Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
File: QtT25CKV9UA7hFtSu6lnl2HYhNg.mft (raw, json)
Hash identifier: WrVzpQmCg0K6VbpFpx8wUTPPp1xEjsv4lGHcUUsYsPM=
Subject key identifier: 20:1B:4B:C6:40:1E:98:0E:57:A6:2F:FC:8B:B3:AE:71:0E:A9:3A:17
Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
Certificate issuer: /CN=42d4f6e42295f5403b845b52bba9679761d884d8
Certificate serial: 0196BAED250138D1EDE2D7F973944C99DA55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
Manifest number: 092E
Signing time: Sat 10 May 2025 16:00:25 +0000
Manifest this update: Sat 10 May 2025 16:00:25 +0000
Manifest next update: Sun 11 May 2025 16:00:25 +0000
Files and hashes: 1: Op1gh0wFko9724Ahwm8zyJJnCx8.roa (hash: xGR1u5ClwHU4q3WoVp5eWaY/nYx57WKoSQo4c6w7W+8=)
2: QtT25CKV9UA7hFtSu6lnl2HYhNg.crl (hash: vT5NezBsxCZJfUOoKmfbWnp667b20a2Rk07bnwQEXUs=)
3: jFqlbrJh0TyGkEhrngC57XJ-Gb0.roa (hash: Ci3+1/Zt1KX21Iibq86D4q3nL8Q6qZ17OnVkiVZ8OJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:25:01:38:d1:ed:e2:d7:f9:73:94:4c:99:da:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8
Validity
Not Before: May 10 16:00:25 2025 GMT
Not After : May 11 16:00:25 2025 GMT
Subject: CN=201b4bc6401e980e57a62ffc8bb3ae710ea93a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:24:3e:a7:29:66:10:0d:3a:67:a3:41:cf:e8:
7a:83:57:8f:0e:b9:b5:e1:68:25:6c:cc:c0:40:5f:
21:e4:ef:69:7c:6e:df:85:f3:b4:1f:d6:38:b8:51:
85:5c:02:3c:34:91:88:dc:4c:30:f0:d3:78:8a:2f:
a0:41:03:b9:02:e6:b0:62:99:fe:8c:9a:9d:37:03:
53:d3:b4:48:59:74:63:ec:7a:91:b2:a6:d3:d3:80:
2d:09:c2:cf:07:e2:b3:9d:42:d9:44:79:a3:12:ec:
51:8f:a6:cb:39:ce:af:a8:1c:b5:d5:29:ec:05:f3:
ea:b4:25:b8:b2:c8:f5:b2:c7:a4:e5:2c:54:00:85:
20:10:9f:48:22:c2:46:84:66:10:22:ff:14:7f:5f:
a9:15:a6:8c:d0:65:6b:d0:a0:3e:c6:1e:b3:65:5e:
5f:c2:8a:62:e6:70:f2:06:b6:05:d3:8d:2f:4f:e6:
26:01:b8:db:d0:84:52:6e:43:c8:a0:a1:9f:1a:7a:
d9:69:2d:67:09:0e:15:65:89:65:ef:bb:a5:cb:e5:
2d:6b:a7:dc:5b:36:60:7f:f3:66:f5:b6:7c:83:04:
d9:4b:a6:38:32:5a:92:7f:c1:20:a8:53:33:f4:45:
45:4e:ed:c8:a3:e7:30:00:b0:3b:99:c1:c3:fe:42:
d8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1B:4B:C6:40:1E:98:0E:57:A6:2F:FC:8B:B3:AE:71:0E:A9:3A:17
X509v3 Authority Key Identifier:
keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:38:b4:c9:cb:a2:da:a5:75:ad:6e:9d:f7:a2:32:97:a8:ad:
42:60:7b:ca:2f:e1:01:1c:aa:7a:ac:a0:12:4b:73:f3:d2:cd:
05:be:88:5f:ac:aa:0b:69:09:d7:33:f6:a4:af:ae:4d:a0:65:
2a:90:6d:e8:9a:00:77:98:42:cd:8c:b0:1c:95:df:a7:bc:49:
59:7c:c4:af:06:d4:4b:fa:f3:79:1b:78:24:af:13:b1:ce:b5:
05:9e:1a:cc:1c:f8:31:18:a7:d0:b6:0d:01:99:c6:28:23:77:
9e:59:09:e9:cf:76:ae:55:f9:fb:8a:cf:98:1a:8d:8d:c4:e6:
b5:18:e0:21:8a:fc:fa:86:10:a6:6d:9d:cb:38:90:6e:5a:19:
e5:b6:d9:fb:6f:20:78:15:c8:83:36:a4:41:c3:98:bc:d7:d4:
6a:6a:ef:a2:32:8a:34:9f:2a:03:ea:26:04:5b:56:53:3a:62:
d6:00:f4:c7:3f:f2:b3:c1:b2:0f:21:34:6e:35:da:c0:54:43:
a1:e4:3f:a8:b0:c0:e2:35:7f:55:70:e1:53:28:05:65:b2:18:
71:f1:06:51:53:a8:cc:5e:8c:2f:d5:54:e4:47:39:4f:66:09:
77:a6:c4:4b:63:c7:26:41:8a:ab:66:e7:9f:6e:8f:86:54:64:
ec:06:7c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:30:25 2025 by rpki-client