Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
File: QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft (raw, json)
Hash identifier: NJSyWwlh6bZ1K4XO3azQ28tydkBNq4W6c3OCwifwih0=
Subject key identifier: D3:B3:82:AF:02:ED:8A:DA:EA:D9:18:55:22:A8:2E:7E:95:0D:45:89
Authority key identifier: 40:C3:D3:7B:E4:35:A9:C3:3F:1C:63:E5:0D:0D:64:64:ED:16:10:04
Certificate issuer: /CN=40c3d37be435a9c33f1c63e50d0d6464ed161004
Certificate serial: 019678315CBD4386FFEF8F1304422213BB7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
Manifest number: 146B
Signing time: Sun 27 Apr 2025 17:00:23 +0000
Manifest this update: Sun 27 Apr 2025 17:00:23 +0000
Manifest next update: Mon 28 Apr 2025 17:00:23 +0000
Files and hashes: 1: I3asWb0Ke_YTZ9x8-oMXPECbM9c.roa (hash: DFO6kXzPePgIeZm2V5GpwnQuioD5uOOrmUgP/RCLs14=)
2: QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl (hash: Th5BKhbKkUKEzrS1ZJv3GxYVpt6ujwdUswLkgrsbpdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:5c:bd:43:86:ff:ef:8f:13:04:42:22:13:bb:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40c3d37be435a9c33f1c63e50d0d6464ed161004
Validity
Not Before: Apr 27 17:00:23 2025 GMT
Not After : Apr 28 17:00:23 2025 GMT
Subject: CN=d3b382af02ed8adaead9185522a82e7e950d4589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6a:7f:9e:d7:da:24:2a:78:4c:6d:aa:b5:21:
db:61:7e:ef:ae:a9:98:4d:b9:49:a6:3c:97:5f:86:
3f:3b:ed:b4:0f:bf:4b:68:9f:90:9c:18:48:f1:b1:
b6:d6:69:c8:62:31:2e:4d:cb:c9:3d:e7:10:8a:21:
5e:af:44:1b:a5:53:8d:86:6b:0f:3d:5d:bf:69:05:
07:53:81:15:4c:5a:e8:30:40:7a:e8:7b:9c:b4:68:
43:d8:6e:75:db:58:fd:5d:b6:ca:f2:cf:cd:8c:09:
a7:56:f8:19:2d:14:b1:8e:a2:7b:db:d7:ed:32:62:
01:0d:89:d9:fe:0e:8f:16:c3:5e:d0:36:8a:fc:33:
13:c3:d5:a7:1f:bc:93:6d:e4:65:f0:c1:34:df:1f:
29:fe:c3:a8:5d:50:e2:bd:9a:76:75:9b:46:28:21:
0f:81:c3:2a:04:0b:4d:f3:3d:f3:36:b4:a0:20:7e:
72:f8:cf:24:3e:18:c6:26:67:44:59:2e:16:ae:87:
8c:b7:6c:4b:d8:d6:84:43:6f:c0:95:65:dc:0c:7f:
f9:0f:e2:d1:34:11:b8:a7:eb:17:2e:ae:70:63:23:
b2:63:c0:4b:2d:60:dd:61:70:88:e9:81:a7:70:5f:
85:68:22:af:bc:da:43:cd:ca:0c:ed:1f:fe:75:a1:
17:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B3:82:AF:02:ED:8A:DA:EA:D9:18:55:22:A8:2E:7E:95:0D:45:89
X509v3 Authority Key Identifier:
keyid:40:C3:D3:7B:E4:35:A9:C3:3F:1C:63:E5:0D:0D:64:64:ED:16:10:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:98:04:83:30:5e:4f:ef:34:00:9c:4c:e6:e8:c5:96:de:e1:
f4:5d:47:ec:ed:bd:95:d1:b7:93:88:b2:8b:d7:1d:d4:5e:8f:
c0:2b:31:38:fa:c2:3d:71:60:b7:aa:58:21:db:34:f3:e6:6b:
f3:7c:9f:1f:07:f7:eb:6e:49:b4:74:00:e4:da:43:d3:ac:7e:
69:ef:f2:92:24:ac:1d:c5:1a:02:13:1b:28:f2:99:5e:7d:16:
65:b5:d1:d1:a3:e2:8c:9d:d2:66:04:c8:2d:70:71:6e:ab:50:
ed:6d:42:43:e0:f1:c0:70:e1:25:3a:15:99:95:7d:04:e5:fc:
fe:84:28:81:72:1d:5c:96:49:10:dd:8c:c8:f9:cb:42:41:01:
37:01:ca:42:8b:31:1b:c2:6f:3c:a0:bd:03:03:5e:60:d5:ed:
94:97:23:61:a6:b4:2d:2b:6a:7e:43:03:6d:b2:84:7f:5c:d5:
5b:8d:2c:a4:8d:1c:b1:3b:ca:f9:90:cf:af:58:25:3d:98:04:
bc:30:86:8e:07:70:0b:22:49:b0:b1:f6:50:78:f5:46:7b:fa:
59:37:51:4e:1b:5b:58:7a:1a:5b:36:78:60:a0:38:da:e0:3b:
bf:4f:11:8d:23:ba:3c:40:9c:61:af:eb:7c:8b:39:01:52:c5:
35:10:b7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:02:55 2025 by rpki-client