest number: 0831
Signing time: Sun 27 Apr 2025 16:01:20 +0000
Manifest this update: Sun 27 Apr 2025 16:01:20 +0000
Manifest next update: Mon 28 Apr 2025 16:01:20 +0000
Files and hashes: 1: QL_e36qTma09VTH6RxoSs7_jfhI.crl (hash: Zjbi0TjYqNwOWaeUc36DQMGCyYcd58rXcTAjc8zL4OM=)
2: jSlm79fFu0VgJBsIaC81oVf4nGI.roa (hash: 8IYkRLo3mCrHlEs7aBNerIrNbkB27E7Mc7prSDZuZVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:4e:7b:5a:99:7d:e0:7e:3b:19:1d:f6:0c:22:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bfdedfaa9399ad3d5531fa471a12b3bfe37e12
Validity
Not Before: Apr 27 16:01:20 2025 GMT
Not After : Apr 28 16:01:20 2025 GMT
Subject: CN=bbf095b28408a90223fa09eae60777f11372ef04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:18:bd:4c:22:04:6a:81:99:21:3a:17:76:cc:
45:f6:5b:b9:85:45:f0:ce:a4:88:c0:7f:be:b8:da:
20:65:25:e1:3a:16:9c:01:b7:b5:15:1f:9c:b7:fe:
5f:80:59:36:f2:52:7f:c1:f6:2d:e4:94:6c:b3:ba:
a8:60:0b:28:33:53:82:b9:e5:0c:24:c8:23:f0:c1:
d5:eb:be:13:9e:1a:5c:df:35:41:62:c3:19:97:ba:
f4:b7:ee:9d:01:3e:bf:72:d2:26:c4:7a:d6:a1:cd:
4c:a0:71:c4:ff:bf:4b:8c:30:2c:f2:88:20:b7:d0:
14:a4:95:c6:1c:c6:c4:e0:7e:af:bf:c3:fa:55:b7:
03:66:92:0f:73:76:ea:33:4a:c0:2b:b3:71:8a:08:
37:9b:94:49:d1:17:ac:2a:3d:30:4b:54:95:b7:77:
a4:f1:d7:bc:8a:8e:62:a9:0f:4b:7e:24:e6:2c:5b:
84:49:38:65:10:c6:14:a4:a1:71:f7:f3:8b:1d:a9:
3e:d8:10:c2:83:e6:af:42:56:f6:3b:89:40:5b:be:
3e:cc:2c:80:5e:65:a1:fc:1c:70:b8:eb:c4:2d:98:
3e:c9:52:33:98:8b:b7:9c:8a:4a:a2:e0:6c:2a:a2:
59:f6:97:91:b8:0f:fc:fb:ef:be:43:a5:91:ca:7f:
a4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F0:95:B2:84:08:A9:02:23:FA:09:EA:E6:07:77:F1:13:72:EF:04
X509v3 Authority Key Identifier:
keyid:40:BF:DE:DF:AA:93:99:AD:3D:55:31:FA:47:1A:12:B3:BF:E3:7E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:28:7f:a6:42:68:07:74:9c:33:07:8b:be:99:03:f0:f5:12:
ed:14:e2:df:b9:55:65:3c:e2:45:dd:ca:2e:31:3a:af:01:64:
ed:3e:73:4b:ed:45:91:57:f5:12:3c:11:9a:5d:8e:ee:3f:92:
c5:7b:fd:5f:b2:61:e1:13:00:18:79:6b:ab:c0:e4:a4:2c:16:
5a:4a:4b:32:7f:2a:37:df:0a:02:b7:c6:d5:34:38:b4:df:c1:
b5:97:fd:b1:06:01:56:35:09:bb:0d:1f:17:72:e0:48:06:88:
09:61:3a:18:d9:f1:9d:94:07:d1:81:57:ec:67:c4:1e:1e:69:
13:81:32:2e:16:74:3a:a1:e1:60:62:36:c9:df:c2:85:2e:d5:
88:0d:9c:1d:0f:97:be:73:c2:b0:c3:87:48:9f:12:b6:6e:64:
7e:82:c5:a1:a6:5d:91:80:98:ff:63:3b:9b:39:0b:d8:e4:e1:
81:c3:35:e0:cf:36:b7:f1:4a:83:f9:3f:f9:99:8a:5f:e1:9e:
e1:4c:dc:8e:d0:35:d1:a7:f5:70:62:e5:af:14:66:00:4c:c4:
81:e2:5d:9c:14:2e:a8:9d:12:a8:3a:cf:78:be:4c:ca:12:17:
e7:c0:95:1e:cc:c5:65:ac:ba:83:02:97:2d:c2:8d:4b:28:b4:
72:24:8e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:20:59 2025 by rpki-client