Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
File: QftrFwgzUAawpqrGUL-v8_yNKSw.mft (raw, json)
Hash identifier: QhHL0+iXfXq/9jTQkzDyeutKtn19Zzk8altYVtrbpqk=
Subject key identifier: F8:4D:00:45:94:3D:26:51:EA:6E:82:D2:E0:A4:B0:20:CE:15:AE:13
Authority key identifier: 41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C
Certificate issuer: /CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c
Certificate serial: 0196B8C7D0B031A43C7F8E74A9DF2D85896C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 06:00:24 +0000
Manifest this update: Sat 10 May 2025 06:00:24 +0000
Manifest next update: Sun 11 May 2025 06:00:24 +0000
Files and hashes: 1: FmQTGAptfwQVIkuMpg8hJc2vZxA.roa (hash: e7opOpYhedUnony/T0f78z282oNfXK2DZuJyjlY4Q0s=)
2: N5QNqPYfQDsZsb3UbswlkLMUOVI.roa (hash: K+50oxv12Lx2bczUpm74apszZeVkTFLJaHzFVSZLhe4=)
3: QftrFwgzUAawpqrGUL-v8_yNKSw.crl (hash: 2sgyYY5LvrMUHDNq9Wtz8Bu9tzs9Ee0aYLAvZqfi/JE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:c7:d0:b0:31:a4:3c:7f:8e:74:a9:df:2d:85:89:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c
Validity
Not Before: May 10 06:00:24 2025 GMT
Not After : May 11 06:00:24 2025 GMT
Subject: CN=f84d0045943d2651ea6e82d2e0a4b020ce15ae13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6b:6e:95:41:c2:b2:16:bc:45:65:56:e3:cb:
ae:c8:d6:3e:fe:df:db:f1:96:28:db:3d:f6:a7:7e:
f0:e6:be:68:fc:aa:05:a5:2f:da:23:7e:1e:7c:1b:
16:d9:16:9b:5d:ec:ce:38:e8:a3:bc:ae:8b:d7:4d:
f7:9a:89:30:90:6d:15:a0:cf:29:1e:88:b3:03:f6:
ef:48:2f:ce:c6:04:1a:a6:06:3e:b1:85:ac:92:0e:
4e:03:cf:12:99:a5:0b:89:84:bc:60:fb:cf:60:50:
82:1b:d2:55:c3:00:3b:a6:d4:d2:ec:61:59:f4:f4:
c9:36:74:f1:56:3d:9e:a7:da:5c:66:80:7f:fb:67:
e1:a8:ee:c4:dc:d5:08:e0:f0:31:1b:f7:71:96:46:
e1:27:fe:38:77:90:e3:0f:8d:ac:f5:e7:77:cf:59:
de:66:ef:91:7f:2e:1f:b2:a7:d9:aa:4e:9e:f0:a0:
35:c7:86:1a:fc:28:80:78:5c:7f:3a:0a:e2:09:fc:
cb:c2:f9:35:ad:db:76:bf:b1:db:1f:96:cb:83:ee:
56:6f:04:25:66:2a:2c:6d:48:74:fa:10:df:c6:c8:
09:d9:93:5a:34:0a:e7:51:3b:93:15:4f:4f:ee:0e:
35:48:32:ed:39:60:04:9c:a0:29:8b:a1:35:09:5f:
8d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4D:00:45:94:3D:26:51:EA:6E:82:D2:E0:A4:B0:20:CE:15:AE:13
X509v3 Authority Key Identifier:
keyid:41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:0a:2e:b6:1b:4b:86:1d:61:50:a5:02:1e:aa:13:d4:31:3d:
a4:52:fa:08:98:51:44:60:4e:d6:ef:83:8d:7b:df:7f:42:7a:
5d:62:6c:25:31:7f:5c:70:9c:c5:3d:d1:12:7f:67:0f:20:88:
12:83:b5:c1:a5:83:00:fd:f0:0a:d8:31:5e:dc:03:99:40:4a:
6b:4b:77:db:c9:9c:d3:21:38:0f:ff:7c:06:35:31:04:00:b8:
c4:4e:61:80:47:b8:ab:66:f3:4b:ce:01:0a:41:57:b7:c7:fd:
2d:c8:b5:6d:74:34:a3:e8:a2:58:fc:58:43:c7:89:62:b1:3a:
ea:7b:d1:93:45:c1:aa:c3:43:1b:f3:f6:0b:bc:45:37:07:e7:
17:14:d4:af:3d:6f:29:04:99:71:16:a3:4d:0b:e6:46:80:e1:
4e:73:20:27:76:a3:8e:f4:08:a0:56:e7:09:df:40:54:b9:34:
ff:54:a7:10:16:29:21:79:85:7f:3b:d5:31:dc:d3:cc:d1:cf:
de:60:02:a3:77:fb:e3:e6:c1:7b:95:e5:70:bc:13:48:17:ff:
2f:52:63:e4:79:59:74:b1:5e:c2:32:ba:fa:2e:31:21:5a:d2:
7c:eb:79:4f:10:82:71:1e:78:c1:76:80:66:32:17:fb:4a:9c:
5a:19:ab:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:51:27 2025 by rpki-client