Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
File: QO9YSZMMyd10IR-zfiQRgkmh_EA.mft (raw, json)
Hash identifier: KV8zY5bupORy5tSmVa87a475fX0G57JXDZFNGlS/1ks=
Subject key identifier: 92:A8:4E:5B:B1:F8:CA:B6:39:9C:76:87:2A:6F:31:10:C7:B3:B9:A9
Authority key identifier: 40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
Certificate issuer: /CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Certificate serial: 0196C34BBF5A133C61340D0F327CAB84122C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
Manifest number: 1541
Signing time: Mon 12 May 2025 07:00:43 +0000
Manifest this update: Mon 12 May 2025 07:00:43 +0000
Manifest next update: Tue 13 May 2025 07:00:43 +0000
Files and hashes: 1: QO9YSZMMyd10IR-zfiQRgkmh_EA.crl (hash: ijPXl47220c33JC4DDuhRTR3yJ09H9T8EqezTCEnsYs=)
2: UO07512-xyl7tPlxWkeH0XFHtjw.roa (hash: FGw3ypGv9x4G+fHO0s0Uxmz/ZFgsQL9y06qgJnZxgwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:bf:5a:13:3c:61:34:0d:0f:32:7c:ab:84:12:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Validity
Not Before: May 12 07:00:43 2025 GMT
Not After : May 13 07:00:43 2025 GMT
Subject: CN=92a84e5bb1f8cab6399c76872a6f3110c7b3b9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f7:61:f1:e5:e6:82:08:fa:70:c2:42:c1:83:
a4:65:d5:df:ff:14:38:63:c4:cc:7c:3f:6c:62:36:
df:d2:aa:32:6a:7c:38:b6:3e:34:7b:2b:eb:4a:41:
9d:91:77:d1:09:1f:ea:69:f1:da:46:26:4d:2d:9d:
f1:cd:74:4b:45:e5:03:33:ff:d2:b3:ae:a8:5a:ec:
82:08:81:6e:a0:5d:13:54:8b:45:92:13:41:6c:e4:
97:48:d7:6a:f8:4e:f8:a6:50:cc:2a:b6:65:cf:7e:
0a:8e:b4:b4:12:8d:21:dd:50:4d:61:cc:41:2d:3c:
61:ac:e5:53:84:53:51:92:ae:3f:d9:47:b8:0c:8a:
5d:f7:ab:27:14:38:4f:4d:1d:7f:8e:cc:eb:c2:f0:
17:73:ce:bf:31:6d:a7:52:c3:a3:1a:39:bd:f4:d9:
23:ca:c0:4a:9c:20:4b:ec:33:41:6f:14:37:9f:0b:
ca:ac:2f:6e:89:e5:71:3b:95:61:c2:d1:74:73:91:
7d:cb:49:11:89:ec:7f:e1:99:c5:1a:9f:68:ee:cf:
c2:02:02:68:09:72:e9:dd:14:01:b1:bc:55:33:fa:
8e:a4:e8:2d:9a:f1:bd:b2:31:98:0c:f4:70:d1:05:
21:a4:92:f8:3e:98:31:94:34:b2:4e:8f:8c:3c:e4:
70:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A8:4E:5B:B1:F8:CA:B6:39:9C:76:87:2A:6F:31:10:C7:B3:B9:A9
X509v3 Authority Key Identifier:
keyid:40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f3:68:5c:47:d7:2b:c4:cf:2e:67:64:50:f1:b5:dd:08:24:
48:8d:30:aa:f7:f7:06:96:8f:38:3a:96:3e:21:fb:20:a9:b8:
b1:8d:0d:43:b9:78:da:b9:c9:6e:46:6a:d4:1f:37:1f:ab:0b:
28:a4:55:3a:37:e0:4e:b6:5b:0a:55:8d:47:4e:ac:5b:89:db:
f9:9a:5b:75:f6:0b:0b:6f:75:82:ae:1a:83:f8:dc:6b:57:2f:
ec:70:39:6f:f3:40:13:b9:d1:fd:a6:29:61:65:e2:2c:f3:a5:
84:ab:98:85:1a:04:c6:fd:d9:dc:03:45:4d:9f:65:65:7a:9d:
7a:83:96:72:65:89:a2:6f:38:52:bc:d5:33:9f:21:e1:be:8c:
57:af:63:7c:e9:44:80:aa:d8:d9:c8:5c:24:0f:80:8e:b3:56:
b8:dc:36:8b:17:53:ea:d8:38:23:16:d5:ad:6a:fc:38:0d:02:
cf:1c:69:4b:03:f3:8c:7b:fc:62:16:0a:0a:b3:92:a7:2c:ea:
f2:62:9a:c2:81:e2:94:ff:b9:58:7a:f1:b5:ae:c4:40:87:05:
ac:d1:38:97:52:1b:60:b2:62:a0:7e:b4:e5:89:91:b7:f3:e9:
46:a9:a8:fb:35:eb:9c:13:08:32:de:79:ba:6d:93:e4:dc:ef:
91:57:26:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:11:14 2025 by rpki-client