Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
File: qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft (raw, json)
Hash identifier: 8+K79ZPR3jKC/DztwJIhZXQefkz2wfKUf//A5Tfy8xk=
Subject key identifier: 0D:2D:FE:04:14:F6:4A:F1:4F:E0:0C:D0:61:55:45:38:83:CA:E7:F6
Authority key identifier: A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
Certificate issuer: /CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
Certificate serial: 0196C34B4E88A60AAFFDF2B1E582EF471965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
Manifest number: 0641
Signing time: Mon 12 May 2025 07:00:14 +0000
Manifest this update: Mon 12 May 2025 07:00:14 +0000
Manifest next update: Tue 13 May 2025 07:00:14 +0000
Files and hashes: 1: ZuTxi79Ck2OCXbkDauPT87FQh1E.roa (hash: xuj1se8JvfBc00cfkDYRLRVr3K+o4nQ3N/ymEwvuis8=)
2: qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl (hash: iToeg47fIg0nZt2jKopSooK6MiVOXRzeMatd6AGswcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:4e:88:a6:0a:af:fd:f2:b1:e5:82:ef:47:19:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
Validity
Not Before: May 12 07:00:14 2025 GMT
Not After : May 13 07:00:14 2025 GMT
Subject: CN=0d2dfe0414f64af14fe00cd06155453883cae7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9f:dc:cb:5d:62:62:af:1b:73:10:c6:b7:d0:
11:ec:0d:a9:15:33:e0:e9:2a:b9:a3:9e:e0:0f:b0:
d4:c6:a3:d4:1c:6d:43:bf:d0:64:cc:34:63:a3:77:
53:72:17:d8:d4:3e:aa:24:78:b6:b5:75:5c:a7:cb:
7c:1a:d0:40:95:bf:8a:ec:67:b0:a8:32:4c:b1:64:
a6:fe:76:c9:c8:00:c0:b0:df:fd:b7:89:87:66:38:
f7:a0:51:69:c8:48:8f:87:a4:2d:ea:67:56:fd:91:
d3:75:d0:fc:ed:6f:39:6d:ef:d5:0b:a9:71:ff:89:
c9:33:ac:bc:71:d6:45:e7:cf:0f:b6:a0:d0:8f:db:
a1:2a:e8:15:16:39:4d:64:b0:65:1f:bd:7e:46:a5:
87:a0:3f:88:b1:0f:0e:a4:f6:fc:ad:bd:da:a0:6b:
c4:b2:9e:4e:52:08:c9:3e:4e:47:89:7f:50:86:9b:
4c:2c:a8:21:73:6e:45:36:12:01:3f:64:d7:f2:c1:
e4:35:8c:5e:b7:69:94:83:c3:83:c7:af:d5:0d:21:
b7:ee:42:6d:27:69:94:5c:22:73:e9:dc:06:c8:57:
77:e7:d7:e2:a7:f0:25:63:8a:99:1b:63:be:ae:47:
b7:62:b1:c3:bd:73:9d:16:08:09:ac:6a:07:ff:59:
7a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2D:FE:04:14:F6:4A:F1:4F:E0:0C:D0:61:55:45:38:83:CA:E7:F6
X509v3 Authority Key Identifier:
keyid:A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:81:02:55:d6:c8:53:92:b0:bd:0a:a7:79:e9:ca:99:b6:06:
48:76:73:fa:86:5b:bb:85:49:bf:6a:56:16:09:59:2c:b4:d1:
0a:76:58:39:75:45:0b:46:43:1c:1a:e7:d6:81:20:d3:e9:8a:
99:53:e2:b8:a6:5f:de:ca:34:d7:dc:d7:2b:5c:0d:dd:90:8a:
44:9c:ea:b2:62:56:87:d9:58:ea:d4:36:6f:dd:f4:19:53:44:
f1:75:d6:26:71:61:1a:8b:c7:bd:31:d4:e9:57:83:97:20:9a:
69:dc:2c:48:e4:68:81:db:e7:e8:db:9d:f5:6b:6f:8c:0d:b6:
cb:1c:6f:a3:b9:91:ac:bc:dc:a4:39:cb:31:19:d9:13:ca:ca:
6b:f1:7b:c2:fa:d9:93:00:d2:d4:4d:eb:ef:19:b4:7d:7b:58:
a0:79:e3:13:f4:8a:5f:41:a3:99:04:25:ed:4e:cc:1d:c6:e2:
bf:6b:d0:6c:86:67:69:73:1e:e4:f4:b7:c8:ed:21:1f:fa:f2:
bd:47:42:15:44:f6:39:75:5c:2c:fa:c9:28:ed:ca:f4:04:0b:
4a:e1:74:10:1d:07:11:ed:a5:e5:b6:bd:b2:d6:51:d9:d7:56:
28:04:ca:47:b5:f1:62:e8:35:5e:b8:d3:94:8f:4d:fd:81:d9:
46:68:bc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:27:26 2025 by rpki-client