Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.mft
File: QY1UtVsZKiSLhHI026US-XYMq_o.mft (raw, json)
Hash identifier: o4mPUs+3hhylRYaQOLqPptjo7wTMTRA+qpNlEBhwvUk=
Subject key identifier: 04:10:67:05:8C:07:EA:21:F3:2A:47:8B:D0:C1:A1:4E:09:58:4D:79
Authority key identifier: 41:8D:54:B5:5B:19:2A:24:8B:84:72:34:DB:A5:12:F9:76:0C:AB:FA
Certificate issuer: /CN=418d54b55b192a248b847234dba512f9760cabfa
Certificate serial: 01968EB97AD979E8F521027006CE2048B440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QY1UtVsZKiSLhHI026US-XYMq_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.mft
Manifest number: 08A0
Signing time: Fri 02 May 2025 02:00:42 +0000
Manifest this update: Fri 02 May 2025 02:00:42 +0000
Manifest next update: Sat 03 May 2025 02:00:42 +0000
Files and hashes: 1: PTvQgS1qnjLwo9s4LdFb_Ohs-14.roa (hash: ISrdGe09G63GrIhvFHUR6KGbQ/gtnJbbuoeTtm56a1E=)
2: QY1UtVsZKiSLhHI026US-XYMq_o.crl (hash: F55VyfhyFhZLAZtlPt770zAalOZMmcJ74VhsxxEK7nA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QY1UtVsZKiSLhHI026US-XYMq_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:b9:7a:d9:79:e8:f5:21:02:70:06:ce:20:48:b4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=418d54b55b192a248b847234dba512f9760cabfa
Validity
Not Before: May 2 02:00:42 2025 GMT
Not After : May 3 02:00:42 2025 GMT
Subject: CN=041067058c07ea21f32a478bd0c1a14e09584d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:30:02:13:7c:b3:cc:17:27:ae:2e:5b:25:3a:
82:bd:af:d1:74:22:c0:d2:60:36:be:19:53:4e:da:
e7:d2:bd:0f:5c:10:0d:fc:f1:4a:fb:c1:71:6d:9f:
ee:e6:20:e9:63:b5:2d:e5:5d:97:ea:d6:5c:9e:d1:
ab:f0:c2:88:48:6b:1e:28:b2:d9:09:b3:ea:06:73:
50:5d:81:b6:a6:36:ec:1e:c3:01:fc:dd:b0:33:39:
77:8a:48:41:13:68:ba:4b:b5:f2:8b:12:63:e1:e4:
c0:01:c8:08:46:47:c3:c2:5f:9c:57:d9:79:51:9d:
a4:3f:5f:41:83:ed:c4:7f:0a:d4:a9:12:f4:ce:4c:
56:58:49:1e:89:73:4a:16:76:c7:f3:dd:17:f8:0c:
70:f9:3a:40:f5:11:e0:6a:23:d3:86:8f:9e:15:0e:
f8:f0:c0:fa:d6:40:5b:33:c0:61:21:ca:e7:d1:7d:
04:56:40:f1:ae:89:f0:6c:dc:e4:56:ef:fd:10:90:
c3:dc:d1:15:da:e0:a1:05:1a:45:5a:f9:dc:e7:f2:
17:9d:22:ec:37:ff:d2:6e:ce:97:32:b7:a9:87:d7:
4f:44:87:69:df:45:fe:c1:97:f8:26:0b:70:c0:2e:
ad:c7:01:83:b9:8d:96:07:b8:8f:42:c2:ed:89:e6:
a2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:10:67:05:8C:07:EA:21:F3:2A:47:8B:D0:C1:A1:4E:09:58:4D:79
X509v3 Authority Key Identifier:
keyid:41:8D:54:B5:5B:19:2A:24:8B:84:72:34:DB:A5:12:F9:76:0C:AB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QY1UtVsZKiSLhHI026US-XYMq_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:12:c6:68:4b:c5:31:9b:d6:33:e1:07:63:e3:1d:fc:c9:54:
39:b7:fc:d4:97:ba:10:2d:88:0a:0d:da:c1:db:1a:c4:a2:ad:
be:ec:f6:36:e7:31:c6:f8:9f:c2:09:75:ab:28:25:69:d7:a5:
f2:8b:fd:37:c2:ac:29:9c:cd:16:a0:f2:ce:eb:fd:b6:7f:e4:
ac:d8:27:d5:5d:07:ef:9e:29:6c:12:64:7d:ec:4d:50:86:6d:
a1:64:90:94:98:c6:af:8c:1a:9e:0c:64:4a:a2:46:c5:79:b2:
88:ed:93:da:ff:96:67:27:07:f2:9c:19:f6:bd:67:33:71:c2:
c5:11:81:e7:e5:38:7e:46:9d:06:d5:68:f8:a5:23:72:2e:7f:
63:e2:49:69:42:48:03:b9:d2:b3:51:f2:d0:bd:cb:9b:35:45:
ba:3e:40:a7:d1:49:37:48:e4:e1:cb:3c:66:c3:24:99:6b:e5:
67:7f:c1:96:16:f3:97:7d:6e:b2:7e:07:46:8f:6e:d8:3f:a3:
99:7f:79:8b:48:b1:a4:5c:85:9e:d8:d6:46:73:fb:56:2c:3c:
f3:c9:63:d6:07:28:11:8c:f2:46:81:b6:37:4d:99:bf:85:63:
b9:68:c0:fb:fb:93:3b:6f:f6:a2:89:67:0d:18:67:0d:96:fb:
e9:f0:53:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:01:44 2025 by rpki-client