Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
File: QdFPKPmNO9zEXhkibx9WFw4xKr8.mft (raw, json)
Hash identifier: XwFpgx9rCtxuPyo1ZAHr1mIhBchspY2vV6rNQNti4EA=
Subject key identifier: 9D:07:9F:6F:B9:2B:54:85:F7:CA:23:EB:48:A1:36:12:F6:2C:B2:EA
Authority key identifier: 41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
Certificate issuer: /CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Certificate serial: 0196B521D733F01FA81440E90372BDE0BE3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
Manifest number: 1531
Signing time: Fri 09 May 2025 13:00:15 +0000
Manifest this update: Fri 09 May 2025 13:00:15 +0000
Manifest next update: Sat 10 May 2025 13:00:15 +0000
Files and hashes: 1: QdFPKPmNO9zEXhkibx9WFw4xKr8.crl (hash: thB+Wct/3ODRxg80HEW7eOqYNhjfLKhPJCLj1Crk47U=)
2: TfT6AZyh9UGWuKPzLXDw4XK7Cjc.roa (hash: 4OX2vbS8uyBAPoRn5NlTz3A25sxN9Wre4w3pzzWneG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 13:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:21:d7:33:f0:1f:a8:14:40:e9:03:72:bd:e0:be:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Validity
Not Before: May 9 13:00:15 2025 GMT
Not After : May 10 13:00:15 2025 GMT
Subject: CN=9d079f6fb92b5485f7ca23eb48a13612f62cb2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e5:c1:8f:76:98:d3:b6:f3:6d:0c:41:38:ba:
67:4a:f4:bb:ca:a1:cc:44:09:64:f9:79:e3:c0:90:
f5:fc:bd:5e:a2:fa:b3:d7:29:47:b7:2a:85:54:6d:
f2:e3:25:4f:5f:3f:c8:db:d5:cb:81:fe:20:09:db:
e0:48:d3:a5:05:55:cd:dc:96:fc:72:63:06:f8:d3:
c5:12:d5:cf:2a:85:9f:18:e5:4a:9c:07:ad:db:82:
41:88:15:8f:eb:13:86:a1:fc:c7:f4:9e:3a:bd:f7:
22:34:ea:d6:ef:b3:2a:84:9a:1c:64:ed:64:95:e8:
49:82:9c:8d:a2:a3:09:ed:14:e6:07:c4:9f:1e:ab:
d0:4b:f1:4c:a3:03:ef:e8:38:d8:e3:d8:6a:20:f9:
7f:24:de:26:37:12:46:cd:57:68:0a:ed:76:87:af:
b8:14:ba:da:2f:73:4f:d0:cf:64:7a:e4:94:8d:f7:
45:e8:f6:bd:f1:b9:dc:e2:96:6c:a1:34:0f:2e:a1:
7f:a5:25:fe:c8:20:80:64:c0:21:ac:34:6f:24:96:
c9:8e:e6:05:f1:f2:09:ff:fb:69:0a:28:f0:ba:fa:
d2:0d:70:fc:bb:7c:97:ce:9a:b1:b1:33:e1:27:d7:
76:f2:aa:0b:8b:07:8b:96:03:fc:bd:f8:48:09:ec:
ed:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:07:9F:6F:B9:2B:54:85:F7:CA:23:EB:48:A1:36:12:F6:2C:B2:EA
X509v3 Authority Key Identifier:
keyid:41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:34:a2:fc:c5:31:75:04:b1:65:07:aa:1f:5c:d5:48:17:50:
96:5f:cf:0c:89:57:9f:fa:43:e1:e2:64:f8:4e:8f:15:34:32:
03:e8:9d:6c:7c:56:db:d0:b9:64:1b:e5:ab:09:c9:db:55:63:
6c:37:f4:b9:60:09:63:25:48:69:74:10:03:8e:f2:42:e4:8f:
ab:98:2a:7e:c7:91:c7:e7:13:af:2a:f3:1b:be:20:ff:e4:10:
08:e2:5e:a1:b2:ef:20:d5:dd:35:68:1a:a7:54:b2:de:16:30:
c4:a9:a9:e0:be:79:ef:29:c1:c8:e8:1e:c9:06:4e:5e:c3:7b:
f6:cd:57:9a:fe:2f:fd:b1:fc:b6:1b:22:b7:69:7d:80:50:97:
5d:30:60:59:3c:e8:1d:b0:c3:c9:bd:5c:06:8d:5a:b9:a9:88:
76:7f:d3:1f:a2:a9:b4:3b:e7:3d:ea:ec:8d:dd:8c:61:90:89:
1a:1d:1c:4c:44:e1:ce:78:f2:60:f7:f5:fc:75:f8:9f:4c:ad:
f0:31:97:85:e3:4b:4a:ee:ed:d4:ab:8c:ee:2f:73:ef:6c:14:
b1:16:f3:9f:d2:33:3d:ef:bc:3b:64:6c:c6:32:71:0e:64:f3:
60:66:7d:94:6b:a9:19:27:d5:bd:77:24:5a:37:a6:56:74:5c:
80:71:09:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:54:17 2025 by rpki-client