Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
File: QwFWVAgleMSUbNJ74eiaPddWL6Q.mft (raw, json)
Hash identifier: ChftIeE98S6viffYSnxozpIFGsOsSEH/SC9ENsXJWI8=
Subject key identifier: 5F:4F:05:7B:E6:25:0B:21:DE:69:25:5A:98:3C:89:C4:FC:1A:C8:5D
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 0196AF2046B4993765EC20537AC32CF22751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
Manifest number: 153A
Signing time: Thu 08 May 2025 09:00:50 +0000
Manifest this update: Thu 08 May 2025 09:00:50 +0000
Manifest next update: Fri 09 May 2025 09:00:50 +0000
Files and hashes: 1: 3eQ1S8uuA5rjKr45UcvylppbYDU.roa (hash: vQeG0u4yjs22R45FJRm/clzO1Z1gNnp6n1vY2dqT/jk=)
2: QwFWVAgleMSUbNJ74eiaPddWL6Q.crl (hash: 2R8R5+TqckykiXBlRbO/zTSljhSVAYumNVpV51+hj+M=)
3: v1Pwr5xvdbbmpnihx2cCK9c0-pk.roa (hash: cRnPjj7eiLAD4lbp2VFMgeLmxV7rEoy5VNzAeh72O+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:20:46:b4:99:37:65:ec:20:53:7a:c3:2c:f2:27:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: May 8 09:00:50 2025 GMT
Not After : May 9 09:00:50 2025 GMT
Subject: CN=5f4f057be6250b21de69255a983c89c4fc1ac85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:54:4c:6c:e2:a2:f1:15:d6:88:1b:9b:1e:
4f:8c:3e:79:94:c9:d8:0f:91:e1:ec:93:36:e1:99:
48:45:8a:11:dd:31:4f:5b:64:ba:19:4b:c0:4b:de:
bd:77:02:64:07:4e:9a:fa:9d:bc:f2:e4:c1:79:c3:
d4:b1:8f:62:df:ca:40:a8:7d:77:7a:9c:21:3a:68:
03:ba:73:8a:16:41:66:b5:58:2d:3c:bd:40:25:cb:
18:72:b6:80:5b:f2:6a:de:08:25:a8:86:bb:e6:74:
6d:f4:2c:ff:ac:97:80:f9:47:3a:c5:af:79:1d:00:
37:af:3a:9a:3d:3c:88:2c:d3:3d:c8:60:16:2f:da:
e8:80:6d:5e:2b:21:58:73:80:bb:2c:c2:75:c7:f9:
90:3a:df:61:f0:e0:c2:5a:38:ab:17:e9:fc:2a:50:
ea:85:1a:bd:85:e6:2a:c1:56:19:44:95:4a:06:1f:
51:b6:63:62:02:5f:69:c2:2f:f0:1a:0f:2e:a4:bb:
b3:23:fd:fb:1f:ba:a6:c5:36:e4:48:3f:1f:05:1b:
b5:33:34:e1:66:8c:12:8d:0f:97:db:47:7a:2b:b6:
c5:8a:25:64:e7:c4:c5:4e:5a:4e:b0:bb:21:b4:c4:
e1:64:c9:ab:0a:40:4c:d2:45:33:49:88:59:5e:74:
cf:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4F:05:7B:E6:25:0B:21:DE:69:25:5A:98:3C:89:C4:FC:1A:C8:5D
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f9:aa:fe:53:40:47:f6:73:11:ef:89:6a:49:8d:68:71:3a:
12:b9:2e:13:74:9c:14:79:86:02:26:e4:d0:5d:5f:02:ab:35:
c7:6a:71:ea:8a:7d:02:fb:e3:e2:12:58:e7:62:f9:7d:6f:8f:
c2:79:70:a2:09:af:dc:44:20:6e:60:54:4b:48:85:6f:bf:39:
b6:b9:e9:6f:75:73:cc:13:81:d6:8c:8b:6c:85:77:df:89:d3:
e9:81:20:3f:98:63:9f:6b:88:cb:3f:db:bc:3b:66:e3:9b:90:
fb:0f:61:47:5a:ca:fe:d1:10:69:88:07:38:33:88:9b:66:2a:
20:9d:39:76:f6:b1:c3:5a:dc:17:40:fa:d9:9e:b6:a5:ba:28:
65:d8:5e:65:bf:88:01:a2:55:a2:24:51:f0:c1:b8:9f:e2:cc:
c7:3c:4b:0c:30:a2:af:c4:65:69:99:e4:a7:8d:b2:36:b9:1c:
57:92:25:81:c2:14:2a:76:49:3c:1f:5f:f5:f2:46:5e:a5:87:
a8:9a:a6:6d:06:cf:9e:57:b2:df:0e:97:b6:21:54:a2:6f:b2:
20:a3:a1:00:6f:97:5b:06:83:75:96:4c:09:a6:a8:0c:98:e5:
cb:9c:86:4e:8e:39:c4:f5:35:a3:ac:d9:d0:1a:2b:a4:83:ff:
8f:c0:b4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 18:05:10 2025 by rpki-client