Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
File: QA3igTHHO19TIPUdrmwb1Hq4L5I.mft (raw, json)
Hash identifier: xjZmXlKod0W+E0FX2CEY92PFyEiDTaHTpCFGyPd3xqw=
Subject key identifier: 3F:56:4C:4D:8B:46:22:A0:77:1A:87:1A:33:7F:C1:83:9E:4C:AB:C8
Authority key identifier: 40:0D:E2:81:31:C7:3B:5F:53:20:F5:1D:AE:6C:1B:D4:7A:B8:2F:92
Certificate issuer: /CN=400de28131c73b5f5320f51dae6c1bd47ab82f92
Certificate serial: 01967ED8D8B21ABFC92B39BE493CB8E375CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
Manifest number: 0219
Signing time: Tue 29 Apr 2025 00:01:02 +0000
Manifest this update: Tue 29 Apr 2025 00:01:02 +0000
Manifest next update: Wed 30 Apr 2025 00:01:02 +0000
Files and hashes: 1: QA3igTHHO19TIPUdrmwb1Hq4L5I.crl (hash: 4R8raEWLa1ZhfwQjUdp7wawp9Iuc37zo3fYxl5K6Q54=)
2: YPXVOgtlv47MULpqvQ2eiJqw0s0.roa (hash: 1U3YQJEvDPze+SY3FCaghiXBlRWFSFhPdqgWDRzyuw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:d8:b2:1a:bf:c9:2b:39:be:49:3c:b8:e3:75:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400de28131c73b5f5320f51dae6c1bd47ab82f92
Validity
Not Before: Apr 29 00:01:02 2025 GMT
Not After : Apr 30 00:01:02 2025 GMT
Subject: CN=3f564c4d8b4622a0771a871a337fc1839e4cabc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:64:d8:f1:37:38:b6:87:d0:db:cc:c4:0e:52:
44:ff:51:cf:ff:b2:7f:fe:c1:d8:13:b5:01:d1:d5:
68:81:0a:8f:4f:1c:eb:eb:1f:ff:7e:02:e4:14:46:
c8:e1:d4:37:8f:05:3c:fb:b0:b7:f7:7a:28:87:40:
08:d1:61:08:6c:bc:95:25:28:55:23:7e:ac:f9:38:
66:34:b9:e0:1a:94:d3:66:ad:aa:ac:c9:58:76:e9:
37:0a:b2:f2:26:78:16:f0:15:4d:60:7d:7d:e3:b0:
df:a5:07:42:ef:b5:18:1b:ef:0a:a4:ab:09:ff:d6:
83:a2:4d:2e:bd:ff:2a:ac:c5:26:76:cc:61:00:d8:
b6:5c:9a:3b:4a:5e:b3:e4:0b:fb:57:85:13:09:94:
ea:23:90:ef:16:b3:62:52:71:ae:01:ff:a3:c1:a0:
1c:10:25:14:ca:a8:7e:2b:21:37:58:50:da:65:54:
b9:bf:82:f8:2f:ce:47:f6:7d:36:5c:a2:81:12:4f:
cc:0e:48:fb:40:bb:d7:5e:81:3e:b8:b7:72:da:d6:
28:26:c4:b7:eb:36:c5:c8:4e:ee:be:95:04:b8:75:
a0:d4:cc:37:74:2f:fe:65:9e:c9:97:69:45:6f:b2:
35:73:6f:98:9a:27:f4:4b:f1:8d:98:c0:80:a0:3b:
56:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:56:4C:4D:8B:46:22:A0:77:1A:87:1A:33:7F:C1:83:9E:4C:AB:C8
X509v3 Authority Key Identifier:
keyid:40:0D:E2:81:31:C7:3B:5F:53:20:F5:1D:AE:6C:1B:D4:7A:B8:2F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:0b:0d:24:7a:87:be:0c:4e:fe:fc:a9:72:2d:e0:49:f3:5c:
0c:73:38:a0:86:58:4e:13:4c:ad:cf:8e:bf:d3:c5:8b:1b:57:
b5:88:42:50:58:15:39:8b:29:72:f1:49:9b:6e:41:e7:7f:1a:
a4:11:1f:cd:3c:c1:87:c7:aa:41:a0:07:1b:8c:f2:f6:dc:65:
3b:04:f8:ac:3c:2f:5a:cc:59:fb:cc:a2:4e:f9:fd:7b:d5:03:
e4:b6:e1:fc:47:4e:0a:1c:2f:b3:91:19:ba:ab:8f:c1:e7:dd:
12:6e:f3:23:fc:91:0f:87:f5:24:27:62:97:e6:88:ef:e6:c5:
a1:65:4f:15:7e:11:79:13:53:6c:7f:29:a8:fd:e7:c4:b6:0e:
94:ed:ac:7e:72:ec:89:b2:11:cc:26:bd:af:68:23:5a:bb:3e:
2d:b3:bb:00:cc:80:7a:ea:f1:bd:1f:26:ed:95:6b:c4:7d:f0:
d7:13:a5:18:22:ba:43:b4:ee:40:e8:7d:27:2a:6d:77:b9:85:
12:77:90:af:ed:e7:fa:0b:91:84:bc:6e:e0:43:bc:08:8e:b2:
21:69:e8:f1:01:2b:6a:8f:26:28:20:2c:fc:c3:6d:67:37:5e:
66:48:2c:b1:cc:c1:3c:d6:99:c1:94:56:d4:2f:73:30:54:d6:
63:9d:4e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:51:14 2025 by rpki-client