Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
File: QZHlgmJw9J6umZ1InoXezMhHc4s.mft (raw, json)
Hash identifier: skXPGqlV9J9QFDd5eCHO6sJ4AQSwO6hpvUYTcJa6j20=
Subject key identifier: 72:2B:36:AD:6F:B3:5C:8B:C5:06:40:3B:2B:B6:BD:2D:CE:93:6C:AF
Authority key identifier: 41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B
Certificate issuer: /CN=4191e5826270f49eae999d489e85deccc847738b
Certificate serial: 0196C61606AD546680F4B52D2330EAD5B24B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
Manifest number: 1054
Signing time: Mon 12 May 2025 20:00:54 +0000
Manifest this update: Mon 12 May 2025 20:00:54 +0000
Manifest next update: Tue 13 May 2025 20:00:54 +0000
Files and hashes: 1: 5a04uRMLuLPqwpXzKrFBWV5ma_s.roa (hash: pqBMscBUXLlLFYQmwhp2Q/lEjdKvHVjvXqUWPX0LeGM=)
2: QZHlgmJw9J6umZ1InoXezMhHc4s.crl (hash: NZRv8AMtE4uL35KsF4EC5hxaeVmcjKErmI46de5eLR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:16:06:ad:54:66:80:f4:b5:2d:23:30:ea:d5:b2:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4191e5826270f49eae999d489e85deccc847738b
Validity
Not Before: May 12 20:00:54 2025 GMT
Not After : May 13 20:00:54 2025 GMT
Subject: CN=722b36ad6fb35c8bc506403b2bb6bd2dce936caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cf:dc:3a:87:43:65:56:14:1d:ac:b7:91:cb:
6f:99:a1:d4:a2:bc:8c:9d:55:92:3b:18:6d:d9:db:
b1:1e:94:88:c6:5f:48:c4:f1:9f:86:92:d5:2f:62:
18:d8:ac:20:1b:69:7f:db:96:e9:37:eb:d6:51:37:
8d:df:07:0b:22:1b:16:e6:69:18:47:1c:f9:9c:ff:
dc:05:88:13:ee:fe:6e:f8:4a:18:ec:68:96:e0:41:
c0:68:2c:38:95:fe:d9:c5:7e:4b:38:19:77:2c:2b:
09:d4:dd:78:2b:76:e9:27:60:3f:9b:62:61:96:88:
2b:65:e1:90:8a:d1:25:96:d3:97:37:57:50:e6:ac:
f6:d9:19:04:21:ab:69:72:39:cb:8e:f1:7f:48:5d:
0c:8b:95:56:e9:6c:5e:75:a0:d1:ae:de:b6:cb:6a:
39:f6:fb:8f:3c:e5:aa:51:f2:67:c6:be:a3:f3:17:
94:7e:e4:fd:0d:8f:1d:cc:d4:9b:fe:85:2a:19:0e:
d9:cd:f5:fc:db:1f:39:46:55:25:5f:0c:80:0d:2e:
2f:cb:b6:84:c5:a4:05:86:60:8a:3e:82:07:58:9d:
98:73:e8:57:2e:b4:a4:73:41:e8:c8:7f:94:d2:4b:
f6:8a:0a:ba:62:6b:76:98:59:d7:5f:ee:59:d4:cf:
74:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2B:36:AD:6F:B3:5C:8B:C5:06:40:3B:2B:B6:BD:2D:CE:93:6C:AF
X509v3 Authority Key Identifier:
keyid:41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ac:3a:62:60:66:ef:43:db:2a:76:97:10:42:96:7f:e7:14:
a1:52:7c:9e:01:02:db:56:67:2d:42:26:5d:a1:ed:18:f2:5c:
01:9a:15:0b:9b:c8:09:91:92:c9:62:f0:62:bf:88:ad:f8:62:
b4:50:ea:f0:6e:b6:fc:e7:61:f2:ab:3b:12:d4:41:9c:6e:75:
56:f0:d0:e8:65:23:11:1b:d4:a8:b8:0f:d5:e1:95:b0:a0:52:
82:00:82:e7:31:f3:30:7b:4b:be:5c:16:3f:87:37:66:b8:40:
5f:5c:b6:48:d6:a6:39:a0:e7:07:f9:ce:f7:f9:b5:bc:b1:fb:
cb:80:cd:f7:4a:70:18:60:54:b6:77:61:24:4f:77:e2:a6:7b:
3a:36:ae:9e:11:48:bf:a9:3f:f8:93:04:19:03:3f:61:67:1b:
a2:61:58:d5:b5:81:72:a0:74:da:ba:63:f4:c0:c3:28:6d:2d:
93:b3:f6:16:c2:3d:29:5a:2f:86:dc:ec:68:b8:5b:c3:78:6d:
97:9d:c9:b9:1e:6d:40:49:64:8c:d4:bc:d9:03:3d:4d:e9:cc:
4c:0b:82:a1:f6:25:17:b1:ec:c6:e5:34:b5:98:82:aa:5e:90:
c7:a8:93:f0:2e:d1:00:ed:7a:77:5b:71:fa:52:09:f6:40:e9:
24:55:b4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:39:16 2025 by rpki-client