Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
File: QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft (raw, json)
Hash identifier: JXXFPI+i9Nu497ww3g0yxry9lEpX4ZWPqJWIU1lJKGg=
Subject key identifier: 2E:F4:A1:C7:31:27:46:35:C8:74:84:72:B7:96:82:E8:35:F1:D7:C3
Authority key identifier: 40:51:8E:CB:D6:46:4D:78:AD:45:15:51:64:8F:92:06:F7:FB:5F:42
Certificate issuer: /CN=40518ecbd6464d78ad451551648f9206f7fb5f42
Certificate serial: 01969E6385787D236AC1BD05AA21304D0EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
Manifest number: 023C
Signing time: Mon 05 May 2025 03:00:44 +0000
Manifest this update: Mon 05 May 2025 03:00:44 +0000
Manifest next update: Tue 06 May 2025 03:00:44 +0000
Files and hashes: 1: AgU01_JNS28etvxsdg12QdG_9TQ.roa (hash: 8EHC06vY9bnzZwrB6V3JBnUnbhffqwXotHDPwmpI35A=)
2: QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl (hash: wKWjuJeCrT4mCdch49PzhisubnJ23E8o32fvae7l/6Y=)
3: WRsKHbHpQ9jZIvciUb2Wz6AHSW4.roa (hash: 8Nnxx5No66UiBNPIjWPMS0jddJkyISjgfdGXoNS0d/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:85:78:7d:23:6a:c1:bd:05:aa:21:30:4d:0e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40518ecbd6464d78ad451551648f9206f7fb5f42
Validity
Not Before: May 5 03:00:44 2025 GMT
Not After : May 6 03:00:44 2025 GMT
Subject: CN=2ef4a1c731274635c8748472b79682e835f1d7c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:82:ef:df:c4:c3:60:4c:18:42:8a:b3:1a:b0:
37:8c:46:c9:64:3c:6a:5e:29:10:60:b1:8a:e0:45:
6d:70:59:a9:a1:f8:de:c5:c3:55:80:57:7e:20:96:
73:dc:2e:c8:81:66:54:85:2e:a7:ea:e9:4d:9d:14:
cc:92:53:f3:6e:3d:48:71:cf:04:9c:89:bc:9e:46:
b7:c8:dd:45:2d:a5:dd:e3:65:ed:95:ca:49:5d:b0:
02:19:59:95:0b:72:4b:6a:49:1c:65:b6:ed:9b:eb:
02:76:57:7a:ce:46:bc:4b:02:ae:9c:07:92:3a:9a:
47:fe:b1:8f:92:b4:9f:59:92:80:2f:04:b4:b4:d9:
58:f5:9f:92:de:4f:d2:f8:57:07:6b:da:5a:e4:e1:
17:de:d2:03:a3:d7:82:0d:85:3c:52:4f:6c:e4:32:
f4:ac:15:d2:ba:c6:2c:e9:f5:f4:2f:df:81:4a:7e:
20:33:76:15:aa:03:a2:01:80:45:ce:4a:f2:17:54:
65:1d:e8:9e:83:f5:11:05:24:9d:b5:25:25:e6:28:
e2:19:28:4b:ea:fc:5d:73:0f:6a:53:8d:15:88:fc:
47:51:6b:99:67:fa:c9:b2:c6:d8:a6:49:b9:66:86:
18:63:87:22:4e:52:7a:fb:46:28:e7:05:bb:36:0a:
19:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F4:A1:C7:31:27:46:35:C8:74:84:72:B7:96:82:E8:35:F1:D7:C3
X509v3 Authority Key Identifier:
keyid:40:51:8E:CB:D6:46:4D:78:AD:45:15:51:64:8F:92:06:F7:FB:5F:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:1a:1d:8a:9b:c6:e3:be:86:1a:80:44:b6:be:37:05:11:a4:
eb:51:9d:86:4a:5a:75:5d:cd:7d:53:50:b9:5b:46:0a:2a:40:
e8:bc:ff:f7:b2:05:19:12:a6:ea:84:8e:57:39:c5:ed:d0:d1:
91:42:f6:ab:80:d3:a6:b6:f9:9f:0d:ee:0f:5f:4c:b7:53:c1:
f2:ca:35:1a:86:82:2e:4f:e2:fe:47:21:d0:2f:24:a3:5a:cc:
42:68:df:2d:67:4f:9e:41:b1:f2:83:c1:f1:a4:48:99:1f:02:
52:31:28:50:b4:09:44:ec:52:08:f1:f0:7c:c1:95:ec:ed:e5:
a0:ee:f9:9c:e9:12:d5:cd:97:e0:db:03:c4:60:7c:70:e3:57:
28:92:71:69:7b:a9:46:9d:a4:7a:24:30:a0:26:49:b8:e4:f0:
d2:c1:1b:66:9c:34:43:c3:45:ac:09:75:1c:24:58:15:d0:a0:
3b:e9:af:64:b8:09:e4:f6:62:91:1b:ef:be:4e:1b:3c:98:21:
fd:87:38:1a:9e:97:af:4a:ec:3e:28:3e:5f:89:f7:ed:0e:07:
6b:06:98:fa:b7:91:36:0e:3d:59:61:b3:b4:74:06:f9:ff:5d:
d0:98:f9:1a:6a:3e:ad:7f:bb:db:0e:dc:8f:b9:86:57:00:48:
7a:86:9c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:28:14 2025 by rpki-client