Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
File: QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft (raw, json)
Hash identifier: P7HGffEv6sYfP1hoFAyUcRrFVHkPSHQfh2GZ0LmHYKw=
Subject key identifier: 5B:6B:12:1F:DD:3F:9F:D0:D4:08:23:7D:D1:1F:D6:32:7F:E2:CD:D8
Authority key identifier: 42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
Certificate issuer: /CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Certificate serial: 0196B7477226CFD78D611666F08B556AE15E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
Manifest number: 126D
Signing time: Fri 09 May 2025 23:00:34 +0000
Manifest this update: Fri 09 May 2025 23:00:34 +0000
Manifest next update: Sat 10 May 2025 23:00:34 +0000
Files and hashes: 1: F6ObM6UnximfbwiH1YL38MiUlBY.roa (hash: FMTxgNBaoS8PjWTC2HJz86nipqDf/pRuOEnb+E3AC9c=)
2: QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl (hash: UjpNJ8Yw0EyeMc6odWVoBC3juhF3kwKZM9bpGVq0J44=)
3: sf13oGu2DAluNtQ_y1zSmgQAeHE.roa (hash: gqTUmbOHfz421/G+vBG6eJTQ7lB+mn9m4coW+T9SV2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:47:72:26:cf:d7:8d:61:16:66:f0:8b:55:6a:e1:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Validity
Not Before: May 9 23:00:34 2025 GMT
Not After : May 10 23:00:34 2025 GMT
Subject: CN=5b6b121fdd3f9fd0d408237dd11fd6327fe2cdd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:1e:38:86:3c:0d:4e:04:c9:32:1b:c7:f5:
6c:da:93:f5:10:13:19:01:bd:9a:bf:14:f3:db:6f:
df:38:db:76:5d:d2:b4:bc:b1:a0:be:47:aa:ff:fa:
6d:35:83:8d:7b:d9:0c:e7:c6:a5:cd:b7:29:9f:0c:
c2:e2:22:3c:2e:db:bd:28:86:80:60:c8:24:25:a2:
19:ea:be:99:9a:dd:8f:75:6e:9c:7c:98:ef:bd:ba:
7b:a0:75:16:d7:d9:e2:08:74:41:b2:f1:6a:80:c5:
68:c5:ee:5d:71:e9:59:ac:f0:00:81:54:71:c4:d2:
ee:09:66:c7:9a:79:db:92:d9:25:07:45:a3:0b:6c:
55:e5:e6:30:88:6e:18:f4:c7:66:34:e2:71:e9:49:
33:49:8e:e6:93:b1:8b:94:a0:33:d4:28:d2:d4:b6:
2b:62:ab:95:de:14:bf:dc:72:12:d7:2c:ce:6c:cb:
9f:3f:dd:73:76:de:38:56:77:5b:07:4b:94:1a:52:
a7:b0:fd:ac:39:57:75:d0:46:4d:34:a5:63:f6:22:
30:8e:f0:44:73:82:ca:0f:53:5c:ff:72:28:92:d5:
27:51:33:5a:fa:a0:f5:7e:8f:a6:14:36:4d:4c:46:
34:a6:b0:25:2b:8e:7a:23:5f:d3:99:89:cd:a7:8e:
b9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6B:12:1F:DD:3F:9F:D0:D4:08:23:7D:D1:1F:D6:32:7F:E2:CD:D8
X509v3 Authority Key Identifier:
keyid:42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:40:03:0c:04:09:31:62:cb:61:46:88:b6:7e:da:b2:8d:90:
c2:65:ba:9b:e4:ff:16:09:7c:e8:ac:d8:6b:d7:c3:bd:bf:50:
e2:47:3a:32:fd:7e:92:c8:75:61:ab:1e:68:f4:3d:85:a1:90:
f4:d3:c7:65:36:a8:09:7b:6b:f9:00:e4:38:23:53:23:16:26:
5a:f3:27:77:5f:26:99:34:f5:2e:c4:31:72:51:af:3a:02:c9:
2e:91:66:6c:78:c2:1b:d1:6f:bb:12:67:c6:5d:dd:d1:7c:d1:
8d:cb:46:f5:95:0b:80:44:fb:b9:60:12:4a:eb:c4:20:cb:bf:
85:0b:26:9a:9e:23:1e:11:51:a3:92:24:58:e4:9e:73:65:dc:
63:14:26:d4:39:5f:78:e9:a9:b6:43:6a:7b:02:49:c9:8c:e5:
b9:dc:74:f8:1a:48:f3:b6:e5:09:b3:f7:70:6a:56:ab:3a:d6:
07:3c:c2:e0:bc:e7:38:9a:54:83:64:02:18:44:a8:ec:3c:34:
60:10:37:63:7c:75:d2:4d:07:37:32:eb:00:03:fe:8d:a8:a1:
ba:4a:8d:68:35:3f:17:ee:59:cb:97:3d:f8:35:cd:69:85:b7:
9c:91:ce:c6:4f:51:a1:a4:08:0f:14:5a:45:bd:89:c7:00:43:
50:36:8b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:16:04 2025 by rpki-client