Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
File: QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft (raw, json)
Hash identifier: 4c2bkVpEOJwUvp7QH5GTmM+dbVKraycRCsyJ2l+zUSY=
Subject key identifier: 4B:25:23:25:0B:0F:43:BD:95:4B:6D:DC:34:36:1C:52:7B:85:97:92
Authority key identifier: 40:8F:A0:17:53:2F:F6:D9:FB:38:B4:00:37:89:6A:FA:F0:AA:CF:8B
Certificate issuer: /CN=408fa017532ff6d9fb38b40037896afaf0aacf8b
Certificate serial: 0196C2DDAFCB3E849637D76BD36F8A13B20D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
Manifest number: 0703
Signing time: Mon 12 May 2025 05:00:30 +0000
Manifest this update: Mon 12 May 2025 05:00:30 +0000
Manifest next update: Tue 13 May 2025 05:00:30 +0000
Files and hashes: 1: QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl (hash: fyX3sQWvSr+9weRwE9g4mG+0hlW/6KGBxyy1V9DxC0g=)
2: Z5KDHzf527U1qRAIHwgcHaWLd8Y.roa (hash: 2FLC0+uc30V7W0I0O5nyFk8rgVmBx+XIWSxS6WsMyJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:af:cb:3e:84:96:37:d7:6b:d3:6f:8a:13:b2:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408fa017532ff6d9fb38b40037896afaf0aacf8b
Validity
Not Before: May 12 05:00:30 2025 GMT
Not After : May 13 05:00:30 2025 GMT
Subject: CN=4b2523250b0f43bd954b6ddc34361c527b859792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e7:7a:c4:aa:91:f8:5c:b5:5b:1e:8c:03:d2:
83:87:96:35:c3:7f:a7:be:ce:10:11:96:d0:7d:dc:
01:cc:cd:1c:3e:e2:f3:ac:9a:76:5a:c3:a1:4d:d4:
d9:29:75:d0:a6:9a:6c:46:c1:62:07:37:52:ab:00:
eb:74:94:34:0d:8b:11:47:f1:2b:ec:a9:b6:b1:19:
f2:9b:ee:c5:42:8b:10:6c:fa:99:54:f2:2e:f1:8a:
cf:c5:23:9f:09:92:34:7e:54:1e:7c:1e:f4:16:a0:
f6:98:73:8b:ab:07:01:d1:7f:e8:73:9d:1d:8f:2b:
88:71:b6:8e:a0:be:33:03:c5:bb:8f:38:66:76:76:
ae:63:98:8d:e8:52:33:51:bf:64:4f:79:c7:31:38:
42:2a:08:e7:55:45:a6:10:ee:85:dc:a7:08:58:34:
33:d7:c4:b2:ca:db:15:2e:b7:d9:7a:a6:93:10:d6:
96:48:1c:1c:88:9c:a7:50:39:8f:0d:c2:da:66:cf:
0a:8b:ed:14:a7:7a:69:ed:82:9c:04:7e:a1:4f:a2:
30:da:4c:08:47:24:27:cf:fc:56:14:ea:c5:b6:af:
91:76:ae:6f:30:f4:e4:e4:39:af:78:40:e2:d2:51:
d6:52:a5:62:09:af:0d:b2:b3:4b:6e:8e:d8:df:0f:
17:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:25:23:25:0B:0F:43:BD:95:4B:6D:DC:34:36:1C:52:7B:85:97:92
X509v3 Authority Key Identifier:
keyid:40:8F:A0:17:53:2F:F6:D9:FB:38:B4:00:37:89:6A:FA:F0:AA:CF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c7:f6:c9:20:5d:90:1b:db:9f:26:f6:dc:41:6e:20:32:09:
83:b2:5e:f1:56:30:ae:74:7d:a0:e7:3d:b4:86:05:0e:2b:8a:
33:03:4f:3a:04:f3:b9:01:55:b6:28:e6:70:16:42:9c:64:09:
fa:b3:58:2c:74:f7:b1:fc:30:a4:db:b8:11:23:c1:5b:9d:12:
2c:fb:89:5a:56:8f:cf:56:32:ae:a0:70:5b:0d:da:ac:c6:df:
b8:fc:3e:3f:b8:d6:cc:91:70:b1:37:81:20:24:74:cd:d2:15:
7f:23:8f:a6:c9:2f:50:eb:46:25:d7:45:e0:19:70:5c:8f:6e:
46:13:3d:be:7f:c0:2a:ee:82:8e:23:55:09:ee:ce:cd:26:a5:
1e:b0:a7:23:58:b6:bf:09:41:04:ce:fe:3f:87:ad:09:bd:98:
f7:b2:d3:c9:c7:fc:d6:a6:f1:7b:87:1f:d8:a0:2c:29:03:b2:
f0:0e:43:55:34:47:39:f0:ed:86:ed:ed:54:9e:6c:53:49:16:
c4:d1:c0:34:db:1f:4e:44:68:c5:c3:24:19:df:d5:c6:39:fe:
15:ab:b4:a3:e2:1a:eb:a9:ff:16:ba:81:44:6a:ab:3e:f5:f0:
b6:f6:d4:dc:61:81:44:45:f2:0c:1d:c9:1a:ac:5c:e2:d0:d0:
c2:cb:1e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:24:23 2025 by rpki-client