Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
File: QhFndK-17RrJkmsLwtV_i4BYs-c.mft (raw, json)
Hash identifier: 3/59Bh7vjAgxU0P42zcqfNOEBpvs11/s99wVgf0jOng=
Subject key identifier: 39:07:25:1F:79:FA:20:23:7B:30:0F:0E:FF:5B:06:A4:65:6D:84:16
Authority key identifier: 42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
Certificate issuer: /CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Certificate serial: 0196A19B903A075D5F0360742EB6DD18C990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
Manifest number: 1175
Signing time: Mon 05 May 2025 18:00:48 +0000
Manifest this update: Mon 05 May 2025 18:00:48 +0000
Manifest next update: Tue 06 May 2025 18:00:48 +0000
Files and hashes: 1: QhFndK-17RrJkmsLwtV_i4BYs-c.crl (hash: z83CVThjVoq/pmTlHfeOBlzUbkyXrr3vIsdpSE3mIhQ=)
2: v4w1l1in0yr2EsXsMhwK7smhe5c.roa (hash: 7H5QERbsex398Y/VCrt/sp2Qpj6rfwjWtrt7q4PvQAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:9b:90:3a:07:5d:5f:03:60:74:2e:b6:dd:18:c9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Validity
Not Before: May 5 18:00:48 2025 GMT
Not After : May 6 18:00:48 2025 GMT
Subject: CN=3907251f79fa20237b300f0eff5b06a4656d8416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:86:c6:2e:6b:3c:fa:fa:fb:fd:82:1a:66:de:
58:af:99:b7:20:58:17:f4:e6:6a:32:8f:8a:67:ff:
e3:cc:32:55:ab:e1:f4:a1:1f:a5:0d:fb:6d:4f:52:
68:5e:14:6b:37:e5:99:0e:75:fc:c4:66:e3:6b:39:
e5:34:db:f9:80:e6:bd:35:11:1b:2c:0b:8b:a3:1b:
11:12:68:9f:d2:96:5a:aa:af:3f:07:ea:73:27:f8:
d9:9f:66:d6:06:b9:75:23:32:2b:ad:8b:00:50:08:
f9:eb:8e:dd:ff:4c:50:fe:9a:ef:c8:14:a0:06:d7:
15:b5:ae:a1:50:b0:10:f0:93:0a:c8:da:c2:1d:ab:
ee:b1:2f:fc:36:2f:3e:63:83:38:de:76:81:2a:4e:
fe:81:a9:54:a7:cf:88:5a:b4:d7:f8:6f:e9:69:36:
33:ad:b7:30:d0:ac:5c:de:83:3d:26:f0:81:bd:df:
2f:ba:92:77:68:6a:33:7e:6f:0d:e2:b1:0c:ae:14:
e2:41:42:52:4e:97:c7:6e:4f:72:ae:a7:8f:ab:df:
50:af:27:51:45:5b:95:9e:77:e8:b6:2c:16:d4:17:
de:73:ed:28:b9:ff:ea:be:ea:1e:09:74:08:56:fa:
c8:e3:23:01:d0:27:b1:97:80:a6:e5:90:c7:e7:6b:
41:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:07:25:1F:79:FA:20:23:7B:30:0F:0E:FF:5B:06:A4:65:6D:84:16
X509v3 Authority Key Identifier:
keyid:42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:34:db:10:49:26:79:60:0d:1b:9f:91:fd:51:a6:66:ba:0d:
7c:d2:38:d8:13:d7:3a:48:b4:7e:45:82:09:1f:c9:af:91:1f:
e0:b4:4d:42:2b:96:f1:31:1a:25:49:fa:23:60:6f:19:34:d3:
ba:73:a4:cd:69:59:4c:51:e9:f7:f4:cb:b2:9b:9d:77:1f:57:
08:f3:cc:d0:0b:55:38:3c:95:e8:ba:92:a3:12:59:b6:58:cc:
c1:8a:96:f0:ef:b8:94:30:55:d3:48:61:2b:1e:fa:ac:f9:46:
56:c8:e8:25:80:ab:d3:9d:c1:17:5c:e8:38:c3:ee:c2:0c:2d:
5d:8b:18:86:d7:cd:41:34:5a:9a:01:f8:24:f3:03:13:06:20:
63:9d:58:a7:77:d3:5d:1e:d4:32:b1:0c:86:14:7c:81:ac:03:
32:60:93:a1:23:24:7d:3a:de:b0:e8:26:8b:a8:81:4f:7a:b1:
ca:3e:57:6c:4d:56:95:7b:97:22:df:43:e4:94:f6:79:a7:cd:
3e:6c:f6:65:59:67:ba:4f:68:5f:b2:36:4a:72:1d:01:80:bf:
5c:a0:f4:b1:76:91:f6:22:df:eb:e0:33:d8:34:e2:82:17:9d:
b0:a0:ca:a9:cb:29:ea:5d:89:b7:84:e0:95:7f:97:0b:32:02:
d8:f1:99:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:20:19 2025 by rpki-client