Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
File: QsoaHj0JJUIzEMFUtQLChCiI5hI.mft (raw, json)
Hash identifier: B9S7afKDOo/Q/d8trIE80E5LaUfjz1S/RS9henQf3TU=
Subject key identifier: B4:EF:4C:36:FD:FA:D1:E2:B6:EE:09:C8:80:B3:A9:9F:9B:AE:74:4F
Authority key identifier: 42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12
Certificate issuer: /CN=42ca1a1e3d0925423310c154b502c2842888e612
Certificate serial: 0196A50A110CBC1DA80BF054989F601FEF32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
Manifest number: 1530
Signing time: Tue 06 May 2025 10:00:22 +0000
Manifest this update: Tue 06 May 2025 10:00:22 +0000
Manifest next update: Wed 07 May 2025 10:00:22 +0000
Files and hashes: 1: FxWyjGUTIC45dat-1Rxw3IG5Eak.roa (hash: VjQJokywMbR3ejkYBNWJHSZbR0fnNPmK9n+7WEsPRYs=)
2: QsoaHj0JJUIzEMFUtQLChCiI5hI.crl (hash: yDuSZbnWANoU12R9JsqMcs3tjP11LjypkFsq/Fdh+F4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 10:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:0a:11:0c:bc:1d:a8:0b:f0:54:98:9f:60:1f:ef:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ca1a1e3d0925423310c154b502c2842888e612
Validity
Not Before: May 6 10:00:22 2025 GMT
Not After : May 7 10:00:22 2025 GMT
Subject: CN=b4ef4c36fdfad1e2b6ee09c880b3a99f9bae744f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:89:b8:2a:67:7b:42:07:57:2e:2d:6b:d6:a1:
d8:9d:78:38:e5:5b:39:fb:86:3d:7a:fa:3a:96:45:
83:2d:4e:dc:ac:28:ec:cf:60:d5:18:bf:d2:77:af:
2b:0e:6a:ae:96:42:74:de:17:a4:fb:7a:77:3f:f7:
5c:9b:87:73:18:51:35:96:61:fb:a5:27:27:9d:cf:
5b:34:a4:31:46:fb:4d:70:65:dd:07:d6:c4:8f:e9:
da:c3:f7:40:2c:5b:43:af:c2:62:53:35:03:f0:5b:
df:75:5e:d8:fe:9d:66:0d:3f:7d:72:2e:cc:42:fe:
01:b5:22:98:50:71:38:6e:00:63:88:19:e9:c4:cc:
fe:4f:a2:98:d2:45:a3:28:74:68:a7:1d:e0:c6:ce:
63:8b:0f:40:af:ba:78:1c:58:ce:73:b5:29:b8:59:
ce:94:9f:23:ab:8a:62:26:c9:92:77:ce:96:95:c2:
ef:a4:ae:c4:74:3e:b1:65:ec:7f:6a:53:3c:97:25:
f7:b5:98:b6:ee:b7:cc:db:05:cb:08:46:c6:ce:0a:
67:15:64:fc:ac:e2:6a:ff:a2:23:df:9c:6f:59:42:
a0:7f:cf:56:da:2b:70:8a:bf:31:fb:69:7c:a8:02:
52:ee:5d:fb:86:d2:3d:fd:3c:dc:16:09:31:76:55:
25:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EF:4C:36:FD:FA:D1:E2:B6:EE:09:C8:80:B3:A9:9F:9B:AE:74:4F
X509v3 Authority Key Identifier:
keyid:42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:0b:44:2f:8e:8f:df:c0:93:c4:ea:8b:d8:93:e5:08:87:1c:
19:55:b8:e6:ea:8c:e3:a2:85:5f:f5:5d:7f:85:83:a9:1a:11:
64:3a:f9:27:da:b5:54:10:10:15:a3:13:19:4e:a2:24:59:f8:
32:75:e6:31:ce:57:43:32:30:83:91:c3:67:71:82:72:91:51:
a1:c3:33:0e:c2:f7:ae:22:11:68:37:9f:8a:6a:a0:68:d9:a2:
a2:ba:92:99:5c:35:03:60:90:fa:dd:8a:d6:f5:36:10:de:54:
29:95:31:ed:d7:a6:dd:b8:7e:31:05:1c:36:37:0a:50:da:a8:
2b:3c:91:e6:53:19:d9:56:86:d8:b9:28:2f:ae:9d:a2:db:98:
b8:e1:9f:33:17:65:30:cb:58:c2:59:da:b2:3c:b3:0d:85:81:
20:e8:6d:7f:dd:f3:b4:f4:5a:aa:22:12:53:13:47:15:8c:f6:
3e:2d:55:6a:06:a1:a1:5c:c4:da:82:03:38:c1:3a:0e:0b:0b:
2e:42:22:22:ef:4b:58:7d:31:73:37:c6:1f:69:32:0e:7c:e8:
46:61:1b:c6:3d:67:44:b6:c4:49:60:09:24:4c:52:a7:1b:ee:
83:0a:7c:e3:92:0a:6f:1d:d3:81:e4:24:b1:2d:6f:15:f2:0f:
71:4a:ad:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 16:56:17 2025 by rpki-client