Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
File: QXQcBdStftaQ5XHvXtD4dSLaR9c.mft (raw, json)
Hash identifier: gq+FAZiV/kTnDenQj8O1NEp4nUxvj1PZRAg74rSSCEo=
Subject key identifier: 01:14:46:B1:79:74:E2:4A:3B:C7:8C:FF:F1:45:CA:06:42:1F:0B:83
Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Certificate serial: 0196760CFF9BDA4FD089ECDD89EA581C8803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
Manifest number: 10B8
Signing time: Sun 27 Apr 2025 07:01:25 +0000
Manifest this update: Sun 27 Apr 2025 07:01:25 +0000
Manifest next update: Mon 28 Apr 2025 07:01:25 +0000
Files and hashes: 1: OGdT4POvRKruGu3WkbDGyulN7-E.roa (hash: b9NvSjn/aHaqKwweHNflC1898I0DAuoT3bsiarDB3TM=)
2: QXQcBdStftaQ5XHvXtD4dSLaR9c.crl (hash: ab1gd9QdGv1/GiX9vIaWDkTHKUkS9tDaCCzMLMGrERA=)
3: jAQvRieRHpKKkjGe64CNxUPvYbk.roa (hash: PMyEFynYeCxi/eWEtMPHh64XLB427usSjnQuhMiP8MA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:ff:9b:da:4f:d0:89:ec:dd:89:ea:58:1c:88:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Validity
Not Before: Apr 27 07:01:25 2025 GMT
Not After : Apr 28 07:01:25 2025 GMT
Subject: CN=011446b17974e24a3bc78cfff145ca06421f0b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9a:6f:e3:3e:fb:88:c2:c6:c4:29:73:91:94:
75:f6:3a:78:b4:04:ce:ac:02:db:1e:25:df:98:2e:
3a:5b:7f:3d:79:c5:65:89:dc:79:0a:4d:a3:4c:3a:
11:b4:6f:04:fd:2b:d8:d3:fc:15:47:f7:66:6e:d7:
9f:d9:92:61:d9:85:02:e6:4a:c9:3d:8a:e3:fe:41:
d3:b9:6a:73:8b:60:a8:17:6b:1e:9a:c4:59:ec:39:
31:3e:cd:9c:3a:54:15:03:30:32:07:3c:3a:17:65:
ee:c3:cc:1a:9b:5f:76:d2:cf:1f:90:c6:58:b5:d2:
0e:e2:4d:a5:0e:91:50:af:04:90:87:fb:cf:74:c7:
c0:f3:c9:3c:34:1e:8b:83:50:aa:6b:d7:a5:26:41:
3e:16:46:9f:b1:58:e2:fc:00:d2:d2:52:38:74:d5:
67:a5:4a:cd:a2:3e:0e:0c:d8:bc:53:03:f3:db:25:
93:b6:d0:2d:39:b8:13:75:0a:c7:80:1f:3e:ad:0e:
cd:15:34:14:0f:79:f2:dc:09:0d:2c:ec:79:8d:4e:
a2:26:03:b1:85:85:96:ec:72:21:72:c0:4f:7a:61:
b4:77:a0:c1:3d:78:f8:82:13:66:d1:e7:e4:05:57:
a8:ff:37:b4:04:0b:7d:d2:9a:4f:9d:54:d7:fe:95:
2f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:14:46:B1:79:74:E2:4A:3B:C7:8C:FF:F1:45:CA:06:42:1F:0B:83
X509v3 Authority Key Identifier:
keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:53:1b:4c:ab:8b:53:c5:c7:71:00:de:63:d3:99:82:26:7b:
dc:b4:e2:3a:7c:ae:e7:84:8e:5e:1a:a1:53:07:16:03:ac:6f:
fb:53:17:29:c2:d5:b4:52:aa:42:26:d7:a2:53:75:1c:bc:e7:
55:cd:d4:88:44:f7:93:35:26:01:d6:f1:74:f1:16:86:d9:bf:
75:f1:1e:f2:d4:53:51:cb:3d:6d:3c:a4:40:a5:3b:8f:21:7b:
24:9c:b3:c3:c7:4e:3a:16:2d:0b:6e:66:82:b6:1a:0a:eb:e8:
63:a7:ae:38:de:16:cb:67:0d:41:18:71:55:29:59:7d:a1:3e:
5e:aa:f6:a4:f7:73:6c:9d:13:c2:8f:ac:7d:36:ff:3a:bc:32:
2b:ee:b7:71:3d:54:81:fd:ca:9a:0f:f3:68:14:a3:4d:12:aa:
ad:cb:77:17:31:6d:d0:ca:50:46:22:6d:59:e2:a2:5a:85:b4:
03:7f:dd:b7:14:96:32:47:18:f5:83:80:84:d1:52:9b:27:1f:
09:61:b2:31:6f:d6:d8:34:af:5b:c0:96:44:59:e9:92:15:ed:
b6:e5:d0:09:c5:73:22:6f:e0:47:c2:d6:9a:ae:23:e2:7c:74:
cb:58:8a:26:43:83:76:0f:cd:7c:aa:05:ce:e2:61:b0:2b:81:
d8:74:e7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:33:04 2025 by rpki-client