Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft
File: QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft (raw, json)
Hash identifier: mLcUw+gET4hmQAXUEgtBaAmmgYlFT071JsvxEFk02U0=
Subject key identifier: C0:ED:6C:C5:6E:92:A5:A5:AF:AE:5D:D9:24:F1:6E:D5:15:14:B1:79
Authority key identifier: 41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
Certificate issuer: /CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Certificate serial: 019689CA23F3FBAFA557D4C2810A5BCEAF93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft
Manifest number: 1535
Signing time: Thu 01 May 2025 03:00:48 +0000
Manifest this update: Thu 01 May 2025 03:00:48 +0000
Manifest next update: Fri 02 May 2025 03:00:48 +0000
Files and hashes: 1: 0lMFcdtNp26YfQNn5iPba6FXABM.roa (hash: qwNKo6mD7mKcqzNSQWlJycWA8l92Zl/i3CclTpihme0=)
2: 1-HPsIaOnC6OFdiyQbPCVTA9WLMY.roa (hash: GLjRp44S9t7k9/gNlz4F+5PxTttEffZtUX3wedwaMj4=)
3: AffVDnLnSLh0V7EinGng8G5nPjQ.roa (hash: hYx/BpJDcyTVNDkPP1YvXND6zbbHVisFIC82719FbiA=)
4: QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl (hash: mAlAnrOwkJVtJv0HzZQm/1MyQw4scZrs2z3Dr0qIS2I=)
5: X6B3yM6JPuRoNiHbz1ZaIgfYnuw.roa (hash: arcjlfWRdddSSndOkjcyUSHuh1XDl/Fc5uW5b/PuIbI=)
6: ml8HfpgZooz4Fs5VNgkwYze5t_M.roa (hash: KgRvypNeE4qoLntupCEeIzNpWhk2E20WSo1RiDNCO2U=)
7: ngnhG7uE9YHHo9YXMg4zT5zGeQk.roa (hash: a+4S0fbb+Q4assLZ0oTVcSUfUQDBn8eYYqxTad0XqL0=)
8: oI0m6JBhMDS_eEyHOtg7vo158Js.roa (hash: l4BG5WDsCRX9NtPnj37JkO0LvM0tJm7+HRwBv6mDOds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:ca:23:f3:fb:af:a5:57:d4:c2:81:0a:5b:ce:af:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Validity
Not Before: May 1 03:00:48 2025 GMT
Not After : May 2 03:00:48 2025 GMT
Subject: CN=c0ed6cc56e92a5a5afae5dd924f16ed51514b179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:70:57:7c:c4:69:cf:c1:b1:e0:81:ac:ac:a8:
70:f1:15:fe:12:4f:a2:c6:8b:1a:a6:7c:f7:ba:ec:
cd:3d:76:aa:a5:3b:83:a7:2e:36:1d:cc:24:9c:a5:
d0:d5:33:d0:75:9e:c7:90:18:bc:2d:3d:11:c8:6b:
7d:34:7f:d4:47:fc:38:bf:b5:0e:11:d7:8d:d0:d0:
d4:fd:a3:b0:b8:41:66:fb:d0:84:69:e7:4c:6c:65:
28:a1:05:6e:b6:18:b4:2f:59:86:ae:9c:d8:d9:dd:
06:c8:85:e9:fc:f2:02:66:26:c2:4b:80:2f:c4:88:
db:3c:d0:2a:83:55:c8:46:cc:40:ae:70:57:7f:96:
82:0c:b2:d4:8b:62:07:cd:cc:0e:4a:3a:0c:5a:d0:
c6:ca:db:21:b6:3c:a6:b2:68:90:2b:6c:c7:2c:ea:
fa:1e:63:e5:dd:84:9e:36:df:98:21:5c:b4:bf:39:
a4:22:a9:54:f0:8c:a8:3b:11:0f:0a:ee:3a:95:ce:
a5:19:ba:c3:9a:11:93:9a:a2:f0:69:47:0a:87:56:
d5:4f:d8:c6:b4:a0:0a:e8:58:c5:20:d7:e3:e9:b8:
e4:d4:bc:80:75:a4:55:8e:ff:6b:d0:0a:d8:54:bb:
c1:4e:03:9d:81:e0:73:f3:de:a8:8f:9e:ac:ab:f3:
6b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:ED:6C:C5:6E:92:A5:A5:AF:AE:5D:D9:24:F1:6E:D5:15:14:B1:79
X509v3 Authority Key Identifier:
keyid:41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:02:bf:c4:99:7f:eb:b5:dc:06:3a:03:dc:16:3f:12:1b:9d:
75:b3:ce:0a:f7:7e:8d:05:84:92:73:28:59:a7:f8:b9:68:16:
26:f6:c8:2a:6e:9b:27:4b:04:28:25:a2:d3:34:67:26:4d:0e:
70:64:94:39:94:f7:b3:ac:f0:3c:e5:9e:f1:a5:6d:a8:07:97:
2f:cc:2b:c6:c1:7a:7c:ff:8b:8a:9a:72:31:85:71:18:20:ba:
a1:05:1e:12:a0:6f:98:80:15:52:73:e8:eb:2a:f7:66:69:93:
ad:ea:f4:3d:86:10:fc:73:f0:51:ae:bc:ba:8e:fe:42:2b:49:
fc:3e:32:55:20:d3:f9:c9:21:79:f5:33:c7:16:d9:aa:dd:0f:
f6:5e:07:97:3b:18:68:a4:07:f0:76:18:2f:5d:fa:ed:4b:52:
a4:62:8d:db:d9:61:58:5d:d1:69:5f:aa:4d:a8:15:18:74:f1:
03:75:d9:96:d4:e3:c9:bc:9a:bd:10:58:62:09:7b:fb:20:c3:
00:c2:10:d5:91:4c:05:d2:c4:02:22:95:7e:fe:97:47:1b:c2:
db:01:1d:13:53:35:b8:a7:f9:c5:01:7c:2b:e6:85:a3:6d:e4:
fa:a4:83:8a:81:d2:91:ac:74:8a:ad:f4:7a:80:5c:39:52:83:
d4:d0:28:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:19:02 2025 by rpki-client