Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.mft
File: QPwHKZcRrfoiLiexKLdtHZdFBYI.mft (raw, json)
Hash identifier: /Bpfak/9n+U31GUEUIQgn0zNZNqmAWbMtQ73nqxSOmw=
Subject key identifier: 1D:71:68:3A:89:12:F3:DE:9A:29:AE:01:A1:74:C3:E2:06:4A:A3:B6
Authority key identifier: 40:FC:07:29:97:11:AD:FA:22:2E:27:B1:28:B7:6D:1D:97:45:05:82
Certificate issuer: /CN=40fc07299711adfa222e27b128b76d1d97450582
Certificate serial: 0196CA29557A7C45224FE102409594C6F1CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPwHKZcRrfoiLiexKLdtHZdFBYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.mft
Manifest number: 11E8
Signing time: Tue 13 May 2025 15:00:28 +0000
Manifest this update: Tue 13 May 2025 15:00:28 +0000
Manifest next update: Wed 14 May 2025 15:00:28 +0000
Files and hashes: 1: 6KpfPRVUGyFsCkAEFBqf-wSXAyw.roa (hash: kWhiEuOzAfB/QvRqngqpda0Xfcej2KhLVFQbnAjy7tQ=)
2: QPwHKZcRrfoiLiexKLdtHZdFBYI.crl (hash: h25dROwESIyGaFoyhBbVCdNaW5Rk1XbnT62HZBsBgaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPwHKZcRrfoiLiexKLdtHZdFBYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:29:55:7a:7c:45:22:4f:e1:02:40:95:94:c6:f1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40fc07299711adfa222e27b128b76d1d97450582
Validity
Not Before: May 13 15:00:28 2025 GMT
Not After : May 14 15:00:28 2025 GMT
Subject: CN=1d71683a8912f3de9a29ae01a174c3e2064aa3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5c:c6:ad:88:95:f2:32:e4:10:0f:f0:0a:63:
1f:79:d3:74:a5:21:2e:1c:9b:1d:02:6d:68:d7:fa:
1d:ed:5d:5b:60:ca:07:62:14:58:38:4e:ca:b1:f7:
c4:e6:d7:a2:f9:76:df:38:d6:d3:53:c0:55:e5:de:
6e:d0:e9:55:66:de:b8:4c:7c:7a:35:14:02:f8:36:
1a:54:9f:e0:59:d7:c2:74:30:9d:01:25:22:49:a5:
6a:94:33:cc:3f:36:45:f9:68:99:07:ed:fb:ad:62:
87:ea:e3:62:a5:2f:02:62:c7:bd:f4:5e:87:9f:7d:
c2:27:a8:9c:a5:fc:65:6f:d1:56:9a:c3:65:34:54:
96:8d:97:a4:07:dc:11:ca:08:5c:cb:1c:ee:20:8f:
dd:c2:a2:c5:5e:3d:f9:f0:86:72:19:96:06:4d:8c:
b6:3a:2a:61:ba:8c:8b:0d:c1:09:33:dc:73:e4:41:
68:ce:28:a3:58:0d:da:bf:04:e7:39:01:4f:28:f6:
7f:7e:fa:5a:96:a5:f0:72:df:57:44:4d:83:a9:70:
d1:d7:66:60:2d:2b:36:d5:a9:a8:03:fa:28:fc:f4:
73:fb:44:6b:1f:fc:43:c7:61:b8:e2:cf:7a:8c:7a:
a3:cd:7c:06:17:32:d5:af:8b:00:70:f0:a9:0a:4e:
78:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:71:68:3A:89:12:F3:DE:9A:29:AE:01:A1:74:C3:E2:06:4A:A3:B6
X509v3 Authority Key Identifier:
keyid:40:FC:07:29:97:11:AD:FA:22:2E:27:B1:28:B7:6D:1D:97:45:05:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPwHKZcRrfoiLiexKLdtHZdFBYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b7:f3:6a:a7:63:39:01:53:d0:a7:7d:2e:e7:20:f9:b6:de:
85:a1:a5:3c:6b:98:91:f5:be:7c:78:60:10:7a:34:8c:5d:ea:
17:58:88:86:2e:ad:20:92:7b:13:6a:78:98:ca:3b:3e:93:e9:
56:f7:80:e9:9d:5d:5d:65:4f:a7:39:98:45:e8:e4:ab:27:52:
c7:29:8c:04:67:9e:12:98:37:5a:22:66:eb:5d:b6:55:37:85:
9d:cc:63:10:65:43:8f:62:72:af:fc:9f:3a:0d:ac:ec:5e:e1:
c1:d1:90:fb:38:f0:28:e6:9f:66:00:7f:85:63:f7:67:8d:84:
e3:c5:21:81:fb:ad:46:9a:4e:f9:7b:98:71:f2:51:bc:8f:d5:
4a:f1:aa:38:41:de:ba:04:c6:ea:a1:ec:92:3f:e4:bd:a3:c0:
05:27:6a:29:dd:97:2e:db:32:96:62:17:22:b1:fe:09:84:f1:
39:fc:25:ae:e0:a5:b9:cf:4f:31:ce:7a:0d:bc:33:1b:bc:31:
7d:1a:0c:54:45:bd:5e:1e:f4:ad:86:d1:27:88:a2:8f:44:ef:
aa:7d:72:cf:50:cc:26:67:0c:55:b3:9d:d9:92:f5:53:08:5a:
bb:97:77:1a:17:39:89:db:b6:6b:62:a3:5b:ea:bf:de:ba:4b:
d8:56:86:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:36:44 2025 by rpki-client