Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
File: QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft (raw, json)
Hash identifier: HpO3l8AUJJdgTU5wQDVNvWSDoALksAaWgeDQ4aGGMbE=
Subject key identifier: 29:2C:73:5A:E2:CE:AC:44:27:36:B8:32:15:35:80:F5:CA:FB:58:86
Authority key identifier: 40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
Certificate issuer: /CN=40254d4a767ad099606e442e092f91241a363670
Certificate serial: 01967D2109EBB29EAE1BD262629A021FEAF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
Manifest number: 12E5
Signing time: Mon 28 Apr 2025 16:00:39 +0000
Manifest this update: Mon 28 Apr 2025 16:00:39 +0000
Manifest next update: Tue 29 Apr 2025 16:00:39 +0000
Files and hashes: 1: FdgrAlXHTUPAeTheMsde8YkawNs.roa (hash: rje6Lwajr0YyCxZcxBMKIrTaIp18lo7SaPvG3dwiyVA=)
2: QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl (hash: R0YRt4bdDGnSlhpmGsu6dmKQiQl2VHNgW5H+OjhZfgs=)
3: s_2L4K_sJnZRupOisUUmx-pSGhc.roa (hash: WrT7tu8a18enFrkb7Ns9dzR3YzLJ2dPG++PSa/YdVYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:21:09:eb:b2:9e:ae:1b:d2:62:62:9a:02:1f:ea:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40254d4a767ad099606e442e092f91241a363670
Validity
Not Before: Apr 28 16:00:39 2025 GMT
Not After : Apr 29 16:00:39 2025 GMT
Subject: CN=292c735ae2ceac442736b832153580f5cafb5886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a2:1f:67:2b:b0:7e:13:d7:e4:48:e5:d4:22:
15:b8:e9:b9:5c:43:35:ee:49:f6:de:97:01:1d:3c:
09:8c:3b:3a:28:78:af:cf:3e:b4:9c:41:d7:ba:7b:
ce:dc:f1:f6:75:1c:9f:de:21:7e:a5:46:ba:4b:e9:
4c:56:4b:83:28:7c:b4:20:b7:ce:d5:6a:64:1b:10:
79:9a:54:a9:68:d5:f0:65:ba:2c:54:23:bc:ea:5f:
48:61:f9:f5:c3:55:6e:44:c7:8b:0a:ae:b5:02:f7:
e1:75:12:a1:2b:7f:37:7a:3e:70:d4:d0:01:c3:c3:
ef:65:32:3b:e4:59:fb:72:f9:fe:be:d5:52:2b:42:
71:3b:6f:8d:d4:59:fa:4b:7b:63:f4:4f:fc:96:b4:
af:26:43:e8:12:a0:dc:fd:4d:74:7b:5a:2e:c7:34:
7b:52:bd:a8:b8:08:57:ea:76:2e:c0:61:40:7d:1b:
bb:85:39:9c:e2:84:2a:d8:d0:77:59:c2:b5:4e:10:
e8:a4:7f:3f:c0:ba:ad:3d:e6:bd:a0:e5:52:21:63:
41:a3:2a:72:2f:2f:3c:f1:e1:86:6c:0a:de:33:ee:
1e:fd:3f:f8:2a:a4:32:9f:da:dd:ef:3d:cd:49:51:
e8:28:b4:11:e3:89:57:09:12:23:9c:5c:1e:04:5c:
3f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2C:73:5A:E2:CE:AC:44:27:36:B8:32:15:35:80:F5:CA:FB:58:86
X509v3 Authority Key Identifier:
keyid:40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d3:b7:b8:28:3f:ca:9b:62:52:97:39:54:13:f7:1a:48:0a:
2c:d0:9c:53:de:bd:25:97:79:e6:99:e0:69:30:a1:7f:5a:3c:
ee:4e:d9:5a:17:a9:4d:b5:b1:bc:7f:14:2d:83:cc:89:64:40:
51:ee:8e:97:39:ed:a2:26:4d:f8:33:55:8a:c3:99:fb:5a:be:
35:b6:56:d5:16:2e:7e:79:51:3b:49:6f:28:4d:00:27:6a:44:
7d:04:31:65:25:66:e2:20:cc:91:6c:e8:87:fd:5a:cb:72:9c:
0e:3f:5a:64:74:2f:93:8d:35:97:5d:30:9f:46:ec:5c:a1:8d:
97:25:73:4a:70:17:26:7f:51:17:57:ca:45:20:45:1a:95:29:
d2:04:1d:a6:b6:8f:07:38:a4:d4:c4:14:58:96:4a:68:26:07:
a5:46:8a:fc:b5:ff:b7:10:1d:7d:50:37:bd:a5:e4:7c:00:69:
5b:4c:f9:a3:53:57:3d:0e:f3:42:06:b0:ff:08:95:81:fd:29:
ff:a8:af:ac:c0:6b:83:a3:da:ab:fa:da:af:17:67:3c:7e:33:
7a:c2:ce:12:12:2a:a4:5a:bb:ac:83:b8:b5:77:84:1f:55:b2:
df:5b:88:c9:1d:88:ce:11:77:fd:b3:15:1f:34:16:ca:c6:00:
eb:6d:5c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:49:20 2025 by rpki-client