Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
File: QKJJ6t6yqSj-DC51yRgki1oaKLk.mft (raw, json)
Hash identifier: 9ULE1UG51dqGNQ5Y4jIj8ZVFz/nhc4YFuJQaJLEpWJk=
Subject key identifier: D2:A2:9F:CE:E2:A9:36:E1:46:D3:05:1F:D0:1D:DF:0A:AA:A2:79:F0
Authority key identifier: 40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
Certificate issuer: /CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Certificate serial: 0196C1CB96B5993846DF46EB04FA8F13113E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
Manifest number: 1535
Signing time: Mon 12 May 2025 00:01:07 +0000
Manifest this update: Mon 12 May 2025 00:01:07 +0000
Manifest next update: Tue 13 May 2025 00:01:07 +0000
Files and hashes: 1: 944hLyq4lZEVAFInZE509HNE3dY.roa (hash: u1nybjv+YghCeLuvRCrpHUYvYfZKGq/DNrzwKmuq+cA=)
2: QKJJ6t6yqSj-DC51yRgki1oaKLk.crl (hash: 6h3MqMZ1MM6MoMzx2WPts7N9rtawYEuLlIGFbix3KBI=)
3: sxEbMVXxezgFHIuSSYFInfXpizE.roa (hash: ZwybRY1zu9AemOu7O2YllM3HQ5PSxj94bjs9pLEXpyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:96:b5:99:38:46:df:46:eb:04:fa:8f:13:11:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Validity
Not Before: May 12 00:01:07 2025 GMT
Not After : May 13 00:01:07 2025 GMT
Subject: CN=d2a29fcee2a936e146d3051fd01ddf0aaaa279f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:95:ac:d4:22:f1:97:f3:e9:ca:d8:5c:69:f5:
b5:cd:1d:5b:35:83:cf:ee:89:69:31:e9:cf:98:dc:
b9:2b:de:d3:7c:8d:2b:5b:3a:ec:f0:13:43:78:64:
38:19:4a:94:13:cc:d9:9d:90:87:aa:f8:3e:43:c5:
6a:f1:6f:82:3d:a1:97:9d:f1:66:5d:e2:12:2c:f0:
02:26:d6:6d:89:50:4a:5d:06:3b:1b:09:f7:15:ef:
f4:89:4d:03:63:83:46:a6:a3:d0:d4:4a:26:56:b4:
1d:85:ba:3f:0d:a5:0a:1a:13:da:e5:da:90:3a:7c:
d4:f9:7f:73:7b:c7:10:00:e7:b6:aa:c2:5b:73:be:
4f:84:62:47:69:56:39:04:bd:0a:71:bf:42:a3:6d:
4d:7e:88:4d:de:e2:e7:58:2b:30:8b:2f:42:df:99:
eb:c1:df:bd:ea:6a:4a:e2:c1:1a:e7:7e:99:ea:52:
dd:ef:a3:cc:c9:75:17:32:93:ec:c6:85:0b:6c:f9:
d7:43:43:f3:21:28:52:3a:02:7b:3b:1d:bb:56:d9:
24:ad:7c:59:b9:b5:99:33:f0:c7:7c:5f:26:3e:b8:
05:64:30:5c:d4:47:b6:2e:f2:d2:35:6c:fa:a2:74:
6c:45:11:bf:22:b0:55:16:1f:d3:84:4c:5c:24:0f:
1f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A2:9F:CE:E2:A9:36:E1:46:D3:05:1F:D0:1D:DF:0A:AA:A2:79:F0
X509v3 Authority Key Identifier:
keyid:40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:1d:db:7b:30:89:04:9c:36:96:ab:34:7f:e0:41:1b:9e:91:
26:d7:fc:cf:39:79:db:5e:30:3e:46:a8:51:28:b4:4b:af:62:
3e:ac:9a:a0:11:d7:1b:95:7a:dd:d9:24:07:d6:d7:77:a1:75:
31:d3:2c:9d:41:4e:ea:89:b3:47:6d:0f:74:20:c1:1c:be:b9:
f7:11:cc:42:ee:19:6e:77:60:92:75:fa:42:8b:c3:32:a7:25:
6f:09:a0:4d:fd:8a:f3:38:af:ac:ad:b7:3b:d4:7c:c1:05:c0:
30:7b:22:b5:18:4c:76:6c:0b:52:3a:40:29:db:34:66:20:2d:
6d:b7:2e:71:6c:77:f9:18:49:38:d6:cf:10:91:9a:86:cf:1d:
97:76:dc:68:b7:b3:91:ea:d2:1c:21:2c:f1:92:76:a9:11:80:
63:8a:1b:b0:97:eb:d0:96:41:e8:4d:a7:24:9b:91:8c:c7:76:
9e:f6:4f:d4:ae:36:6e:96:c1:87:6b:c5:ba:dd:28:59:17:8c:
40:7b:6c:c0:c2:a5:76:a1:77:46:fe:b0:22:89:7c:5e:92:9a:
8c:e9:b3:c0:6d:ba:0b:48:3a:76:a5:78:0a:96:4d:f8:34:97:
3c:e7:85:4d:61:bb:78:65:bc:98:d4:18:cd:b4:a8:fe:bd:1d:
cc:63:2e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:16:14 2025 by rpki-client