Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
File: QD1jsy5xwcFpJD79ttVu1cprgk4.mft (raw, json)
Hash identifier: JZEtFtE533o0DaOyJKgX3Zu4w7yjsUM0dPfAaoOCt8I=
Subject key identifier: 98:0E:95:80:39:17:09:08:DB:BC:C3:3D:3E:6E:AB:AA:DD:45:24:1D
Authority key identifier: 40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
Certificate issuer: /CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Certificate serial: 0196C2A72A0D091F582EE5A80B66DCB6F303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
Manifest number: 1467
Signing time: Mon 12 May 2025 04:00:57 +0000
Manifest this update: Mon 12 May 2025 04:00:57 +0000
Manifest next update: Tue 13 May 2025 04:00:57 +0000
Files and hashes: 1: QD1jsy5xwcFpJD79ttVu1cprgk4.crl (hash: vXar0TUoBW7bzWc8o+S06HjH5jDwqbFAmsS6dYwftE4=)
2: sEgqJVQsrJEI5D6KmALm-jn8fK4.roa (hash: wkSem0GjNV7CDayzITuhm9bdRNzF4MpUUCFS49t70yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a7:2a:0d:09:1f:58:2e:e5:a8:0b:66:dc:b6:f3:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Validity
Not Before: May 12 04:00:57 2025 GMT
Not After : May 13 04:00:57 2025 GMT
Subject: CN=980e958039170908dbbcc33d3e6eabaadd45241d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:88:22:7a:06:6a:d7:a4:a0:9c:d3:dc:e7:
b8:9c:aa:41:8d:eb:e2:f2:90:a6:8b:b8:ce:02:ed:
d3:45:71:88:a1:43:b1:d3:e7:2a:0b:c7:84:7b:6e:
a8:30:55:94:71:e9:2d:bb:d5:17:da:dc:6b:02:2e:
a9:57:7c:b1:43:c2:fa:86:68:af:99:ee:1a:51:0c:
31:72:a3:bf:be:85:6f:ef:1a:af:92:87:42:d5:88:
6a:5f:4f:76:3f:6e:d1:d5:5b:b5:d2:91:1c:8b:e3:
a5:36:3f:53:ac:63:e9:a5:6a:bc:31:c1:53:7b:02:
a3:ef:a8:6a:49:f1:53:b7:87:6c:35:bb:01:2b:c5:
c1:bd:c3:dc:1f:06:ac:15:47:78:39:f7:58:58:bb:
db:38:20:8c:de:e8:84:da:39:af:4c:8c:8d:15:74:
7d:a9:1e:75:da:31:e0:f9:74:90:c8:30:d8:37:4e:
46:37:64:92:73:de:9f:e4:ce:52:03:3c:4c:3c:a9:
56:76:2b:17:fd:8c:41:f5:aa:1a:5b:9f:c5:97:59:
80:4b:53:5b:b7:3c:32:a1:f3:5b:37:16:34:b1:dc:
b5:f1:4f:86:e5:ae:bf:27:41:6a:9f:ef:49:f9:73:
6e:cf:f1:57:14:f3:35:3b:30:15:03:f1:fa:17:f9:
e8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0E:95:80:39:17:09:08:DB:BC:C3:3D:3E:6E:AB:AA:DD:45:24:1D
X509v3 Authority Key Identifier:
keyid:40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:95:39:c9:7d:83:ee:1b:c7:42:5a:b2:02:ac:0e:8e:97:94:
39:ea:29:26:bf:61:aa:b3:36:46:dd:6b:cf:61:08:77:32:73:
53:01:a2:e8:b0:48:75:77:d7:b4:94:72:b2:e5:31:2a:3c:fb:
d8:74:71:93:86:68:24:ef:b2:d8:c4:fa:4e:06:3d:6e:d9:e5:
d9:fb:99:71:c4:61:bb:9e:e2:d3:c3:0c:74:a1:7f:70:90:bb:
72:87:78:59:60:8a:ce:6d:de:41:f2:81:d5:96:ae:b3:bc:00:
bf:59:b2:21:b4:be:54:69:d7:55:c0:d1:67:bb:77:a5:3d:3e:
c5:30:50:f5:83:25:0c:0f:4d:88:2a:a4:4c:1a:bd:90:19:10:
59:f6:6a:af:10:68:8b:7f:2b:d2:09:cd:ca:ec:8e:40:70:26:
1d:35:61:72:0e:bd:15:70:29:c1:08:60:88:a7:cf:e5:7d:4e:
b8:ab:79:70:56:0a:ab:e3:2d:df:1d:d4:7d:a2:b5:8e:0e:48:
2e:b3:83:90:31:66:f3:e7:0a:84:8b:2c:81:86:93:06:9f:fc:
a1:de:20:e9:14:fb:2a:9f:ea:7b:b8:b4:30:1c:f8:a6:5c:17:
31:18:8d:77:7e:e1:a1:a6:f9:9a:0f:ab:39:02:86:0d:a8:ff:
ab:ba:29:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:24:42 2025 by rpki-client