Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
File: Qs9KEo0J38S4sDWhLNgx-fewFGk.mft (raw, json)
Hash identifier: nF1FBa/hUn7nRPVFyXK2Q5v7hCGV/dN4q8rVmFnNzpY=
Subject key identifier: 79:BE:41:06:B1:FD:38:BB:5E:0B:43:C5:7A:9A:7B:11:3B:CD:4D:2E
Authority key identifier: 42:CF:4A:12:8D:09:DF:C4:B8:B0:35:A1:2C:D8:31:F9:F7:B0:14:69
Certificate issuer: /CN=42cf4a128d09dfc4b8b035a12cd831f9f7b01469
Certificate serial: 0196C9849898ED54093DECE744E2A5011362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
Manifest number: 0E51
Signing time: Tue 13 May 2025 12:00:32 +0000
Manifest this update: Tue 13 May 2025 12:00:32 +0000
Manifest next update: Wed 14 May 2025 12:00:32 +0000
Files and hashes: 1: 2rG3zP2nsK1WFDdtam1fkefUVec.roa (hash: FYwcLySS6BHsPeqa2YZMNFpU87urYtsqq/j3a/UUmqo=)
2: G4MlXm_89uj6pHE4Hj0jm0JnAPs.roa (hash: IvJvABmtoL2D5H2lLbc36SYTprrxJ3+le+YIp65E/hA=)
3: Qs9KEo0J38S4sDWhLNgx-fewFGk.crl (hash: FWqlBG9/uqDsz4HFCWbZ+7/fswMx98hsUOeBXsVV8Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:84:98:98:ed:54:09:3d:ec:e7:44:e2:a5:01:13:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cf4a128d09dfc4b8b035a12cd831f9f7b01469
Validity
Not Before: May 13 12:00:32 2025 GMT
Not After : May 14 12:00:32 2025 GMT
Subject: CN=79be4106b1fd38bb5e0b43c57a9a7b113bcd4d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ba:73:a6:19:61:ad:5b:17:36:fd:85:f3:98:
91:db:62:08:61:02:f4:ea:c7:aa:28:d4:03:b0:20:
f0:3d:9f:ff:f9:4c:17:5c:94:58:00:c8:17:b4:c0:
f2:cc:b0:d9:ec:db:83:3d:7c:96:a0:e0:d8:37:f1:
bc:67:f6:d8:e8:b7:66:b3:8c:b4:1a:4e:ad:36:25:
7e:88:a9:a9:1d:1c:73:96:b0:98:3c:31:cd:8b:99:
91:a7:fc:62:e0:c0:3c:7c:e1:c2:d7:be:6c:21:f0:
b8:b0:6b:45:6e:50:9f:d5:f6:92:3c:e0:1e:58:76:
92:68:c8:fc:c6:33:f8:24:ba:d1:59:fb:21:f0:8f:
00:86:75:cd:37:ca:6b:bd:35:e6:01:db:83:7c:00:
76:c6:f8:bb:4d:0d:9e:0e:2a:d4:e6:06:43:df:bd:
14:54:c0:38:b5:da:66:3c:44:82:0c:53:6e:0f:0f:
63:ab:3d:04:f6:8d:8d:62:9c:9e:62:c0:a4:4d:0f:
82:1f:d3:ca:bb:6e:c4:a7:d9:44:59:10:5f:19:b9:
e0:c9:c5:dc:c7:85:01:83:ab:9c:15:d1:54:e2:07:
48:de:48:fa:6a:cc:d4:c4:cc:83:c6:53:e2:85:9f:
69:5f:cb:6d:74:94:f9:91:17:32:a4:40:4f:1e:0c:
e9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BE:41:06:B1:FD:38:BB:5E:0B:43:C5:7A:9A:7B:11:3B:CD:4D:2E
X509v3 Authority Key Identifier:
keyid:42:CF:4A:12:8D:09:DF:C4:B8:B0:35:A1:2C:D8:31:F9:F7:B0:14:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e5:63:67:05:90:54:e3:3d:99:e6:49:95:a3:cd:a3:d9:c4:
3f:8f:c5:ac:64:58:e0:f3:08:0d:f5:b2:6f:0c:c0:d6:4d:6b:
9f:ef:81:e9:5f:77:3a:c4:13:d5:68:14:3c:ba:db:52:db:ee:
b8:be:73:4d:39:aa:41:f0:83:2e:76:df:a9:4e:f7:3d:a4:d9:
f1:13:72:fe:c3:b4:da:93:47:71:9c:db:d0:96:a2:6c:d7:54:
4a:ec:fb:f6:09:63:c3:30:54:af:c7:bd:a3:85:ce:45:60:d7:
c3:0a:24:54:5b:f3:51:82:c6:24:4f:f9:cd:97:db:c3:db:97:
08:7f:7b:a3:47:d9:f2:9a:d8:13:41:10:0f:41:7c:eb:90:97:
6b:26:84:5d:c0:aa:4f:f7:3c:64:ef:35:1e:67:99:e9:43:c5:
2c:5a:8c:e6:43:9e:b6:70:19:9e:ce:c6:d4:4a:a8:72:3b:3f:
06:d2:0b:d4:fc:52:f8:c3:d9:77:0f:18:ed:6a:4d:19:95:b0:
80:2a:5d:df:e3:8f:0d:ca:91:08:6d:11:39:4a:7e:ca:1d:a8:
02:26:97:e4:4b:50:f7:46:04:b7:f7:36:e5:5a:6a:c6:ac:6a:
e3:f4:19:61:5f:b8:fe:ca:7b:a5:b9:b3:64:35:cf:dd:fa:31:
bc:bc:f9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:09:43 2025 by rpki-client