Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
File: QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft (raw, json)
Hash identifier: 3X1zlgjOLOXDQysbm3RLlJXYxMu1NOdm7EtUPcM09Gg=
Subject key identifier: A9:F1:7E:18:7F:47:5B:6B:43:7F:9E:E3:13:5E:71:8E:8A:2C:6F:02
Authority key identifier: 41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88
Certificate issuer: /CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88
Certificate serial: 01967755D5FA35AD5579A0FAF199AD1BA74A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
Manifest number: 035B
Signing time: Sun 27 Apr 2025 13:00:36 +0000
Manifest this update: Sun 27 Apr 2025 13:00:36 +0000
Manifest next update: Mon 28 Apr 2025 13:00:36 +0000
Files and hashes: 1: CuZieAFfwXX8uyaqskcHIzJ9fWo.roa (hash: pBXWN5uV+yQFyDFWsCRJrE7yKliZlwC2u5aCXtkg+Do=)
2: QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl (hash: FUrK4DZ4R8W3153IlmCD/aqMGfFRXuxePNZcF/xN+lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:d5:fa:35:ad:55:79:a0:fa:f1:99:ad:1b:a7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88
Validity
Not Before: Apr 27 13:00:36 2025 GMT
Not After : Apr 28 13:00:36 2025 GMT
Subject: CN=a9f17e187f475b6b437f9ee3135e718e8a2c6f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:86:13:83:3d:77:5a:a5:df:c7:90:5c:e0:33:
51:cc:df:0d:d1:67:95:fc:85:8e:6f:34:c9:be:8f:
15:4c:b9:d7:06:5a:b4:ff:2b:22:8d:aa:cf:44:c5:
4d:ab:8a:01:83:af:15:63:b2:8f:4b:2c:89:ac:be:
6f:ad:87:8d:85:85:53:6e:d3:ef:4a:f0:3f:aa:d5:
51:82:4b:d0:fe:3f:ec:0e:70:e3:07:bb:12:73:61:
62:60:42:07:69:df:91:98:02:3b:e7:38:7d:41:83:
3a:3b:db:c9:f4:62:b0:bc:a8:2f:a8:db:92:54:a3:
e8:1d:56:22:f8:b3:fa:b9:4d:11:d9:b5:e1:e7:5c:
7c:a0:7a:86:8e:8e:11:f9:15:0f:9e:e3:dd:5e:12:
f4:9e:e9:f8:ba:97:3e:4a:b0:ec:88:5b:e6:50:17:
4a:4b:7a:d7:8f:47:d0:e0:33:9f:44:27:bd:dd:52:
56:29:f7:2b:cd:8c:0e:24:bc:7e:f8:67:d6:59:62:
f1:36:5b:8b:a9:7d:39:df:98:d8:f8:fe:20:f2:67:
1b:91:2c:19:db:cc:2d:c9:62:75:af:f6:84:d7:b7:
6c:8c:5f:02:49:1b:35:56:da:d2:75:ee:17:96:3c:
c7:e2:f4:1e:78:f5:2b:d5:54:5d:fd:9a:6f:27:82:
95:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F1:7E:18:7F:47:5B:6B:43:7F:9E:E3:13:5E:71:8E:8A:2C:6F:02
X509v3 Authority Key Identifier:
keyid:41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:09:ad:55:ff:4c:2f:6e:ac:36:aa:b1:15:88:28:a4:f8:ca:
91:67:b5:9e:0a:9e:67:ee:08:9a:78:f8:5c:70:18:c4:d3:9a:
b7:47:90:d0:9a:3e:72:2e:63:8a:99:74:9e:fd:66:67:ca:6a:
24:0f:dc:66:4f:ed:57:fd:a5:f8:65:60:43:74:51:5f:5c:51:
19:73:fd:8d:e9:cc:2d:fb:6e:83:e2:c2:ba:60:28:95:18:1e:
6d:ff:7f:23:a4:8f:54:fe:a8:c9:49:ea:32:a4:64:b3:3f:6f:
35:07:73:ac:2d:c1:61:b0:db:4d:78:14:fa:8a:3b:25:a7:e3:
63:7c:ca:1f:00:54:c3:64:50:62:ff:5c:28:54:37:31:26:d8:
26:ec:58:a4:8e:9b:4b:a5:0f:17:e5:1d:20:7a:ca:ed:d2:cc:
19:3f:d5:ed:55:42:99:3c:42:20:41:d8:6c:06:19:94:d2:1a:
cb:fc:59:8d:5f:b2:84:dd:7c:7b:28:cc:8b:bc:1a:d0:52:e8:
9b:f4:28:b9:76:9c:2a:d7:04:a3:66:85:95:c3:6d:a4:36:8c:
73:44:d4:6d:94:5e:e5:e6:c7:16:11:a4:1a:35:f3:7e:46:18:
1f:28:e0:33:23:e2:21:52:3e:d0:2f:21:8f:30:ac:50:13:31:
cb:24:40:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:19:27 2025 by rpki-client