Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
File: QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft (raw, json)
Hash identifier: OHzlGi8V7zd/wMoN6nFV3KovyG+6YOI1hCods1AFRvE=
Subject key identifier: FD:B7:A3:66:67:AB:17:A5:3A:81:8A:61:BE:8C:97:BF:8F:CE:12:27
Authority key identifier: 42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
Certificate issuer: /CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Certificate serial: 019682B4D6D3E6F9172B41E94007B357498B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
Manifest number: 12AA
Signing time: Tue 29 Apr 2025 18:00:11 +0000
Manifest this update: Tue 29 Apr 2025 18:00:11 +0000
Manifest next update: Wed 30 Apr 2025 18:00:11 +0000
Files and hashes: 1: PHhq7bUnGcZX4y_ykkmnYZLunMM.roa (hash: LoLkLVHGuU31zRjTVmAdVTtSVPzxLCqr19G9NEBPRqg=)
2: QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl (hash: nTnnTnMQBipL0sLUOTeDoxUVPqftRD/LbmT5Wdgz07Y=)
3: ZHuGa1b5EE3BXDt8zUZ6H71dsTI.roa (hash: c5Q65E0/2d2vtEwjuw2BN9yFwucni9qkVj/W8ITRCHA=)
4: mbmOrU1gpeptZI3HpUCwe4-8PxQ.roa (hash: U1SXSUwkwzX7zwHV3CIwtefKowszejuGaOw7kehwc7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b4:d6:d3:e6:f9:17:2b:41:e9:40:07:b3:57:49:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Validity
Not Before: Apr 29 18:00:11 2025 GMT
Not After : Apr 30 18:00:11 2025 GMT
Subject: CN=fdb7a36667ab17a53a818a61be8c97bf8fce1227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:51:db:ec:01:65:65:57:9c:73:62:fb:84:61:
b2:a3:55:ad:6a:7a:49:e7:4f:f9:c3:87:e7:25:e4:
3c:c8:5f:fd:ee:fd:21:bd:38:0f:c8:72:9a:88:71:
0a:67:d8:23:68:b3:cf:63:d3:53:b7:fc:e9:d1:60:
8c:4d:07:58:1f:99:99:fc:c5:8e:16:65:1e:3c:de:
1e:49:de:3e:b5:a5:6a:e5:5b:b9:d2:db:75:32:6b:
97:f8:30:5e:79:18:b5:90:c0:91:9f:26:c2:68:ab:
c4:7b:87:6a:00:93:eb:f0:32:6d:71:99:ea:1d:d7:
cd:f7:1d:24:a2:b9:84:cc:f9:88:41:bd:c3:82:48:
cf:77:2b:c8:a0:f1:7e:d9:58:1c:f3:fc:dd:c1:fd:
ed:b4:f9:d3:83:a5:03:22:41:50:1d:c3:88:44:75:
ad:1e:b7:49:64:8b:46:35:b8:56:bc:ef:d8:c1:49:
06:47:e8:fd:8b:96:24:6f:7b:9e:43:31:27:3f:44:
76:bf:c5:f1:b5:0b:4c:f1:60:6d:00:84:a8:98:38:
d9:08:67:1b:d1:96:e9:f4:59:fa:b2:06:d9:35:98:
89:10:95:2f:1d:62:07:52:ab:d7:87:9f:47:7b:2b:
3e:de:e7:d5:2a:a2:75:a4:79:75:14:2a:70:c3:2a:
12:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B7:A3:66:67:AB:17:A5:3A:81:8A:61:BE:8C:97:BF:8F:CE:12:27
X509v3 Authority Key Identifier:
keyid:42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:4a:87:8d:01:89:36:a1:b4:ee:4c:72:23:92:bd:0b:7c:07:
00:1a:88:98:bf:ee:3c:2a:7f:21:63:76:2e:9f:24:cf:c6:18:
d9:23:45:43:44:52:cf:97:31:8a:15:9a:2b:5c:74:7e:be:b6:
0f:e4:a4:0b:a2:cb:f8:12:5d:ab:57:1b:81:7e:06:a1:0d:25:
0a:de:d3:ad:3d:7a:8d:31:e1:a4:cf:5b:c5:52:d0:a4:67:1a:
38:82:f4:fd:91:ad:2a:f3:75:f2:1f:4d:b7:3c:91:56:1f:73:
fa:be:e1:e2:62:8b:9a:c5:0e:80:3d:b8:2c:6e:dd:e1:27:04:
1d:24:86:f8:21:57:0a:af:d6:e5:0e:0f:0d:87:d0:23:3b:12:
26:11:e7:c8:b2:3c:c4:2d:c6:d5:8c:a2:9e:48:aa:90:0d:e1:
88:a3:d5:82:85:49:a2:6c:ee:55:65:0a:56:ea:78:59:82:9e:
d7:77:dc:fe:7a:24:ca:5c:14:ad:86:eb:49:fe:c2:93:46:c8:
39:9d:5e:a9:2f:04:e9:0e:f3:95:7f:cf:e3:f5:d8:3b:15:83:
42:9b:64:4d:33:fb:83:36:a9:d1:8a:40:6c:0d:fc:a5:b9:56:
58:22:bb:43:dd:35:74:57:a3:d7:d3:e7:0b:1e:1a:45:85:2a:
7c:91:9d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:14:53 2025 by rpki-client