Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft
File: QGHbehW9JPvKFGzRLMcNQTnIW58.mft (raw, json)
Hash identifier: CAmX6K6sroqwjbhzM91JqHwPCxUQJLILNzoIpGgtgtQ=
Subject key identifier: D8:C8:1A:33:D4:86:69:28:A8:A3:9C:CA:96:10:A6:94:2F:8D:B7:93
Authority key identifier: 40:61:DB:7A:15:BD:24:FB:CA:14:6C:D1:2C:C7:0D:41:39:C8:5B:9F
Certificate issuer: /CN=4061db7a15bd24fbca146cd12cc70d4139c85b9f
Certificate serial: 01969DF5B2E7492FDB67A6D01664F2814D6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGHbehW9JPvKFGzRLMcNQTnIW58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft
Manifest number: 14F0
Signing time: Mon 05 May 2025 01:00:47 +0000
Manifest this update: Mon 05 May 2025 01:00:47 +0000
Manifest next update: Tue 06 May 2025 01:00:47 +0000
Files and hashes: 1: QGHbehW9JPvKFGzRLMcNQTnIW58.crl (hash: HzIXXDjz0781AwWJ3S63uLByqCqE7hcRuljY6qWl1zI=)
2: o-ZlaW1WgunU3TjJVwdOR6husz0.roa (hash: 4yZiG/NqXqcKJ1Bdf8yQPmHJloI/I/ZH5JktUOUh3mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGHbehW9JPvKFGzRLMcNQTnIW58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f5:b2:e7:49:2f:db:67:a6:d0:16:64:f2:81:4d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4061db7a15bd24fbca146cd12cc70d4139c85b9f
Validity
Not Before: May 5 01:00:47 2025 GMT
Not After : May 6 01:00:47 2025 GMT
Subject: CN=d8c81a33d4866928a8a39cca9610a6942f8db793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fa:e7:86:16:22:f6:cf:cb:9a:3e:b8:91:3b:
19:88:32:2e:63:32:93:00:28:fb:ef:47:fa:c3:99:
42:1e:78:83:ba:b4:c7:bd:25:35:fb:40:50:aa:65:
16:d0:9f:a0:09:af:10:62:18:58:fd:4c:21:14:73:
56:18:cd:0d:c7:c7:b1:d7:0a:80:2e:6b:8f:ef:d3:
ff:72:8a:dc:0c:a0:a6:94:18:9d:de:05:a1:da:c9:
06:4f:67:f2:86:20:84:4b:84:3b:08:40:3b:9f:e8:
37:2d:be:10:50:4b:d1:e5:00:40:d6:66:ec:77:f6:
09:77:4c:fb:66:1f:9e:2c:1f:2b:a9:df:53:28:22:
3d:c8:01:9a:05:78:45:08:60:6d:a3:af:ca:8c:99:
c9:6a:40:ae:6f:8e:11:c2:58:f9:60:e2:e4:f0:56:
99:4c:7b:a9:82:4c:24:72:13:ce:f3:37:7f:7d:c4:
0e:de:82:be:69:16:95:95:5c:0e:a7:e9:63:1d:68:
07:25:f1:8b:89:19:0b:62:52:fa:e7:f5:bb:37:94:
5b:81:d3:a8:e5:dc:b1:52:5e:50:71:16:fa:b9:f0:
34:f2:d5:c9:06:c9:ef:f2:4a:45:46:ca:73:d6:bf:
55:97:c0:35:05:9c:17:b3:bb:23:38:bc:5f:1e:ab:
57:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C8:1A:33:D4:86:69:28:A8:A3:9C:CA:96:10:A6:94:2F:8D:B7:93
X509v3 Authority Key Identifier:
keyid:40:61:DB:7A:15:BD:24:FB:CA:14:6C:D1:2C:C7:0D:41:39:C8:5B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGHbehW9JPvKFGzRLMcNQTnIW58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:04:b5:0f:3d:08:69:21:ef:2e:f3:38:b4:cf:9a:e3:de:44:
50:c2:a8:93:d2:32:f7:37:61:d5:23:72:49:d9:c0:38:35:5a:
e4:9f:6f:ee:2d:09:19:90:74:ab:50:1f:8a:cb:46:a3:e4:12:
1c:8c:7f:6b:c9:cc:f9:54:23:3c:85:8b:9f:f8:9f:83:b9:aa:
c1:ed:46:25:f6:96:5c:af:eb:92:92:b8:eb:6f:7e:c4:a5:87:
29:6b:16:dc:ee:8f:ae:47:36:78:65:52:3d:17:c4:e9:7a:22:
a8:ae:a1:2d:96:c2:34:d8:18:c3:74:19:38:aa:7d:0a:b5:13:
6e:61:fc:bc:82:0a:93:36:35:37:d5:95:a5:e8:3d:5e:ff:12:
bf:e9:86:85:45:a4:cb:0e:a1:ff:74:70:cc:44:4e:38:82:3d:
c7:67:eb:75:e5:5c:c1:b3:f9:44:01:4c:a0:cb:2a:c0:7b:61:
44:70:de:0f:f3:87:d1:fc:92:59:4e:9f:25:d0:66:b8:58:91:
2a:40:5e:da:68:cf:f5:24:29:e6:b0:87:31:c7:0d:65:76:5d:
e0:cf:99:b1:26:a5:5d:eb:f3:da:c0:62:e5:46:95:76:52:70:
99:5b:f9:dd:3a:b0:83:4d:e2:43:44:e8:07:55:4a:4c:1e:a9:
bb:2a:77:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:49:05 2025 by rpki-client