Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
File: QONYGt3WuZ3YdEueKIb7sCrpGOM.mft (raw, json)
Hash identifier: 5fwd0vGKXzdus54t2B2VkwvmEGHjPH6ryh3kBZPoilk=
Subject key identifier: C5:FD:E7:18:EB:C3:7D:57:64:F3:64:EA:43:6B:AA:73:F9:19:86:9C
Authority key identifier: 40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
Certificate issuer: /CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Certificate serial: 0196C8A8F28696BD4A280D096CE5AFD84A15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
Manifest number: 153B
Signing time: Tue 13 May 2025 08:00:37 +0000
Manifest this update: Tue 13 May 2025 08:00:37 +0000
Manifest next update: Wed 14 May 2025 08:00:37 +0000
Files and hashes: 1: 7sL1UBW9oIL-S5vfH1jOO3eYhUk.roa (hash: WnpcdVTaXzH616PZ8mN25gQu/poO33PVXu+tGiulqjA=)
2: QONYGt3WuZ3YdEueKIb7sCrpGOM.crl (hash: G/6ebT2xjTb/ZQdbOKgD2Famq1OygXCybWEVKONGYIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:a8:f2:86:96:bd:4a:28:0d:09:6c:e5:af:d8:4a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Validity
Not Before: May 13 08:00:37 2025 GMT
Not After : May 14 08:00:37 2025 GMT
Subject: CN=c5fde718ebc37d5764f364ea436baa73f919869c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ee:20:c9:eb:d4:19:2b:1f:6f:61:2e:ca:a9:
7d:35:46:5f:d7:0f:bc:91:69:88:cf:00:a7:a3:14:
90:d4:9a:56:fc:ae:7e:b4:19:40:b6:5a:63:4b:d6:
af:06:57:a8:01:bf:fa:5d:c2:7e:03:72:33:5b:cb:
f2:b5:89:49:ef:3f:3f:18:24:2e:4a:dd:07:c8:97:
9f:16:37:78:b9:85:7d:4d:03:a9:ab:98:97:1a:92:
86:58:ba:88:90:57:1a:24:a8:82:72:b2:54:f6:26:
7a:9b:32:b6:90:b1:12:79:be:b0:0f:7c:d3:01:cc:
b9:8f:19:fd:ad:0e:6f:8d:db:af:68:c8:14:32:ab:
f0:13:04:35:35:ef:d4:89:28:05:cb:ca:ab:64:20:
a8:02:38:87:b1:83:27:6c:b6:0f:24:7c:44:f3:52:
0f:dd:3b:78:12:21:df:46:f9:4e:78:89:cc:c8:1d:
82:31:aa:30:49:48:76:99:37:67:55:9d:f8:36:f2:
52:33:94:f1:7c:13:b7:72:ea:a1:bf:14:83:2e:cd:
4e:a8:3f:1d:ad:ec:0d:54:97:10:f7:31:de:9a:7b:
3d:bc:a0:90:8e:7a:19:12:b8:f2:5b:42:a9:51:a6:
03:61:5e:f0:1a:ea:40:8e:a7:4a:cb:a2:50:f6:00:
c9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FD:E7:18:EB:C3:7D:57:64:F3:64:EA:43:6B:AA:73:F9:19:86:9C
X509v3 Authority Key Identifier:
keyid:40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:5f:79:33:ca:fa:45:de:5c:18:7c:30:61:54:7e:3e:f3:9f:
65:e7:5a:a0:0b:8c:3e:2e:47:cb:ca:a4:0c:c7:c8:1c:82:f7:
33:3c:fa:a5:9c:16:40:1a:f9:88:ee:2a:70:42:14:b3:16:37:
cf:24:af:06:76:c8:39:60:0a:fc:5d:18:c2:b3:14:9a:b8:43:
f3:39:53:ea:e5:5d:5a:3d:96:37:66:8e:e5:ff:50:05:29:7f:
a5:86:c6:63:a7:92:8a:0c:fa:c3:71:b0:a2:71:1b:af:a1:f0:
df:84:85:92:3a:81:d9:9c:30:39:48:57:ba:cf:94:9a:d8:5a:
b6:c9:ed:ff:6f:45:29:45:77:5d:1e:94:5c:2e:9f:8c:53:8a:
cb:89:64:ab:af:84:e8:57:e2:cb:63:14:26:32:19:0d:53:87:
1e:39:21:93:31:b9:b2:f8:ce:4a:f5:d5:87:61:51:e9:11:9f:
fa:6e:f6:62:f9:43:21:cf:05:e9:b3:70:87:df:30:29:96:e5:
9b:23:07:ee:a4:bc:88:f6:5f:14:f8:8c:d3:d6:5c:ca:6c:90:
0d:18:e8:83:f1:12:6b:cf:59:ce:7d:46:81:05:23:9d:da:47:
f5:05:da:6e:31:f1:1b:fb:eb:ff:ec:09:5e:3f:80:25:33:1c:
4d:bd:96:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 14:02:34 2025 by rpki-client