Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
File: QL_e36qTma09VTH6RxoSs7_jfhI.mft (raw, json)
Hash identifier: FHQek6YFLMmgQQHTTXAi93stA4SmzdBwKO0WY0twS10=
Subject key identifier: 15:9A:74:69:79:03:B1:66:36:01:5A:26:6A:BE:02:2B:11:42:E1:AE
Authority key identifier: 40:BF:DE:DF:AA:93:99:AD:3D:55:31:FA:47:1A:12:B3:BF:E3:7E:12
Certificate issuer: /CN=40bfdedfaa9399ad3d5531fa471a12b3bfe37e12
Certificate serial: 0196B7B4FCDA02CC5C6E4DF540B3638654D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
Manifest number: 0852
Signing time: Sat 10 May 2025 01:00:13 +0000
Manifest this update: Sat 10 May 2025 01:00:13 +0000
Manifest next update: Sun 11 May 2025 01:00:13 +0000
Files and hashes: 1: QL_e36qTma09VTH6RxoSs7_jfhI.crl (hash: z1unwN8rGpv9fWPLePv2wCxYREZeepTyk6ywlWOEKxY=)
2: jSlm79fFu0VgJBsIaC81oVf4nGI.roa (hash: 8IYkRLo3mCrHlEs7aBNerIrNbkB27E7Mc7prSDZuZVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b4:fc:da:02:cc:5c:6e:4d:f5:40:b3:63:86:54:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bfdedfaa9399ad3d5531fa471a12b3bfe37e12
Validity
Not Before: May 10 01:00:13 2025 GMT
Not After : May 11 01:00:13 2025 GMT
Subject: CN=159a74697903b16636015a266abe022b1142e1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:90:85:8d:8b:df:7b:84:32:4d:f2:91:fd:4b:
9d:0f:53:47:ac:11:ff:22:93:2f:7c:f9:99:e0:df:
87:a4:59:e4:0c:b7:b8:f7:e6:39:d8:53:76:9a:79:
1c:01:90:52:37:b3:a0:6d:f7:76:b8:46:a9:fb:13:
1d:b3:1f:28:19:66:66:a5:8e:65:c0:35:dc:4a:e5:
11:e3:11:c2:10:ed:88:7c:c1:be:e4:b9:db:d1:e9:
43:06:f0:93:22:46:38:2e:c4:2c:81:e4:93:06:e5:
0f:af:f5:01:b2:2b:2f:9f:1e:cc:e1:08:87:2b:6f:
23:ab:48:3d:3b:cb:52:8b:7c:75:b2:01:4d:25:98:
95:c5:64:94:71:1d:fb:26:48:ba:3e:9b:14:20:2e:
ab:9c:8a:2d:a9:6d:67:2f:f3:fa:3b:fb:83:cc:4d:
e8:1e:4f:f4:77:48:8e:ce:db:6b:88:4e:69:56:58:
19:08:60:aa:ad:3f:db:58:00:59:19:d8:0f:b6:3a:
c7:07:72:58:49:9b:79:87:6b:c6:c7:d1:f5:8f:f0:
38:35:7b:26:a1:b2:32:a4:87:04:a2:9c:fb:0e:d9:
f0:0b:8f:62:ba:f0:58:1e:da:0e:eb:36:18:0b:f0:
e1:e6:ef:77:3c:a9:1b:c3:ed:c0:4f:d6:c7:ac:0e:
0c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9A:74:69:79:03:B1:66:36:01:5A:26:6A:BE:02:2B:11:42:E1:AE
X509v3 Authority Key Identifier:
keyid:40:BF:DE:DF:AA:93:99:AD:3D:55:31:FA:47:1A:12:B3:BF:E3:7E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:12:e4:36:03:df:0e:2f:47:63:47:11:41:55:7f:09:a1:a3:
b0:2e:f1:85:1a:6b:18:9e:7a:21:84:81:a9:82:7f:35:65:2f:
54:32:12:1b:73:8b:ee:cf:7c:a0:73:4d:26:e4:22:8b:bb:9f:
96:70:c9:f1:f4:24:92:0d:5c:e7:fe:7f:7c:12:18:12:2e:da:
92:1c:d4:4b:e8:b9:a3:a9:00:ad:02:ed:c5:dc:d5:ab:46:ca:
6c:1b:88:52:e0:29:ee:65:93:ac:99:ea:53:ff:c4:4a:05:4d:
19:52:25:e4:f0:42:b9:f4:d2:e6:e1:ae:12:f7:81:dc:6a:0d:
da:5f:b0:78:d2:20:61:71:c9:f7:74:fc:9f:0f:64:c7:9e:12:
09:85:47:32:af:40:91:31:19:dc:21:e5:07:5b:dd:83:16:90:
4b:2d:57:e1:08:ae:56:78:8e:29:73:5b:14:b6:d2:af:5f:21:
36:bc:83:2e:88:1c:d1:8a:70:0c:01:27:59:54:f9:33:81:6d:
40:ba:5e:a4:d4:f3:17:21:94:a9:f3:f6:42:36:f4:92:6c:b3:
f8:44:cb:4f:8d:d8:67:e3:d9:ff:e4:e0:f5:2a:12:1d:e2:d0:
e4:a4:79:f3:8c:38:9e:43:ed:73:aa:45:19:f8:56:e5:01:30:
f0:63:30:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:55:05 2025 by rpki-client