Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
File: QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft (raw, json)
Hash identifier: zv10qnNmNQqhuBZCPe3ShHE+11ohP9azcgPKLODKoFY=
Subject key identifier: 19:55:5C:FD:16:58:0E:19:7F:58:E3:5F:B9:55:32:E3:C6:B1:33:62
Authority key identifier: 40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
Certificate issuer: /CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Certificate serial: 0196A389AC2C2A09DBE1292211559940CAF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
Manifest number: 0CB7
Signing time: Tue 06 May 2025 03:00:30 +0000
Manifest this update: Tue 06 May 2025 03:00:30 +0000
Manifest next update: Wed 07 May 2025 03:00:30 +0000
Files and hashes: 1: GQOl6LTvNyPMyG3KjW9Ajp0Bvpw.roa (hash: eZX/fpaYpvDnXloavaVJKtIU2XKfpzNfzwR74TFia7o=)
2: QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl (hash: 9GJN76CKrFJqKuCQ8hhYFZSOPwgd24gyxHYh3oqpnJQ=)
3: b5Ug6NPJo2XtezY8UVzxnmPE-i0.roa (hash: VB+B1HYKvDBDwa8bPpxYYXoTuHADEZJRpgBpaSqbPu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:89:ac:2c:2a:09:db:e1:29:22:11:55:99:40:ca:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Validity
Not Before: May 6 03:00:30 2025 GMT
Not After : May 7 03:00:30 2025 GMT
Subject: CN=19555cfd16580e197f58e35fb95532e3c6b13362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ae:fc:ac:21:64:f7:fd:08:57:8a:ee:01:f0:
78:c6:95:07:ab:94:f4:41:d3:69:09:97:ff:0b:39:
a5:7f:f3:48:a9:0b:73:e6:ac:2d:5e:3a:21:7a:0f:
24:4d:ae:8f:b2:21:47:55:e6:e9:50:f9:1c:54:1b:
b5:23:9d:5f:ea:52:ba:e7:de:0a:75:21:39:09:e3:
82:be:74:ae:bc:5f:cd:33:23:d1:d1:33:49:a2:30:
35:d1:ae:42:8b:32:ab:68:1a:36:c3:e1:75:9e:89:
e1:60:4b:12:6a:bc:20:54:6e:9d:39:c1:87:a1:b7:
eb:3d:2f:55:96:08:e9:bc:1c:60:29:96:4a:dc:9b:
ef:22:2f:2f:f8:0a:1b:80:bc:e3:9d:22:76:06:4f:
e8:c9:7b:2f:be:9b:33:e6:69:b6:6a:5c:fe:e4:4f:
51:39:6f:ac:4e:ce:e7:28:4f:bf:1b:f6:8f:40:25:
71:2a:d0:ac:95:69:d2:a1:fa:11:eb:52:dd:62:15:
3f:d4:a8:e3:e5:96:3b:12:71:6e:ec:d3:2f:30:25:
0c:25:45:58:3f:67:41:67:c1:5f:79:ff:e7:f6:8d:
39:d8:d0:1a:ec:15:c1:b0:4a:ac:df:92:73:ee:db:
64:6b:3c:e4:e3:29:f1:47:d2:84:31:8b:71:c5:bb:
f6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:55:5C:FD:16:58:0E:19:7F:58:E3:5F:B9:55:32:E3:C6:B1:33:62
X509v3 Authority Key Identifier:
keyid:40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:9f:d8:17:16:52:f9:4f:4c:c4:aa:3b:06:bc:2d:90:d3:ac:
cf:35:7a:7d:e2:a0:30:b1:a0:5f:5a:7d:63:28:0e:f6:bf:fd:
0f:e6:64:16:5b:f5:ee:e2:90:6f:d5:26:25:c8:58:e2:db:c2:
7b:b5:f1:2a:1f:95:f3:76:4c:14:3c:3f:30:7f:64:3e:a1:eb:
10:cf:68:a3:14:2e:70:a8:8b:04:56:8d:13:59:8b:05:40:df:
43:73:99:1f:ad:25:ef:7d:de:08:93:03:97:10:7d:d4:d2:0c:
f4:67:e9:c1:23:cc:42:31:e0:d7:da:40:70:2b:87:e9:71:62:
51:ba:09:d3:27:44:86:4e:02:82:fd:8f:69:60:1f:5a:39:fb:
8a:94:7b:2f:b5:4a:7c:d0:a0:a3:85:3e:b4:ac:d1:12:d9:74:
69:7e:12:d3:0e:da:19:2c:1d:0d:fc:ce:4d:c2:40:24:43:b7:
6d:c8:dc:16:76:df:cf:a4:c6:38:b6:36:31:22:96:66:b3:7f:
4f:a3:87:e9:f1:cc:7d:e2:ce:ee:cb:0e:d0:83:7c:53:56:62:
35:04:d9:89:41:e8:79:65:b1:95:0e:e2:fa:84:b7:38:42:8b:
88:06:0b:c9:c6:99:6f:fd:b0:cc:7a:b0:ba:ab:f8:5c:50:68:
65:5d:f4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 13:32:10 2025 by rpki-client