Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
File: QSHH-wQVOCnZahwDjw33FNpZVAQ.mft (raw, json)
Hash identifier: H1k9ZSchwzS2QXBt28PNfEqMK1yBV0W9CTfHGI/oNn0=
Subject key identifier: F3:96:21:3F:92:B3:B2:B7:51:42:EC:94:12:75:B7:60:C4:9F:A1:98
Authority key identifier: 41:21:C7:FB:04:15:38:29:D9:6A:1C:03:8F:0D:F7:14:DA:59:54:04
Certificate issuer: /CN=4121c7fb04153829d96a1c038f0df714da595404
Certificate serial: 01969002B75C43FC18C1ACB2D90635DAF470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
Manifest number: 13B4
Signing time: Fri 02 May 2025 08:00:19 +0000
Manifest this update: Fri 02 May 2025 08:00:19 +0000
Manifest next update: Sat 03 May 2025 08:00:19 +0000
Files and hashes: 1: QSHH-wQVOCnZahwDjw33FNpZVAQ.crl (hash: z4zBvv7Adb0LpaAyIhj2xp8z5ffxFgzYCysooj3m9QQ=)
2: mjDoFz4eHyi_j3f9O8pUYP3JsY0.roa (hash: 2+YlsZR42nnbb9KjpTYXIUqIvFdsI2xFIsW6avZLprs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:02:b7:5c:43:fc:18:c1:ac:b2:d9:06:35:da:f4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4121c7fb04153829d96a1c038f0df714da595404
Validity
Not Before: May 2 08:00:19 2025 GMT
Not After : May 3 08:00:19 2025 GMT
Subject: CN=f396213f92b3b2b75142ec941275b760c49fa198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:56:3f:5f:be:06:6b:36:e7:32:05:09:ab:5d:
0b:0e:c1:53:5b:86:7d:88:27:35:e8:bd:fd:71:73:
80:41:99:9c:b8:54:08:b4:f9:c0:7b:2a:db:96:33:
65:88:b2:f3:1c:fa:7e:72:e3:3f:5f:65:55:d9:5d:
95:7e:e8:c2:7b:be:07:01:cf:e0:56:1d:17:57:e7:
8c:51:0e:f9:5a:48:46:a8:a3:ed:97:de:22:09:cc:
70:a4:36:1b:dd:26:97:9b:9f:f4:2c:dc:b0:66:09:
3e:44:7a:54:e8:9b:ae:fb:e2:be:aa:3b:52:00:b9:
65:4e:6e:67:52:50:56:97:a8:a0:ff:b8:e4:ae:1d:
00:93:06:4d:f1:bf:31:ae:5e:a8:11:6c:5d:69:a8:
a0:53:22:b0:6b:f6:ef:e3:e2:ea:64:92:8f:e7:e0:
b4:21:bf:30:ad:18:8d:4c:09:0d:54:37:0f:a4:5f:
44:b8:ab:bc:6d:a7:0b:50:27:36:5e:5a:e5:fc:81:
71:1d:c9:ce:90:64:2a:3f:77:7d:41:52:36:73:fe:
6d:c3:a8:28:42:ca:2b:05:3e:20:aa:9c:b4:c2:c7:
34:04:30:6f:24:61:30:1b:75:58:91:95:98:2c:29:
60:44:62:b3:4f:35:44:f4:d6:b0:bc:4a:11:27:7e:
6e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:96:21:3F:92:B3:B2:B7:51:42:EC:94:12:75:B7:60:C4:9F:A1:98
X509v3 Authority Key Identifier:
keyid:41:21:C7:FB:04:15:38:29:D9:6A:1C:03:8F:0D:F7:14:DA:59:54:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:8f:42:ed:ce:c7:f7:bc:fd:f1:ca:ec:16:0c:72:d4:6c:77:
2c:28:8f:ce:94:6a:a3:ad:c0:cc:34:72:29:2c:f3:4b:9e:18:
d6:36:66:7a:13:59:11:13:ff:4a:20:33:e0:f5:84:43:00:ed:
04:ea:78:14:4a:e7:71:61:5e:55:76:74:8c:cc:c9:31:04:28:
be:45:62:1c:fc:da:a6:72:c8:a5:85:aa:07:e6:e4:5b:24:45:
2d:29:3c:96:25:08:b4:87:ef:40:36:13:03:a1:27:77:7e:b5:
b6:90:c4:15:d2:e4:86:92:6a:75:00:31:2b:ab:00:38:6e:ac:
83:c7:2b:30:bf:f4:03:5f:9f:b9:b9:b9:57:e2:bf:16:d9:ea:
b1:19:27:c8:6b:14:80:7c:f2:dc:d5:b1:59:a1:a5:c0:9d:84:
61:fe:2e:95:73:d1:b1:65:96:61:7a:36:6a:8c:dd:c9:3e:84:
33:d6:4a:f7:79:95:d0:ef:f9:bf:65:06:50:7e:dd:8d:f3:f9:
05:f9:76:4d:c0:37:5e:ee:3b:76:f7:a3:b0:21:af:c1:30:7e:
49:e8:d3:be:30:f4:1f:e3:26:10:a7:72:fc:55:74:ad:2a:6a:
c5:8c:c1:19:6b:5e:4a:ac:07:d0:43:66:6e:53:1a:13:8d:c9:
ba:2a:5a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:29:53 2025 by rpki-client