Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
File: QCD01MdSjYqCfsckkY_i31NL2QU.mft (raw, json)
Hash identifier: J5nz91BKaC20MuX/DnIDBqWui7V+MjlsPIubOjGoPgg=
Subject key identifier: 7A:00:F7:2B:B8:B9:48:79:27:F7:C6:D0:64:27:EB:35:4D:9F:62:52
Authority key identifier: 40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05
Certificate issuer: /CN=4020f4d4c7528d8a827ec724918fe2df534bd905
Certificate serial: 0196AFC4D0D7B81F6C7449604BB2BC2302F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
Manifest number: 0432
Signing time: Thu 08 May 2025 12:00:33 +0000
Manifest this update: Thu 08 May 2025 12:00:33 +0000
Manifest next update: Fri 09 May 2025 12:00:33 +0000
Files and hashes: 1: QCD01MdSjYqCfsckkY_i31NL2QU.crl (hash: +aGsU/S/Q0asy4+zgL5GWPNqyhJv0BH9hDE0cWsSJhE=)
2: Zx4sEHNKCl_Lh5FzOtQjZYd3ZCE.roa (hash: 2Xu5Qu43xBBRy4X2ZZ8tBlY4rjWAu0V1llrLDaiQerk=)
3: oaLZxtKD66NwRygInPYpaycKqOc.roa (hash: Ja3SjwoX4eh5IRVh7jPL7K8MqCmfJQ9Q/LWhTt+xawU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:c4:d0:d7:b8:1f:6c:74:49:60:4b:b2:bc:23:02:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4020f4d4c7528d8a827ec724918fe2df534bd905
Validity
Not Before: May 8 12:00:33 2025 GMT
Not After : May 9 12:00:33 2025 GMT
Subject: CN=7a00f72bb8b9487927f7c6d06427eb354d9f6252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fd:72:34:6a:2e:97:45:7e:a5:3a:f4:b7:ba:
8d:a0:01:af:42:41:52:6f:a5:d0:5d:9b:30:76:7a:
17:c2:bb:df:90:b2:43:3c:63:98:d4:49:f7:8f:50:
24:dc:b9:48:b5:93:d6:20:02:17:a5:12:70:7d:a3:
1f:ab:10:70:10:10:51:1b:eb:d0:a2:43:90:63:36:
39:5e:93:2c:39:ed:4f:33:ac:12:e2:b6:1e:c4:e7:
5b:88:ee:be:cb:79:fc:b9:c3:06:7c:7d:ff:d7:75:
03:70:6b:5b:4f:aa:bf:0b:61:0e:ea:89:dd:68:24:
f7:52:8c:97:00:8d:f2:ae:36:cb:7a:fb:c7:81:57:
69:62:c9:01:76:83:ac:53:94:85:cb:aa:d1:51:48:
66:78:10:cc:54:ea:c3:66:77:de:ee:bc:95:a6:af:
14:16:49:2b:29:dd:2d:c7:9f:7c:44:14:74:3f:eb:
97:17:8b:d3:a4:a4:e8:53:30:f2:00:a6:75:91:6c:
8d:eb:27:5e:f1:05:c3:56:42:ef:9f:e6:64:c9:75:
fa:34:15:4d:31:f9:5b:dc:ac:87:9c:cc:09:97:66:
56:9f:e1:fc:45:ef:99:a3:ef:5c:50:10:f7:c7:4a:
96:80:c2:f8:ca:1a:52:4c:04:b6:fc:25:50:0b:d9:
89:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:00:F7:2B:B8:B9:48:79:27:F7:C6:D0:64:27:EB:35:4D:9F:62:52
X509v3 Authority Key Identifier:
keyid:40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:bb:26:5b:a9:d0:41:b1:4c:3c:52:78:48:a5:de:ca:4f:f7:
d6:b2:09:d8:7b:8e:af:48:fd:1b:45:5a:1e:1b:b1:ff:06:c4:
c2:89:3d:91:4d:ec:d6:01:b4:4e:51:62:54:0e:3a:4e:7d:38:
2e:a6:50:c1:a7:7d:90:36:56:e6:54:c2:b2:de:88:14:b2:57:
0c:f9:20:98:0d:82:de:cb:c0:96:30:5b:a3:ef:bd:5d:ac:75:
ac:9e:3b:fe:40:13:8c:0d:2c:69:8e:0b:10:78:88:71:aa:17:
e9:e0:44:a7:f1:3d:e4:f1:7d:6f:c7:19:44:74:8c:17:3a:69:
02:5b:27:57:ed:0d:fd:98:5f:e1:9c:6c:33:70:54:b5:e7:c2:
5a:38:2e:c4:4d:96:3b:3b:7a:e0:59:f9:b3:39:e5:92:de:04:
a6:52:ce:62:7b:98:17:3a:0d:6b:85:69:14:88:4d:c3:84:24:
9e:92:77:f7:03:d9:57:84:0a:02:ad:0f:be:f2:2a:ae:a8:32:
9b:4c:0d:4c:4a:ce:2b:62:15:43:b8:23:66:ab:9e:31:d8:b1:
2c:2a:bb:3a:c0:f1:48:44:f7:7a:3b:fe:95:e5:cf:e2:a7:c8:
bc:91:d3:af:10:cf:ad:7e:a2:d5:34:74:09:8b:b5:65:cf:41:
d7:49:27:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 18:34:32 2025 by rpki-client