Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
File: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft (raw, json)
Hash identifier: Rjyx7RXYOyBcfMh7Fmblwt8S2xkNJPXuMWh4Xh9rCnc=
Subject key identifier: 0D:08:54:57:1E:69:89:F2:50:33:34:51:D8:CD:07:0E:76:9C:7A:23
Authority key identifier: 40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
Certificate issuer: /CN=4092c47db8a21931154605d576c3b7341d06b4b4
Certificate serial: 01968DA6C17D94E989D702172DB0D22044B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
Manifest number: 12A4
Signing time: Thu 01 May 2025 21:00:38 +0000
Manifest this update: Thu 01 May 2025 21:00:38 +0000
Manifest next update: Fri 02 May 2025 21:00:38 +0000
Files and hashes: 1: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl (hash: 39ViKG7HDPMukKucpVrD8CpKEFLvr3X0kyid2twwvmQ=)
2: knkqtZcmX5gSTiCaXxHQZfriQgw.roa (hash: E9ZLKfrMdp8ZIK1kQ0GbAJkgNgAmhxZR6M5lJ1uXi1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:a6:c1:7d:94:e9:89:d7:02:17:2d:b0:d2:20:44:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4092c47db8a21931154605d576c3b7341d06b4b4
Validity
Not Before: May 1 21:00:38 2025 GMT
Not After : May 2 21:00:38 2025 GMT
Subject: CN=0d0854571e6989f250333451d8cd070e769c7a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:05:f7:8d:fd:20:57:34:af:1f:f9:33:cd:f7:
73:5e:14:5e:fa:b6:76:75:da:8c:a2:f0:3d:c9:1c:
30:dd:6d:37:f9:95:53:4a:e4:9f:39:c2:81:67:c5:
a7:e3:3e:68:e3:d1:6a:c4:92:47:ed:f4:73:18:9b:
55:f1:4f:84:5c:c6:0c:0b:53:03:44:41:51:44:71:
00:f7:7a:5a:03:0c:e5:14:e4:ba:39:7c:c8:57:0e:
e8:ae:40:a1:38:59:c7:38:9a:4c:4d:19:01:a7:40:
0f:23:05:26:b6:32:cf:d2:c5:d2:66:22:9f:2e:88:
3d:d0:57:fe:eb:70:32:63:f9:b6:bf:68:fc:d3:e4:
97:f6:95:49:51:d4:d4:08:20:89:fb:04:34:02:be:
ca:86:70:b0:23:ce:be:4d:9c:c3:c9:58:a5:64:a8:
33:c7:88:b1:27:61:5c:1a:57:5b:fe:69:53:b7:a2:
fd:7d:00:52:bd:21:2b:a8:ba:cb:e8:fa:e2:60:5c:
20:51:12:d5:34:72:0f:d5:56:b0:c4:2a:19:70:32:
03:ae:33:91:3b:8c:c2:84:e7:a9:45:7b:7a:2c:5e:
88:c2:19:d3:94:26:80:b4:ab:db:1e:2d:b4:a5:07:
99:a9:2c:70:6c:dc:fb:4e:cd:24:61:9b:e6:69:c4:
01:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:08:54:57:1E:69:89:F2:50:33:34:51:D8:CD:07:0E:76:9C:7A:23
X509v3 Authority Key Identifier:
keyid:40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:9f:48:90:e3:d1:e8:e0:9c:87:80:27:ec:84:dd:47:70:6f:
6b:44:e9:2d:db:af:09:87:56:6b:44:7f:17:48:41:75:86:d4:
bf:95:af:80:d3:6d:df:41:78:8e:5a:be:96:47:c6:77:ee:a5:
58:ce:e5:73:c0:74:ec:19:fb:30:68:d1:95:1c:e9:05:d3:67:
cc:ef:94:a2:de:9f:cd:a8:80:08:87:2e:31:6e:3f:e1:41:1c:
ea:31:3c:09:33:d3:f2:03:ae:f7:32:01:0f:d2:5a:f5:19:1d:
21:5a:6f:67:1a:c1:12:45:b5:f1:3e:11:62:19:72:9f:8b:bc:
6f:4b:2a:ea:3d:37:94:75:60:9a:a2:ab:ab:72:38:61:04:32:
d5:36:68:b8:4e:ff:70:1f:e5:69:3a:b4:00:15:4c:9d:bb:4c:
a5:e5:8b:2e:25:9a:3f:13:c2:2e:11:93:e7:dd:3d:22:3c:7b:
e5:f4:91:46:89:35:7a:e6:11:b8:6d:f5:51:ef:c8:16:d9:7b:
f7:6e:6c:85:74:e4:5a:62:a1:5a:8e:da:3e:09:ff:ad:3d:b1:
4a:ef:36:8d:e0:01:77:38:ae:55:96:e4:84:e1:6d:9e:b2:e7:
98:d6:7f:4a:18:22:89:8a:0e:2a:1e:c8:68:d0:49:20:69:24:
cd:88:a8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:15:26 2025 by rpki-client