Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
File: QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft (raw, json)
Hash identifier: rjVJ18kRn3KH+svQ3A76H0P5MAnZHn1Gqrog2tv0XAg=
Subject key identifier: D8:E1:86:CD:AB:38:AE:98:62:FB:E2:E1:DF:E6:EF:97:91:EC:9C:69
Authority key identifier: 40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
Certificate issuer: /CN=40339d304499d069aecd8bd0e8fba02e522f576a
Certificate serial: 0196C45E14FC1E0F60A22C96EBAEF37C0E17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
Manifest number: 14CB
Signing time: Mon 12 May 2025 12:00:22 +0000
Manifest this update: Mon 12 May 2025 12:00:22 +0000
Manifest next update: Tue 13 May 2025 12:00:22 +0000
Files and hashes: 1: HM44YU_keUzYw0-k8-_A-z_iUEg.roa (hash: SXS4UlPdGWp6+QLYLhTDdcpIKj693zGOOUmfQDbJfCI=)
2: QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl (hash: MlU6+iXCfbtYK7gSBupzBp5xRwxO+07xdzDOjYnL7eI=)
3: kh936l2vxgccX_jvVlzYGLxpdnk.roa (hash: 1aSc0Ne3PFeWf8CzHXerC/R90wO3YKjdcfKwJxtbP2I=)
4: yR56vcKwFBMaxDiG7yY2cvJ4n0Q.roa (hash: iQ1t4A53B7El/PSKuRvXWWegJvuT/fcPU9ZHNFZ4LFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:5e:14:fc:1e:0f:60:a2:2c:96:eb:ae:f3:7c:0e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40339d304499d069aecd8bd0e8fba02e522f576a
Validity
Not Before: May 12 12:00:22 2025 GMT
Not After : May 13 12:00:22 2025 GMT
Subject: CN=d8e186cdab38ae9862fbe2e1dfe6ef9791ec9c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:86:bc:0f:14:94:0a:4a:ba:0d:71:42:2a:d3:
f4:f1:2a:c2:e2:cf:a5:b3:ea:23:3d:1c:db:48:23:
58:e3:85:eb:47:1e:22:88:6f:45:3d:aa:31:ff:7a:
45:5b:b5:97:5b:fa:8a:ca:ac:53:f0:86:c2:0e:41:
73:54:d2:63:b9:10:db:a9:d0:08:d1:47:e7:54:95:
0c:c8:a1:64:18:95:f7:ff:7e:70:94:16:b7:56:1a:
c0:5a:0c:6a:21:ec:4d:db:ad:3f:8b:df:59:15:aa:
f1:5a:e9:71:59:ee:ea:4f:c2:e9:e8:11:b5:d0:18:
50:66:19:57:0a:83:20:e7:2e:7d:ff:39:55:9f:a6:
48:b1:d6:5e:e2:2a:14:d2:71:fc:82:66:6e:6a:0f:
d4:07:b9:e2:d4:f2:dd:e0:83:27:52:49:1f:2a:73:
3e:82:3f:6e:0a:74:e8:ad:35:84:a3:59:d9:da:74:
ec:05:37:e4:f3:bb:c4:e3:93:77:aa:68:20:0a:d9:
72:04:ce:1b:24:89:c1:55:45:9b:9a:6c:8f:6d:2c:
15:26:ac:02:53:67:e6:dd:3b:fe:f7:f2:20:7b:76:
c1:9e:cc:81:96:9c:2f:dc:23:dc:c5:3a:0d:f4:3f:
19:9a:35:c8:b5:a0:09:82:12:d5:eb:57:16:08:d4:
0d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E1:86:CD:AB:38:AE:98:62:FB:E2:E1:DF:E6:EF:97:91:EC:9C:69
X509v3 Authority Key Identifier:
keyid:40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:33:0c:61:7a:e9:d8:70:56:ed:a9:02:30:cb:bf:ea:de:96:
02:d0:51:57:e5:bd:10:5e:ca:2d:fb:ae:ae:dd:5b:d6:05:34:
83:97:c1:23:11:bd:f0:ff:ad:b1:f4:e8:b8:3e:06:e8:64:b1:
22:73:23:cc:cc:77:07:a9:6e:26:c0:97:53:36:7f:15:74:41:
bb:d7:6f:1b:4b:60:9a:b2:f3:03:15:b7:df:c2:e2:54:f1:b2:
0a:65:83:63:19:fd:a3:72:69:a0:53:15:05:9c:f7:f5:b5:7f:
f2:ef:30:67:df:ca:b6:fd:17:87:6d:93:cf:f7:53:b7:67:74:
30:b6:ea:a9:a4:7a:2d:eb:8c:32:0e:19:26:a9:77:85:9b:a9:
47:9d:40:63:72:a9:ee:fe:5f:69:1f:2a:f2:52:e3:8d:93:57:
53:6b:c5:77:b4:45:3b:7c:b8:06:5e:3e:8d:c3:ce:9c:55:cf:
55:31:d7:93:62:0a:2f:ba:61:f3:4f:c6:1a:85:cc:10:18:af:
df:2a:a3:1c:a6:fe:ef:b6:97:8e:09:04:86:de:bd:a2:13:5b:
52:6e:a9:92:18:d3:6d:13:8f:a7:e6:18:bb:b1:fe:42:47:2c:
08:b3:66:ee:df:14:71:80:84:d4:af:ba:51:8e:ac:75:71:0c:
60:93:6a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:26:42 2025 by rpki-client