Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
File: QgzD80v9Q6xc32EDez0WyWfXMjc.mft (raw, json)
Hash identifier: 0apAXd/v8YYyqoGPKHaochLFUpvivtDj1vmoOYxx18w=
Subject key identifier: 77:D0:9F:E1:5B:68:B3:18:32:44:16:79:5B:C2:09:5F:46:64:ED:1A
Authority key identifier: 42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
Certificate issuer: /CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Certificate serial: 0196ABB0CEAA1014E7350651A4ACE9292CF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
Manifest number: 0186
Signing time: Wed 07 May 2025 17:00:13 +0000
Manifest this update: Wed 07 May 2025 17:00:13 +0000
Manifest next update: Thu 08 May 2025 17:00:13 +0000
Files and hashes: 1: QgzD80v9Q6xc32EDez0WyWfXMjc.crl (hash: hpnHVhs4/ua5eX7oCaq4T/mE7BQQSJBgPMuxlr0S/V0=)
2: WCgPWBd35wh97MLu1FH7BL7RkHc.roa (hash: 4LSeeV2arU0BH2mW0bKarXB0zBUuhKYPFKDtO5BDvYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 17:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:b0:ce:aa:10:14:e7:35:06:51:a4:ac:e9:29:2c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Validity
Not Before: May 7 17:00:13 2025 GMT
Not After : May 8 17:00:13 2025 GMT
Subject: CN=77d09fe15b68b318324416795bc2095f4664ed1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4e:7c:98:21:27:0f:1f:75:a5:30:70:37:5b:
0f:32:55:f7:b1:f2:e1:89:d8:c1:13:ff:e3:e3:55:
7a:74:bc:74:52:ed:1d:cf:80:b5:6a:00:aa:f7:d3:
b7:c3:9a:47:68:ca:b3:f7:0e:ca:4d:65:5e:b7:f4:
07:4f:7b:de:53:76:a8:9c:3f:fe:7e:0b:45:43:8f:
0c:f9:fe:e8:4c:12:f2:9a:74:54:5d:61:84:aa:3a:
f2:9c:f5:ee:45:c0:73:54:83:9d:78:e6:c5:28:d9:
01:a8:99:01:a3:79:95:22:11:50:58:04:2c:99:1b:
c5:1e:c6:bd:e9:75:2d:b2:34:3f:20:c9:02:4b:f2:
cc:fa:40:d6:44:cb:e2:a7:ad:7b:d1:30:a1:9e:e8:
63:e7:74:1e:41:8a:df:15:1d:45:21:73:93:a3:12:
2e:a2:51:25:ea:3e:5b:32:b9:25:37:74:2b:ee:cc:
59:dd:49:45:a6:ff:75:a1:a7:92:52:5a:ee:4b:1c:
f6:8e:cd:42:be:ca:22:c5:a5:86:90:3a:33:9b:c4:
7c:f0:9e:a6:6b:23:25:5e:12:e6:eb:ab:f5:e2:85:
4b:f0:1f:c3:35:a5:42:85:3c:f4:1c:f1:fc:5b:ef:
38:53:39:ed:56:fd:f3:92:17:c5:73:ae:72:b0:ee:
57:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D0:9F:E1:5B:68:B3:18:32:44:16:79:5B:C2:09:5F:46:64:ED:1A
X509v3 Authority Key Identifier:
keyid:42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:61:64:f2:37:08:9b:9d:50:e5:a3:c4:c4:c9:b7:d4:b2:7d:
18:40:c9:ef:1c:f7:b4:a0:5c:a7:2a:e1:20:0f:b6:e4:de:3f:
a6:ae:d2:aa:bb:34:2b:35:9d:27:27:54:59:b1:cb:02:1e:b1:
48:c6:73:53:93:a5:e1:27:00:8f:4b:62:9f:c1:f5:0a:e1:9a:
45:69:b4:e3:24:f2:e9:96:78:e4:8a:07:aa:9a:57:4c:be:13:
f7:1c:38:57:5c:48:8d:4a:4f:ff:81:b7:c6:34:96:2f:a4:c3:
3d:d7:d4:69:8a:b0:11:58:72:c4:7c:a7:ef:d1:f0:dd:0d:0a:
c8:48:59:51:50:6b:b8:03:0e:3a:a9:83:5b:c7:ab:9d:24:dd:
d2:88:8f:cf:cd:01:23:70:77:c1:76:e4:be:44:f6:ba:6a:ca:
87:06:26:78:18:6c:ea:ce:a1:50:e7:2d:9f:13:ee:7c:99:15:
6c:e2:9c:58:55:75:1c:da:44:d8:e0:b0:ae:b4:77:d7:d8:4e:
9f:e1:bc:6a:91:ec:43:6a:a7:34:ce:c0:cb:8a:d4:be:d2:06:
47:82:a7:fd:fd:60:2b:8d:33:fa:0b:98:f8:3d:df:6f:6d:d3:
10:49:a6:fa:5f:fc:f0:53:22:b9:7d:0f:ec:fe:db:b6:7c:fd:
4a:05:3e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 00:09:28 2025 by rpki-client