Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
File: QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft (raw, json)
Hash identifier: t6YnzgS5RhEA+6Uzi0AR4un8iLvarx1WpRx+CK3jcJo=
Subject key identifier: DD:23:83:F8:89:B7:B5:6D:38:3D:72:AE:E1:96:F7:A4:34:E0:77:F7
Authority key identifier: 41:3F:FA:10:6A:E3:FE:E6:BE:87:BA:C0:6A:87:BA:57:ED:1C:11:40
Certificate issuer: /CN=413ffa106ae3fee6be87bac06a87ba57ed1c1140
Certificate serial: 0196A91DB2DB671B3E3755E32043DBF9E526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
Manifest number: 1528
Signing time: Wed 07 May 2025 05:00:17 +0000
Manifest this update: Wed 07 May 2025 05:00:17 +0000
Manifest next update: Thu 08 May 2025 05:00:17 +0000
Files and hashes: 1: 0qda3zP6aWS1QmMsfKtgTS_B8vw.roa (hash: NDD2ZMdGd4Vw1apZklWLmjHBzI7LGvrNZrE04O9xutU=)
2: QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl (hash: uMBredicHzxJq199cBknbAUWO61LdDUxmaz4wjSg2D8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:1d:b2:db:67:1b:3e:37:55:e3:20:43:db:f9:e5:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=413ffa106ae3fee6be87bac06a87ba57ed1c1140
Validity
Not Before: May 7 05:00:17 2025 GMT
Not After : May 8 05:00:17 2025 GMT
Subject: CN=dd2383f889b7b56d383d72aee196f7a434e077f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:25:27:76:3b:36:eb:41:bf:94:b7:a1:c2:5c:
c2:e3:4f:04:14:c2:dc:95:22:e3:be:30:04:41:ab:
af:bf:cf:3f:85:0e:3e:8e:d0:d2:25:63:d7:2b:c7:
99:2c:78:08:fe:49:9c:80:2c:83:ae:31:7f:7d:63:
20:39:9e:03:17:33:32:bd:ec:65:8f:43:7e:3e:e2:
b2:8c:b7:67:4a:67:64:17:c7:64:a3:56:5c:61:66:
47:db:b9:cb:6b:41:0c:b2:33:2d:d8:ee:e2:b4:f2:
18:76:6f:6c:f6:6e:5b:10:5f:2c:d0:c2:d8:4c:68:
55:dc:33:f7:94:a6:6b:20:40:b3:13:f7:b3:98:ab:
8c:fe:3d:24:39:8b:b3:f1:15:2d:6f:fe:4a:0d:a1:
47:92:ff:70:3b:bb:e0:eb:27:1d:86:2a:d6:ec:8e:
21:01:3c:11:4f:df:5d:ea:ab:53:1a:0d:f1:93:13:
9f:1e:ee:0c:57:b5:e0:04:f8:22:fc:3e:8a:c9:33:
48:33:d6:dc:98:c0:79:e0:32:4a:98:29:77:53:30:
6a:26:e5:30:85:a9:ba:43:fa:6f:3e:05:7a:8d:0c:
30:42:02:11:a2:75:82:3f:82:72:5d:94:63:fd:2d:
25:a4:b2:4f:a8:87:e4:67:2c:b6:88:3e:e9:bb:75:
30:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:23:83:F8:89:B7:B5:6D:38:3D:72:AE:E1:96:F7:A4:34:E0:77:F7
X509v3 Authority Key Identifier:
keyid:41:3F:FA:10:6A:E3:FE:E6:BE:87:BA:C0:6A:87:BA:57:ED:1C:11:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:f9:46:c2:fa:06:46:d6:54:03:83:34:08:1f:cf:82:c6:b8:
63:03:d0:d9:69:5d:8c:3a:cb:93:a9:ad:30:80:0e:7a:22:02:
0c:17:fa:98:13:b1:00:dd:b5:dd:ee:c0:03:04:ad:69:75:29:
0d:88:5d:dd:e7:99:c5:2c:73:92:e8:bc:ec:46:f7:f1:f9:68:
cc:cd:d2:fe:74:2c:19:86:32:04:a6:15:18:83:f4:49:3e:2c:
f1:a9:3c:f7:18:14:ab:76:9a:a1:b3:ca:04:19:dc:e3:36:25:
be:c7:7a:2e:b4:ed:b8:38:41:9e:32:3f:e6:34:86:d0:af:78:
9a:35:d6:45:2b:32:61:e6:c2:d9:e6:a9:2e:c9:77:3e:d2:9a:
8b:ee:8a:d7:2c:38:86:90:91:2a:a0:66:ee:97:b6:61:18:71:
37:79:11:9b:c4:36:51:32:04:97:0f:8e:b6:b2:c1:dd:0a:81:
4c:00:1b:9f:be:75:3f:8e:61:a2:73:1d:5f:a3:cc:ab:a0:c7:
ef:a1:ce:c5:d7:58:ce:d9:47:8a:44:7b:90:70:4e:2a:19:e8:
c2:e3:be:09:5f:08:4c:8e:32:8d:f2:05:e7:9d:10:4a:92:28:
fa:6d:a8:8b:38:bd:78:73:a6:41:76:22:80:68:b2:1c:d4:93:
19:69:96:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 11:46:51 2025 by rpki-client