Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
File: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft (raw, json)
Hash identifier: QaiDckzlZYknnUlyUeKngaVWzBxGX7+bKW0NKcG620w=
Subject key identifier: DA:14:99:48:16:48:DD:A3:4D:FD:E4:3F:C1:26:F6:6E:A6:AF:9F:4F
Authority key identifier: 42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA
Certificate issuer: /CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
Certificate serial: 0196BBC8D9CBBF693CA2CC4CA74991474199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
Manifest number: 09C5
Signing time: Sat 10 May 2025 20:00:24 +0000
Manifest this update: Sat 10 May 2025 20:00:24 +0000
Manifest next update: Sun 11 May 2025 20:00:24 +0000
Files and hashes: 1: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl (hash: CkPi8+3aPEvScOowO3kNNpEhiRqU9HFttbb+QKWcYGQ=)
2: Y5evNC6nSTbaw2HNqlP-IIa_w8w.roa (hash: bcLU6wxFqb3pGDabhdJfOsSNGRX1c39YDi9EFe9onLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:c8:d9:cb:bf:69:3c:a2:cc:4c:a7:49:91:47:41:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
Validity
Not Before: May 10 20:00:24 2025 GMT
Not After : May 11 20:00:24 2025 GMT
Subject: CN=da1499481648dda34dfde43fc126f66ea6af9f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:40:94:d0:98:48:2b:0c:80:c7:04:ad:6e:86:
5a:c7:35:ef:df:cc:1f:b3:5b:ba:10:cc:ce:b0:0d:
9d:9f:93:7b:6b:70:be:85:8c:14:86:79:46:50:8c:
88:b0:b0:38:c9:78:7d:d9:93:66:75:83:2c:0f:b8:
a4:21:de:15:0f:cb:e3:24:89:8f:22:3c:ea:3e:da:
c1:ec:00:16:60:96:ca:6a:7f:2b:b6:07:65:68:f8:
58:cb:5b:68:a8:be:09:61:a9:0e:45:c0:83:11:94:
e7:4e:4b:98:a1:cb:38:0f:63:c6:35:cb:34:3e:51:
00:a2:da:df:25:d1:57:38:c6:4a:64:a5:b3:00:c6:
29:cf:55:23:58:59:2c:19:0f:35:bd:b6:4d:33:e7:
36:4b:13:14:c1:73:c2:80:6a:24:a0:64:79:f1:1f:
4b:d3:ae:68:03:10:d0:fb:75:18:13:22:85:47:a3:
2e:60:50:71:1f:8f:03:dc:27:34:89:a2:bb:e2:a9:
52:02:78:e5:f7:96:0c:f8:7e:e7:46:b9:37:16:85:
62:e7:35:f0:76:91:e8:09:74:06:19:cb:ff:e0:c0:
fe:df:f1:67:0d:c9:0e:96:b0:7d:d5:99:4d:0f:e5:
6e:a5:02:37:3b:a3:22:b7:ff:e4:eb:cf:68:e1:40:
07:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:14:99:48:16:48:DD:A3:4D:FD:E4:3F:C1:26:F6:6E:A6:AF:9F:4F
X509v3 Authority Key Identifier:
keyid:42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:2e:45:54:38:bf:d1:07:a0:a6:cf:a0:34:18:fe:71:96:61:
ee:c0:ee:21:4b:25:03:94:e9:15:ed:1e:d2:55:05:77:47:c7:
12:f7:25:41:cf:de:2c:cc:ae:98:9d:46:13:99:f0:ee:7c:8d:
55:19:06:54:ef:f8:2b:35:08:5e:75:e1:65:c2:45:22:c3:f5:
56:5a:4e:f5:90:e0:e7:9d:a0:c6:bb:3f:1b:41:3d:42:62:dc:
85:aa:aa:0a:62:35:d9:9e:d4:28:c7:42:12:90:bf:eb:14:c7:
62:17:05:35:f3:26:13:31:e9:a7:7a:40:79:50:41:75:0d:f5:
d5:23:47:a5:cc:8b:3d:2b:24:6f:bd:84:87:15:51:cc:b0:99:
ab:cf:cc:5b:87:c7:05:70:30:0f:d2:f8:c6:9c:be:03:27:03:
bf:5d:cf:be:4d:9f:75:13:fc:cf:06:45:03:47:d4:24:ac:fe:
c0:32:78:77:de:e5:09:ba:6c:b4:16:ec:e9:73:fd:28:1a:46:
90:b9:ec:62:45:a5:ea:72:ef:82:a6:53:c0:cd:56:53:51:b4:
d3:c2:55:c0:85:18:5c:2d:ed:4d:70:aa:b4:29:02:c0:d0:1b:
42:a6:e6:7d:c6:7b:db:cc:3a:6d:4c:1e:ae:8e:46:27:63:39:
fb:eb:6e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:03:52 2025 by rpki-client