Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
File: qnp9oeIjsYMKC5G11hyDrSYMERs.mft (raw, json)
Hash identifier: N/WVznQp5iL4AWQgJJiwa2GX5Px6lRKTFcFyrqpYpRE=
Subject key identifier: E6:31:D4:60:AC:1C:F1:30:E5:40:47:DB:8C:BD:D2:98:26:86:36:54
Authority key identifier: AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B
Certificate issuer: /CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b
Certificate serial: 0196CF18BC5A313DEBC2321992E28BC0F181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
Manifest number: 1106
Signing time: Wed 14 May 2025 14:00:26 +0000
Manifest this update: Wed 14 May 2025 14:00:26 +0000
Manifest next update: Thu 15 May 2025 14:00:26 +0000
Files and hashes: 1: B2uv5t_GiMUr8rM-r5uKbUdnEoQ.roa (hash: YpVmIqGmMDZopEuL6KgYwvjCxwixGKfs5u+qFRIV/jw=)
2: qnp9oeIjsYMKC5G11hyDrSYMERs.crl (hash: pwdpODYTVXPC6Fv2DdUhg0LXWdruNPRpS+2d+RvuNhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 13:46:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:18:bc:5a:31:3d:eb:c2:32:19:92:e2:8b:c0:f1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b
Validity
Not Before: May 14 14:00:26 2025 GMT
Not After : May 15 14:00:26 2025 GMT
Subject: CN=e631d460ac1cf130e54047db8cbdd29826863654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e5:b4:11:d9:e9:ea:56:61:94:f8:d7:81:d0:
07:fe:fc:14:d7:7c:28:d3:ce:67:99:92:70:be:22:
b4:e0:c7:a6:c2:bb:f7:ce:d0:3a:76:d0:46:9f:d1:
63:e3:14:b7:ec:20:5a:98:d8:0c:48:8a:5d:db:38:
e8:13:e8:82:f8:29:86:a4:fb:12:bb:fc:7d:0b:42:
72:42:d2:10:40:e7:9c:08:8b:c0:c6:80:d3:1b:94:
ba:29:66:65:19:f9:ee:db:e9:3a:3c:29:14:50:d4:
67:72:6e:35:f8:01:37:ea:eb:7b:91:0a:64:09:fd:
b8:2b:ef:0b:1b:2d:41:5d:d7:5d:df:36:a4:55:1a:
3a:09:b7:8c:e4:8e:1e:d3:dd:be:ff:db:96:bc:79:
fe:97:cd:96:f6:49:19:de:c0:40:b9:93:4a:c8:bf:
9f:b0:c6:7c:7f:7a:c8:65:6b:2b:84:ff:37:80:1a:
2b:a1:3f:35:45:4d:0b:1c:76:9f:e2:e7:a3:1e:03:
1b:6d:09:97:61:c0:a5:fd:eb:79:66:5d:87:bc:f5:
29:3b:74:c2:22:c7:60:c0:f3:36:1e:ec:58:9a:e5:
a9:c3:4c:b0:2f:38:64:a8:d0:55:80:04:ed:d9:60:
ba:c6:3c:4f:de:ca:d5:b2:24:1e:1e:e4:ed:5f:50:
db:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:31:D4:60:AC:1C:F1:30:E5:40:47:DB:8C:BD:D2:98:26:86:36:54
X509v3 Authority Key Identifier:
keyid:AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:4a:65:18:50:1f:99:ae:14:07:7f:22:9a:d4:b1:d6:df:fa:
c8:86:ba:88:77:3c:9b:bf:fb:ad:7b:7d:dd:e1:d2:ef:9c:8a:
89:9a:f2:e0:40:23:2e:cc:8a:5e:2b:bd:67:76:de:6b:1d:bc:
99:ff:3c:cf:df:c9:ae:78:96:b9:f6:df:b9:28:8f:55:9f:12:
81:8e:cc:8f:c1:3d:74:c6:d3:54:4c:6b:67:24:78:dd:b0:2e:
98:8f:b2:8b:39:61:3e:2b:18:0b:1b:0c:8d:52:4b:25:98:63:
9b:90:8e:da:76:83:d2:e6:67:1f:f4:ea:a3:9a:05:98:30:68:
5b:8a:06:02:c7:cb:41:69:78:bf:b0:9b:5b:4e:25:62:0f:a8:
f1:26:13:d0:d8:dc:18:58:3b:2f:aa:b3:6d:c8:3b:f8:92:21:
ca:74:b6:04:aa:7e:bb:33:95:e4:10:d6:40:66:40:47:ec:8f:
17:36:5e:7e:a5:e4:bd:40:4c:0e:8b:7f:c6:74:b0:02:4c:33:
67:1e:db:d3:9f:ae:0e:c3:98:8c:10:39:6d:89:e6:60:25:21:
cd:94:a4:fb:59:8f:a1:f7:86:bd:e1:3c:a7:f2:82:ec:7f:98:
ff:20:3a:79:61:45:e6:b1:7d:42:7d:92:45:d2:56:7c:f5:2e:
4d:87:ba:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:50:47 2025 by rpki-client