Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
File: QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft (raw, json)
Hash identifier: cywQoAsSg6k8iPtliW/MyNAVf7W4gfOL40+G9+Bi+Fk=
Subject key identifier: 0F:40:27:03:BA:52:33:56:E2:C0:D6:FD:AE:0C:A8:42:B2:DA:96:61
Authority key identifier: 41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
Certificate issuer: /CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Certificate serial: 01969AF48843E187C790A1A1A03A65242BBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
Manifest number: 1228
Signing time: Sun 04 May 2025 11:00:38 +0000
Manifest this update: Sun 04 May 2025 11:00:38 +0000
Manifest next update: Mon 05 May 2025 11:00:38 +0000
Files and hashes: 1: CLemqr75Yb48Km-cD1hApiGwC9E.roa (hash: EAtUhRgJzB5CWn94r1qk7eU5voV0S7bWsYXXanEEayY=)
2: QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl (hash: PLbLXAO6XsNLveAjajS2YJx510LMkFjm9j8ipxZeYdY=)
3: yEsMSFNm5dJ-A_JpG2DXLz7wI-Y.roa (hash: 8AHka5aF5G+PfLY03Vs1HshDxFgYYrha9TXGX/Fcp3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:f4:88:43:e1:87:c7:90:a1:a1:a0:3a:65:24:2b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Validity
Not Before: May 4 11:00:38 2025 GMT
Not After : May 5 11:00:38 2025 GMT
Subject: CN=0f402703ba523356e2c0d6fdae0ca842b2da9661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f9:19:40:fb:ac:51:51:79:52:9a:8a:4d:f3:
b0:25:8d:c5:d4:6c:b3:ca:11:d3:c0:9c:83:ef:f1:
4c:91:22:1b:04:77:66:4f:60:d1:24:c5:65:3d:28:
78:54:fd:81:a5:1d:69:65:0e:77:8e:a3:4e:ea:8b:
87:7b:4d:c9:24:d9:1d:04:1f:14:77:81:93:e9:2b:
02:82:57:05:a8:e7:49:2c:11:49:f7:85:11:42:61:
ac:ea:ed:43:c8:83:ae:21:04:80:22:9a:6c:9c:42:
d0:f9:a6:1b:79:67:4b:fd:21:e1:05:c0:67:52:a6:
f1:4e:d5:c7:ba:ce:e7:10:19:31:1a:e5:fd:62:00:
a0:30:7a:f4:2d:e6:cc:a1:af:4a:68:03:63:20:d0:
2a:b7:df:4a:0c:08:07:cb:a8:b3:f0:63:51:d8:84:
41:dd:c6:8f:eb:d7:46:41:9e:b0:9b:f1:ff:d6:8d:
79:c6:a2:7a:c2:50:20:fb:77:eb:5c:e8:50:50:53:
cc:3c:a4:84:49:5a:7c:f4:91:fa:9d:14:19:7d:96:
c0:5c:b2:44:63:0f:76:5f:74:ed:63:55:df:e1:07:
70:23:5b:99:73:e4:0b:e7:b4:3f:64:2d:76:be:5c:
73:9c:ad:63:98:bf:02:01:f1:22:1c:3c:83:cb:15:
9e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:40:27:03:BA:52:33:56:E2:C0:D6:FD:AE:0C:A8:42:B2:DA:96:61
X509v3 Authority Key Identifier:
keyid:41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:63:f9:c8:54:30:76:5d:e1:e1:0a:de:b9:5a:61:b7:3e:c6:
5d:de:d0:b8:47:d8:0f:12:25:8d:58:ce:e8:03:83:df:15:1e:
68:5b:eb:0e:2e:85:e8:9f:85:e8:71:d2:25:57:e9:7d:12:a6:
2d:8a:f7:c6:25:10:34:de:e2:8f:61:23:94:8f:11:62:57:30:
90:2b:b1:8d:50:1e:f1:cf:10:82:df:be:0c:ea:62:fe:6b:d7:
af:fb:6d:26:25:a0:1b:17:94:fa:0c:04:df:88:cc:a3:10:b9:
ff:18:bb:b9:88:f9:94:0e:0b:b4:8a:76:22:0c:32:6f:ae:20:
5e:a5:f3:a5:42:90:2f:51:67:5d:d7:dc:1e:f7:b4:fd:84:2d:
a7:be:25:c4:fe:fa:64:71:db:07:e3:12:2f:14:a5:02:47:cf:
d0:d3:94:1c:d3:04:05:aa:16:02:14:42:85:b3:8a:18:d2:76:
12:36:1f:f3:7a:d8:33:71:82:d1:da:60:a4:6e:d4:35:b7:9f:
81:41:f2:88:8b:aa:13:e4:ce:0a:ba:3d:3f:2c:a2:f7:e9:93:
13:be:ad:ef:18:01:24:88:39:46:bb:9f:00:28:43:f6:85:74:
1e:88:78:5c:d6:4e:bd:92:ce:50:ce:3b:0b:c5:67:42:ff:a4:
89:ee:3d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 12:40:21 2025 by rpki-client