Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft
File: QMyB_4LO1hrvhHas56DoGLuuj8Q.mft (raw, json)
Hash identifier: pXz/SN+iOdQRDhtC6sJP8cMaUn+erRLNbpADffGxPtY=
Subject key identifier: E9:C8:9D:3C:18:89:6A:8C:30:FF:73:DB:E1:21:7E:70:D4:96:99:40
Authority key identifier: 40:CC:81:FF:82:CE:D6:1A:EF:84:76:AC:E7:A0:E8:18:BB:AE:8F:C4
Certificate issuer: /CN=40cc81ff82ced61aef8476ace7a0e818bbae8fc4
Certificate serial: 01967FB3D10FCA0049D22BABB509B3C2C44B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft
Manifest number: 0B8E
Signing time: Tue 29 Apr 2025 04:00:12 +0000
Manifest this update: Tue 29 Apr 2025 04:00:12 +0000
Manifest next update: Wed 30 Apr 2025 04:00:12 +0000
Files and hashes: 1: QMyB_4LO1hrvhHas56DoGLuuj8Q.crl (hash: 3igzcOway5izVzuBY+I7CyF1/Pgo/byJyufb8qiCByw=)
2: f9PiBsdXGMaiketrG3G5PjbB6oI.roa (hash: OKMBW/Wn+8xzvLZOORxBkZ/Gr6+Ikl3rSLUfT+IRWSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b3:d1:0f:ca:00:49:d2:2b:ab:b5:09:b3:c2:c4:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cc81ff82ced61aef8476ace7a0e818bbae8fc4
Validity
Not Before: Apr 29 04:00:12 2025 GMT
Not After : Apr 30 04:00:12 2025 GMT
Subject: CN=e9c89d3c18896a8c30ff73dbe1217e70d4969940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3e:bd:b2:bc:09:ee:2b:38:5b:4d:83:96:e6:
ed:15:94:ff:73:21:2b:eb:f8:e5:f7:19:7c:47:13:
3e:20:59:a2:d8:83:ac:d7:a6:8c:d2:b5:b1:4b:cc:
16:92:c5:c2:1a:ec:55:03:6e:6f:c3:b2:f8:00:9e:
73:44:e5:33:b0:16:38:50:24:da:f9:3b:a1:e7:3e:
4a:8a:4c:e4:86:9b:06:6d:41:2d:8a:7b:bd:33:86:
88:8a:9d:4f:31:e6:75:b4:b7:4e:8a:c7:4d:13:be:
b1:87:2d:d5:d7:ee:86:fd:48:d7:46:fc:c6:e2:a3:
c6:15:fc:49:3e:88:de:1d:76:f7:2b:e0:4e:97:16:
15:1a:c9:82:f2:00:3f:43:34:c0:61:5c:d3:ba:dd:
64:c8:79:bc:60:d1:3a:a6:56:93:f9:e7:5a:45:89:
c0:51:de:7c:3e:fd:8c:ae:4a:f7:fa:eb:9c:f1:bb:
22:0c:b2:ed:35:9c:6b:13:02:46:fc:e1:9a:a4:38:
2a:2d:58:1b:88:5f:ea:b7:af:81:5d:1f:f5:93:92:
72:b3:32:0a:1b:f5:91:f4:db:83:c6:9c:c4:c5:cd:
7a:10:60:02:9d:85:1e:a9:15:bd:28:92:2b:11:f4:
45:bc:c2:b7:15:06:65:dc:1c:b6:37:a4:d7:ab:90:
4c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C8:9D:3C:18:89:6A:8C:30:FF:73:DB:E1:21:7E:70:D4:96:99:40
X509v3 Authority Key Identifier:
keyid:40:CC:81:FF:82:CE:D6:1A:EF:84:76:AC:E7:A0:E8:18:BB:AE:8F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:5a:d4:6a:59:c1:47:d9:44:9a:9a:ab:59:85:df:56:17:c5:
c0:31:16:c8:26:be:60:2c:b8:1e:43:89:71:45:34:8e:86:fc:
47:13:7e:7e:9c:ea:1e:22:cc:30:ef:c2:02:e7:4b:0e:1c:42:
e7:b7:25:f9:d0:03:80:9d:1e:5c:9b:f9:21:94:50:55:31:0e:
7b:2d:b8:77:24:c3:8e:c5:5a:e5:03:e5:9b:c3:ff:28:47:9e:
24:e4:ff:4a:21:65:3a:d6:8f:e1:bd:3f:c1:95:ac:b9:04:90:
89:81:4b:7c:85:f3:d4:9f:6a:8b:cf:09:6e:b8:70:40:32:02:
b1:65:34:da:68:d7:cf:e2:ec:9a:9b:32:d9:dc:a8:d1:86:85:
5f:c4:fd:fb:78:12:73:df:a0:a8:00:25:aa:d3:79:f4:12:23:
e6:e8:cc:32:20:e7:87:af:db:88:89:14:a2:eb:2b:25:b7:70:
ca:5e:2d:40:cd:4c:65:9e:da:6e:1b:ed:52:cb:1f:9b:3f:c5:
8f:b6:6b:5c:13:a7:8c:82:59:11:ea:85:c8:26:67:ca:f6:6f:
92:17:bd:80:fc:eb:66:8d:b1:c4:c1:bb:c0:09:1b:8f:c1:a6:
de:78:5f:6f:97:4c:71:eb:43:01:b7:1e:13:a3:22:c1:a9:c5:
41:28:64:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:14:41 2025 by rpki-client