Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
File: QJgXTbRR2f797sFfm5x5KdqumYA.mft (raw, json)
Hash identifier: qPCQ1W4+cLpfaVF9MsRxNGIh8/n8Z2swwxImyUc4YR4=
Subject key identifier: 4E:D5:E0:6D:C0:02:BE:7C:9F:19:92:04:D7:EE:46:02:86:BA:71:AD
Authority key identifier: 40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
Certificate issuer: /CN=4098174db451d9fefdeec15f9b9c7929daae9980
Certificate serial: 0196AA307563ED9C06271C94BFD0A23DC2ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
Manifest number: 1528
Signing time: Wed 07 May 2025 10:00:24 +0000
Manifest this update: Wed 07 May 2025 10:00:24 +0000
Manifest next update: Thu 08 May 2025 10:00:24 +0000
Files and hashes: 1: QJgXTbRR2f797sFfm5x5KdqumYA.crl (hash: oZd5S+8pMvTQE8aRkoWjvs5X9lFxDFwdHEjPu1LjQqU=)
2: VEtZZf9DCZWbNoKnf7FdIgrreS8.roa (hash: TCBg4X7Dp/mq95gKrBY1sBflsLJVUkpMXJtFn3JhtO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:30:75:63:ed:9c:06:27:1c:94:bf:d0:a2:3d:c2:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4098174db451d9fefdeec15f9b9c7929daae9980
Validity
Not Before: May 7 10:00:24 2025 GMT
Not After : May 8 10:00:24 2025 GMT
Subject: CN=4ed5e06dc002be7c9f199204d7ee460286ba71ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d7:49:73:89:ae:94:34:d4:46:25:8e:e1:8d:
14:c0:ef:fa:67:2b:5a:8d:68:86:1b:6f:9b:ca:d4:
65:18:b0:de:d5:0a:fc:95:16:90:cf:1d:77:58:65:
6e:2e:58:4a:b5:b9:a4:d2:b6:c9:b4:11:d3:69:70:
7b:99:a1:a8:61:bf:66:7f:ec:f9:c9:3d:4d:15:30:
1f:d8:a8:b0:f4:21:2a:f0:7b:ae:45:be:13:8f:37:
a4:c5:29:d9:58:48:48:b2:5d:08:f4:eb:86:c0:bd:
bf:d9:d0:5c:cc:cd:4b:22:a7:62:05:99:b2:e0:56:
b5:20:45:82:c2:94:47:ab:b6:71:16:95:81:74:2f:
23:ce:3b:a2:2b:44:3f:20:c3:c3:4a:ac:a0:a2:f6:
d3:fa:e4:bd:17:22:a3:2d:6b:4a:1d:b2:50:b9:f6:
3f:b0:9b:6d:c1:7a:50:bc:16:5d:a7:be:11:79:2f:
05:fd:4b:f3:76:09:60:ba:95:43:77:e1:6e:09:4c:
8c:67:86:4d:1f:8c:4a:5d:1d:d9:72:02:f5:72:72:
25:96:06:12:db:6d:5a:2c:29:3b:76:27:32:c7:26:
2e:ad:7f:0b:a1:e6:ea:9b:0e:c9:c8:14:01:9e:74:
cf:44:8b:97:15:f1:7c:ab:85:4e:18:97:e1:2e:f6:
f4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D5:E0:6D:C0:02:BE:7C:9F:19:92:04:D7:EE:46:02:86:BA:71:AD
X509v3 Authority Key Identifier:
keyid:40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:50:82:80:45:dc:bf:39:b8:11:6a:c5:02:09:9f:db:0f:d9:
9e:82:52:f5:03:a2:c6:75:bb:c7:7e:3e:f3:c4:41:03:58:f7:
39:30:fb:09:df:8f:fa:af:03:5c:55:09:a1:ad:f4:89:1a:48:
2d:4c:62:2a:72:ac:a7:fb:1d:5b:9f:1f:1d:8f:85:12:d6:47:
74:76:c7:81:6f:c8:83:6a:da:b8:df:09:34:ac:1b:44:56:05:
6e:29:c4:cb:aa:0c:a7:c7:2d:78:75:fb:bf:5f:f5:5b:98:8c:
14:83:6f:7d:f2:15:f6:9d:d6:4e:4c:56:78:87:be:e5:9b:44:
17:fd:fd:89:8e:b6:b4:e5:62:97:bc:0f:07:d6:ab:1d:62:d8:
57:c6:60:80:de:bb:0c:c3:e4:25:42:5c:e9:4a:fb:db:25:2c:
67:e2:09:d2:2c:7d:9a:6c:50:dc:2f:72:de:03:bf:53:b7:6c:
11:6b:d8:a2:eb:ae:54:e3:f9:96:7b:64:f5:bb:15:ec:64:71:
3d:ff:b0:5b:65:a0:d2:d9:c7:be:5e:56:10:a2:61:78:03:b5:
f0:ff:0c:5b:ba:3b:c9:f3:07:24:62:20:21:68:ff:11:68:35:
2c:7e:7f:b8:23:7a:60:51:5e:52:be:20:93:d5:9d:a1:ae:d5:
c6:33:29:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 17:59:32 2025 by rpki-client