Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
File: QhLmk-jn-4sxqoVTsw2VvvBINyk.mft (raw, json)
Hash identifier: vSdV1nyUNzWj4r2OLSRX4IJAJg/mcxWzCVu2oinb35w=
Subject key identifier: 24:17:C9:DC:3D:12:2F:10:91:12:0A:A4:FE:BE:FD:A8:AF:B6:6F:52
Authority key identifier: 42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
Certificate issuer: /CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Certificate serial: 019691F18B44AAE02AF01A713394BE4FF1D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
Manifest number: 151F
Signing time: Fri 02 May 2025 17:00:48 +0000
Manifest this update: Fri 02 May 2025 17:00:48 +0000
Manifest next update: Sat 03 May 2025 17:00:48 +0000
Files and hashes: 1: QhLmk-jn-4sxqoVTsw2VvvBINyk.crl (hash: pVhPDVjvXLqb4KiQPm61F8/cf8hQvXluVUjB0X1d/mA=)
2: cjjqef6iWCl_1yFiNx4mwIqngEo.roa (hash: d/pj6gBhpaRW2JX3FWdfa1N0hGZit4d6dbXlFGA0bW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:f1:8b:44:aa:e0:2a:f0:1a:71:33:94:be:4f:f1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Validity
Not Before: May 2 17:00:48 2025 GMT
Not After : May 3 17:00:48 2025 GMT
Subject: CN=2417c9dc3d122f1091120aa4febefda8afb66f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fd:1f:64:47:c2:3d:73:17:e0:2c:72:14:36:
73:59:1a:22:3f:6f:a5:23:aa:1c:3e:ba:cd:f7:2a:
e7:42:1c:66:a8:d1:c2:51:6b:bd:d5:a3:1c:d8:df:
7a:61:a6:33:8c:b0:a1:7a:5a:c1:7e:33:fb:d6:e0:
6e:19:f6:c3:44:80:49:72:1e:68:11:09:37:bf:fb:
ce:6f:90:f0:4e:32:66:19:f0:36:d9:76:02:af:c7:
af:27:49:4b:e7:d5:b2:57:7a:1f:5a:31:7e:bc:f9:
c1:29:f3:e7:8e:b4:e6:86:ed:be:77:56:dc:92:9e:
a5:6b:62:32:bc:bf:0c:7b:c0:eb:5a:ca:2e:98:25:
96:51:2e:8f:a4:91:8f:72:b3:83:62:0b:da:a3:ae:
df:fc:68:1f:83:f6:ea:29:94:5b:76:54:7d:f1:ef:
fb:58:fb:03:99:fe:6c:a5:f2:1f:4b:0c:61:40:61:
0a:35:3e:c0:e9:47:37:03:b4:25:a2:38:6f:9a:6c:
8b:6f:a6:00:de:68:80:2f:99:ad:f8:3a:f3:36:6e:
22:2b:29:53:50:e9:da:9c:dc:f5:62:dd:f2:0a:62:
0b:74:6c:01:69:fa:9b:a2:0a:96:9d:57:70:2e:53:
97:c1:54:cd:ab:86:02:10:55:ab:e2:ff:5c:75:bb:
3b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:17:C9:DC:3D:12:2F:10:91:12:0A:A4:FE:BE:FD:A8:AF:B6:6F:52
X509v3 Authority Key Identifier:
keyid:42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:3e:7d:b0:1a:ce:9f:42:3b:6e:f1:71:c4:6f:b2:32:84:67:
4d:6c:3e:46:bb:62:b7:04:a8:8b:ba:16:f2:29:23:bc:0e:e7:
b6:b6:45:59:45:cd:25:83:ea:ab:42:6b:4a:93:eb:75:3d:4b:
10:66:fd:20:57:5a:a6:b0:3d:ed:29:e9:d0:0c:c2:14:cc:c8:
b4:0e:7a:18:e4:da:bd:9d:b9:29:4c:92:a1:9e:78:cc:c9:2a:
eb:4d:7d:c1:4f:07:ae:f0:57:a6:9f:a5:57:c2:33:a3:6b:31:
84:e7:0a:b0:dc:c3:d3:3c:23:47:20:a9:68:db:3f:db:52:fd:
c7:83:ab:8a:3e:c8:1b:7c:2e:94:c4:48:94:82:5e:fa:42:82:
0a:31:f3:f7:6c:2a:81:1d:03:fb:27:35:26:6d:e7:2f:e9:ee:
76:5c:60:32:18:6a:eb:ac:e3:53:e9:64:2d:3e:b8:ec:53:eb:
83:79:cd:62:a3:59:a5:e1:06:71:28:df:05:ba:b6:f4:fc:6e:
76:10:f4:91:89:f1:0b:90:8b:46:6a:f9:ce:87:d8:e5:19:11:
8f:e1:45:9a:d6:19:39:0d:31:ca:1f:50:cc:e9:b0:67:e3:da:
8a:94:60:2b:27:95:7b:45:1a:d5:a3:35:33:92:0d:06:78:25:
b9:69:66:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 03:02:09 2025 by rpki-client