Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
File: Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft (raw, json)
Hash identifier: NwRhiJ6Huk0FNw67cO20kWTXY2C+cGO2Go+r828WDhQ=
Subject key identifier: D2:9F:81:25:A5:3F:8B:27:2A:C7:6F:F8:74:65:CD:9A:12:EA:62:D3
Authority key identifier: 41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
Certificate issuer: /CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Certificate serial: 0196A2E52E7F7931D8768E305DCDAD8A7533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
Manifest number: 0EB9
Signing time: Tue 06 May 2025 00:00:50 +0000
Manifest this update: Tue 06 May 2025 00:00:50 +0000
Manifest next update: Wed 07 May 2025 00:00:50 +0000
Files and hashes: 1: ASgPIcJDfuPjOm8cjrU_yX9d6LI.roa (hash: FoRf6zKDxzFzqNvRaEaSA99AYo7HeXRCWwfxlBkAE5Q=)
2: Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl (hash: ycjCW+Z+/+amJZNE6DRmqKb14cLK2thTxqxIO83wYzE=)
3: jJHHC0ke4zgy7tsBzgOSiuwx8KQ.roa (hash: y6+yWoGbJ/QqPwBhk36qsFBsa4k6khZqZ0ihGtdEnfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e5:2e:7f:79:31:d8:76:8e:30:5d:cd:ad:8a:75:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Validity
Not Before: May 6 00:00:50 2025 GMT
Not After : May 7 00:00:50 2025 GMT
Subject: CN=d29f8125a53f8b272ac76ff87465cd9a12ea62d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:58:5a:15:ee:86:ad:c2:78:b6:7b:53:ff:
b7:c0:86:f1:92:84:99:60:28:65:b2:c7:ff:a6:2e:
53:0f:26:6b:bf:32:64:6f:62:8c:47:f8:55:a4:b1:
40:e5:c2:89:0e:43:f5:68:39:4e:e6:84:00:82:1a:
03:b9:5a:c7:cf:84:e5:4e:fc:db:20:22:d8:43:ca:
7f:08:11:9c:e1:b5:58:9a:df:c9:17:d6:44:d0:8f:
8f:99:a1:c6:74:9f:60:0e:bc:18:0e:e0:0e:60:d6:
eb:cd:01:39:2c:d5:64:1a:1f:d3:dc:84:28:90:12:
6a:be:1f:91:bd:99:7e:92:d0:1f:76:ad:92:d2:06:
74:49:1f:f1:6e:60:6b:3e:6b:b5:b8:65:62:e9:eb:
db:ba:a9:42:de:a2:6d:55:b1:79:7a:6e:b2:98:23:
ab:b0:20:4f:e5:95:f4:68:ac:ea:63:79:6a:f2:0b:
54:e3:b1:6f:9b:4c:32:cd:06:40:5d:7b:05:8e:c2:
9f:be:7e:fd:02:04:1e:c3:b8:44:3a:bb:8b:b4:17:
95:a1:84:72:5f:1b:f1:82:8e:3f:cf:5a:42:79:36:
f9:5b:39:89:54:bc:d1:7b:2a:84:3b:8e:9d:a4:ba:
66:35:9e:0d:dd:ef:ce:cc:a2:d1:06:94:32:4b:6f:
a9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9F:81:25:A5:3F:8B:27:2A:C7:6F:F8:74:65:CD:9A:12:EA:62:D3
X509v3 Authority Key Identifier:
keyid:41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:1a:9e:c9:02:a3:7c:3f:01:19:cd:dc:de:79:d7:e6:51:72:
81:54:f7:01:90:89:8a:a7:22:58:3d:a2:eb:9e:41:b9:19:45:
92:62:aa:90:7d:f3:d4:fc:89:3d:d7:55:c5:3e:c7:5d:38:94:
c9:c6:1b:47:2b:2e:93:c3:b6:db:38:cb:97:ed:5f:26:4d:00:
e8:05:22:fd:f3:27:b0:d9:9b:ae:9c:89:03:60:19:b0:0a:94:
d9:76:77:be:e6:e9:15:b8:a6:53:a8:0a:05:9c:4e:cc:65:b8:
8d:81:84:e4:b2:7d:c6:5e:7a:81:41:6c:8c:20:f7:f0:4d:f9:
ff:18:a7:de:52:b8:31:4a:50:68:da:f9:65:d9:0f:a4:15:a8:
28:1f:28:35:ab:5f:22:97:dd:44:3d:70:e8:21:44:17:c8:88:
cd:e9:ad:72:25:73:2c:df:6d:8b:7e:d3:7a:fc:fb:01:cc:c6:
4b:ba:a7:2e:06:e9:b4:db:c7:5c:4a:aa:6b:5e:ef:47:53:83:
23:ef:43:f2:9a:42:47:76:3c:77:5e:3b:0a:ae:c9:d8:aa:86:
2d:13:15:37:4d:f5:18:31:ba:03:bb:a7:b5:e0:20:8e:11:c7:
02:71:0c:95:bb:60:0b:2b:bb:79:70:b3:3a:26:b9:a2:1b:64:
d8:f0:e7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:43:50 2025 by rpki-client