Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
File: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft (raw, json)
Hash identifier: yNQ9DTYxbQA/JlX3/Ynr69dhuzCxTQwP+Py+G3vrUzY=
Subject key identifier: 6A:68:81:8B:D4:9B:48:8F:23:AA:04:C8:2A:41:B2:CF:E0:0F:74:FF
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 0196C1CB058879637A9D1DEE03DD44647895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
Manifest number: 11A9
Signing time: Mon 12 May 2025 00:00:29 +0000
Manifest this update: Mon 12 May 2025 00:00:29 +0000
Manifest next update: Tue 13 May 2025 00:00:29 +0000
Files and hashes: 1: G3gmpYNNP9JYrhaqiMsAU_EbEhU.roa (hash: JYCLWmpn2x1tQh9BdgAPsoxEsKAREWa0Chd9mMo9Jyk=)
2: P8r0bc3cljmCfBx136KPQShS3O8.roa (hash: zmPirJcGZiuowifL5CV0/efp4MLtVscwhTPAYNjTuUI=)
3: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl (hash: cIZQrF0LxX6WvvBnG1hI1oX/fy5s/3SLpn+nDFlc678=)
4: UEolp0R-hRHKGcTNGe0AoFHIQN0.roa (hash: MIhc/4dE+vXix8ModKbHmu/83XSuv98iPqMBE/1dwmU=)
5: Z4jvQpNliqhDur0DLqjSiIw-Y0A.roa (hash: DfQMPGoZNssvuxBrhCXJLfOHeuzlWhIa//2s8bwFkhw=)
6: bNTthk-6VNC8BPqO0CXb0wpv7Ko.roa (hash: U+k7jHV+TEaRK88+v5GTKPK+suUq7iPi4AwDl7BFsh0=)
7: zMd7m5mxh6U6DbEOt4OgQ4iJ1U0.roa (hash: bhC49t061SBKpaBxLjJKGavc/n4xCA6rE46xrsPt5jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:05:88:79:63:7a:9d:1d:ee:03:dd:44:64:78:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: May 12 00:00:29 2025 GMT
Not After : May 13 00:00:29 2025 GMT
Subject: CN=6a68818bd49b488f23aa04c82a41b2cfe00f74ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4d:0b:7a:37:d1:5c:f8:a4:7b:1c:10:33:67:
01:4d:dc:70:3e:6a:03:c7:ad:5d:84:21:21:2f:10:
29:60:fc:47:c7:a6:bc:c8:dd:fa:02:99:d3:3b:ad:
75:83:a5:a8:f9:6a:2a:1a:b0:3b:06:69:5a:37:ee:
d8:e5:9a:ca:af:7b:54:8d:64:df:62:01:a2:06:28:
d1:d2:19:23:80:77:8c:b3:68:73:c8:b0:3f:d4:50:
6d:15:c8:b4:45:f1:e6:ce:02:c2:46:d3:47:f3:40:
57:38:1d:31:d5:90:68:99:2c:f6:14:1a:b3:47:1b:
4c:e9:3e:8d:62:32:9d:e2:b9:bc:03:84:7a:25:1d:
b7:c1:ed:f1:85:40:2b:1b:51:6a:fc:89:d1:ec:a3:
16:0b:53:c9:42:ab:22:39:ef:cf:2e:f7:86:41:c2:
8d:75:ed:3c:ad:54:27:9d:49:b4:83:e3:c1:bd:b8:
d1:25:0b:2c:39:26:0e:c3:77:6d:6c:2b:53:d3:92:
fa:fa:ed:96:f7:f4:c8:aa:67:b3:13:13:e1:56:2d:
9e:0b:cb:a8:fd:a6:c8:c0:0a:6c:9d:75:5f:dd:a1:
95:85:3c:e4:9c:d8:0c:41:1e:69:d3:1b:24:4f:b6:
22:fe:b0:c9:01:69:5c:26:29:44:5f:c0:f7:99:1b:
64:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:68:81:8B:D4:9B:48:8F:23:AA:04:C8:2A:41:B2:CF:E0:0F:74:FF
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9a:f6:16:f5:4e:0d:a0:3c:4e:90:9e:b9:ac:35:df:03:03:
a6:60:e6:f6:9d:91:70:cc:36:f4:1b:87:13:62:3e:62:bb:b2:
3c:59:60:bd:b9:35:f2:98:2e:6c:90:89:63:51:d1:ab:dd:db:
5d:86:fd:00:6d:b8:13:6c:45:5b:7b:38:70:0a:77:86:61:b4:
2a:5c:7d:5d:7c:94:e9:cf:01:94:83:e6:aa:ae:4a:54:9a:64:
01:17:42:41:79:92:3e:39:53:73:a4:44:cd:60:36:c4:ea:4c:
68:75:da:fd:b3:3d:1d:fc:dd:06:11:42:3b:41:a9:b6:28:47:
7c:29:3f:05:f7:20:07:68:44:66:34:55:da:c0:35:9c:0f:2f:
09:8f:25:e0:62:6e:a1:3c:40:ee:b7:be:13:a8:e5:4f:e3:93:
6a:0a:3a:76:70:98:64:3e:27:bf:98:65:c7:10:b9:20:4c:e1:
64:37:5e:9d:2b:f1:a2:c9:b1:5e:fd:84:b0:11:b4:06:aa:38:
23:3a:d5:7d:5c:57:49:58:3d:70:7e:e7:d1:23:a2:85:d4:ec:
17:fb:a6:95:03:3e:c7:cf:ec:ef:a7:50:04:6f:40:b9:f7:d3:
ec:4c:b0:a6:e0:e1:85:0b:80:59:00:16:86:a9:85:0f:d4:60:
55:a5:ca:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:02:57 2025 by rpki-client