Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
File: QntUBuzauOW0DdxUvGFcoqcJIvE.mft (raw, json)
Hash identifier: TnhjOBZEQ3p2gHE5Uaxf9zzZj/pFrrM6MXj6S2wTo4Y=
Subject key identifier: 83:B8:A5:80:54:91:1A:EC:42:79:E7:CE:27:D4:A9:CD:B2:E7:38:F7
Authority key identifier: 42:7B:54:06:EC:DA:B8:E5:B4:0D:DC:54:BC:61:5C:A2:A7:09:22:F1
Certificate issuer: /CN=427b5406ecdab8e5b40ddc54bc615ca2a70922f1
Certificate serial: 01969D1A07CE7AF213DBACCDD6716FAAD38F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
Manifest number: 1021
Signing time: Sun 04 May 2025 21:00:50 +0000
Manifest this update: Sun 04 May 2025 21:00:50 +0000
Manifest next update: Mon 05 May 2025 21:00:50 +0000
Files and hashes: 1: CF9g-zHrIl6sH7ffAFMheYKTmgE.roa (hash: 8JftFhjM60lS0dv+t4PfyHWDIpIU5Mke1ZAPszJPPn0=)
2: QntUBuzauOW0DdxUvGFcoqcJIvE.crl (hash: FQOHHTZdAy3lliOj71MpzzPAPIaiZJwhetBclEXN77w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:1a:07:ce:7a:f2:13:db:ac:cd:d6:71:6f:aa:d3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427b5406ecdab8e5b40ddc54bc615ca2a70922f1
Validity
Not Before: May 4 21:00:50 2025 GMT
Not After : May 5 21:00:50 2025 GMT
Subject: CN=83b8a58054911aec4279e7ce27d4a9cdb2e738f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c6:ab:88:e7:7f:1c:2a:04:20:8a:b2:42:0e:
76:e6:c0:3a:c5:dc:ac:ab:61:74:22:5f:9e:47:bd:
38:14:64:d1:ad:19:7b:d8:31:70:10:49:d3:8d:47:
ad:d4:44:73:92:2a:1a:7c:bf:0e:d9:20:b4:e0:f2:
f2:39:52:53:ca:a4:49:b8:6e:58:9e:6f:62:55:d8:
bc:0e:d4:5a:dc:d5:3b:52:d0:fc:ec:1e:b7:1d:2e:
ca:7f:40:f1:0a:a5:8e:4b:05:43:9d:50:2a:55:f8:
9f:68:68:99:25:aa:c1:3b:22:44:70:a2:1e:c2:29:
22:14:d5:31:30:b2:5b:15:df:40:ed:69:7d:b1:77:
76:9c:3f:93:94:00:ad:b0:ec:5d:f2:4d:fe:b7:74:
8a:1d:53:9d:21:41:87:6e:28:5f:07:62:36:fb:36:
45:76:a7:40:85:a8:e0:c8:91:3c:74:b1:96:8a:50:
2c:7d:4f:3c:38:cc:55:ce:77:a2:8f:b6:09:c7:ac:
17:fc:d1:7b:fe:fe:1b:41:04:02:1a:ee:15:70:85:
46:f8:99:e9:07:38:98:90:ff:9a:9e:3d:b2:72:27:
df:fc:8f:6b:a5:af:d4:7e:7b:58:59:95:a8:06:77:
9a:c2:5b:78:8c:bf:6f:2f:ed:d6:35:09:b3:59:d3:
d1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B8:A5:80:54:91:1A:EC:42:79:E7:CE:27:D4:A9:CD:B2:E7:38:F7
X509v3 Authority Key Identifier:
keyid:42:7B:54:06:EC:DA:B8:E5:B4:0D:DC:54:BC:61:5C:A2:A7:09:22:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:bc:df:0d:1f:46:6f:5f:96:1b:78:57:f3:90:4a:46:7d:38:
ee:4d:7f:44:dd:da:23:92:3f:73:58:34:2e:f5:58:dd:07:ca:
a7:78:05:05:e6:04:17:ef:25:59:94:f3:fb:93:05:2e:b9:29:
ea:0e:9a:a3:35:b0:bb:21:49:14:45:d8:b4:b5:8c:ff:4e:fc:
64:00:5b:b6:64:1e:95:e4:51:d0:23:48:dc:78:d2:30:73:59:
54:42:7b:b5:97:12:90:c0:0a:e1:80:3d:36:dc:42:5f:96:b8:
a5:60:89:5a:21:96:b6:99:8e:fd:7e:55:15:8d:15:1d:ff:26:
b1:36:bb:69:e3:ce:2f:f1:95:45:78:f4:b9:e7:81:fc:1b:9b:
91:44:31:be:a7:36:75:55:9e:93:3b:58:f7:c7:d0:73:16:7c:
9a:4c:7e:6d:be:69:05:6c:f5:7a:64:2f:48:72:76:a3:b3:6c:
62:dc:57:c1:31:89:a2:08:6a:fd:76:44:ad:01:85:56:1e:e0:
8a:80:83:f1:45:41:29:09:4b:4f:ca:2e:a2:fe:8b:87:55:a9:
62:af:29:4c:c4:7a:91:ab:7b:27:fb:08:72:1a:f3:53:10:be:
1f:9d:25:a7:a6:bd:56:ad:82:f5:b2:98:c3:54:9b:5f:34:22:
8a:c5:16:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:19:07 2025 by rpki-client