Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
File: QCHf817fDObkKNav_CEsRxdnnuE.mft (raw, json)
Hash identifier: YayYwtZDm6T1ZEr5Pwsjcyqr4Ilb0XmPKjFBcfatA3E=
Subject key identifier: 9A:09:EC:96:6D:C5:9F:5A:C7:C5:7C:79:DE:C1:FB:0D:77:D1:42:BF
Authority key identifier: 40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
Certificate issuer: /CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Certificate serial: 0196C9BB43783CD122653D4F58B04E8E75A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
Manifest number: 153B
Signing time: Tue 13 May 2025 13:00:14 +0000
Manifest this update: Tue 13 May 2025 13:00:14 +0000
Manifest next update: Wed 14 May 2025 13:00:14 +0000
Files and hashes: 1: QCHf817fDObkKNav_CEsRxdnnuE.crl (hash: ZjMuD/rQUB0V79J2gArrU2jAJxj4DSUQtleVn5zqfvs=)
2: RWXMqjkV2JSmE_jNgsIntDAZ40E.roa (hash: JlOZyqtU1Xw8rdg1LgiJgni//bw4mMZ1Qt4Pvh5z6tE=)
3: VWg3f0Gbf8sa5f2R-1SRG52r7-8.roa (hash: /HyVmsWd+2rMbD1GgNRa5CoP6uMJQMzjsYwposvYEw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:bb:43:78:3c:d1:22:65:3d:4f:58:b0:4e:8e:75:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Validity
Not Before: May 13 13:00:14 2025 GMT
Not After : May 14 13:00:14 2025 GMT
Subject: CN=9a09ec966dc59f5ac7c57c79dec1fb0d77d142bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b6:d5:f5:6e:fb:ee:03:3f:f5:b7:09:0e:ac:
78:bb:b5:70:d3:2a:74:72:34:2f:3a:7e:6f:4d:86:
3e:4d:43:b7:5b:28:4c:be:8f:41:cc:6b:42:94:77:
55:8d:14:bf:6e:dd:90:12:9e:bb:59:14:f4:b5:59:
e0:ef:f4:75:c6:32:c8:9b:2f:30:72:c4:10:fe:e6:
e2:14:02:2c:53:72:0e:fe:4e:77:5e:85:c6:d2:44:
d3:0f:80:ae:e7:18:20:9d:60:be:86:fb:26:31:6c:
b2:4d:ca:a0:2e:9b:64:be:05:11:de:f6:28:d9:87:
28:01:c2:81:b3:ee:f2:e2:ad:8e:8f:a1:f5:c2:cf:
62:6c:d6:3a:e6:a2:a0:93:e7:56:98:ab:61:af:31:
30:45:45:0c:af:48:e7:ca:72:2c:8a:ae:a5:8e:67:
6b:f5:86:71:a2:e0:35:fe:02:b6:79:15:12:25:25:
e6:de:30:7f:19:53:c3:b8:62:2a:50:d3:f1:18:5a:
0f:0c:88:39:e6:5e:53:7b:fa:3f:9f:d8:dc:54:98:
fb:c0:8e:36:15:93:34:67:25:ca:88:d9:2b:a7:16:
62:ed:48:65:fc:aa:d7:ab:bd:35:3a:0e:62:30:02:
f2:1d:c9:5d:43:99:7a:06:a6:9e:69:3f:37:55:e5:
66:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:09:EC:96:6D:C5:9F:5A:C7:C5:7C:79:DE:C1:FB:0D:77:D1:42:BF
X509v3 Authority Key Identifier:
keyid:40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:6b:3c:22:2c:ea:21:ed:53:0f:59:bb:10:4e:82:8a:3f:9b:
01:0a:8b:a3:2d:ba:d6:ba:37:e2:cc:ac:5e:15:2f:29:15:75:
a0:07:4e:24:ce:a3:60:4a:b0:43:03:1a:9b:1f:01:ee:c8:9f:
aa:e4:01:08:56:55:56:0c:a4:91:4e:08:df:2a:9f:16:59:ad:
cd:f1:99:23:da:fe:6f:8e:62:fc:8e:b8:c1:75:77:5e:f4:ad:
ef:de:d5:ff:3f:8b:66:46:65:7b:fb:55:89:cb:11:68:0c:fe:
1d:e5:e8:3b:1a:6f:12:95:19:83:36:47:d7:07:f8:b5:38:a3:
a8:80:1e:ed:41:28:7f:e8:52:67:c7:b6:38:5c:49:66:b1:bc:
54:49:56:77:54:44:d5:41:14:a9:d9:fb:83:1a:87:c9:fc:a1:
d6:36:43:4b:c8:db:9d:48:ea:d4:5b:ba:4b:c0:fd:3f:e0:1d:
4c:51:c9:ca:ba:d5:50:af:87:6e:c3:f7:cb:fe:52:e3:78:8c:
97:d0:10:f7:2e:84:7b:36:2a:d1:fd:70:99:19:bb:e9:6c:8b:
ec:95:4f:14:69:c5:99:af:ce:d4:b0:64:6e:aa:61:b8:6d:fc:
5c:48:51:33:0c:04:20:0a:fa:e7:3f:16:a0:65:6e:10:fb:0e:
4c:05:2c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:27:30 2025 by rpki-client