Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
File: QIAlx94EAODzyI1KEioxfjLF4hw.mft (raw, json)
Hash identifier: 2Wm7G9w1He+cEJm5cmFb7IaRhuwRTgw0QLqGuyf41RY=
Subject key identifier: 49:34:60:84:70:4B:82:23:15:9F:D1:B2:09:24:28:35:3D:DC:7F:AC
Authority key identifier: 40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
Certificate issuer: /CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Certificate serial: 0196C04A9943B46E4E45E8A94FC3E2EAA7D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
Manifest number: 153E
Signing time: Sun 11 May 2025 17:00:36 +0000
Manifest this update: Sun 11 May 2025 17:00:36 +0000
Manifest next update: Mon 12 May 2025 17:00:36 +0000
Files and hashes: 1: GYkYwSyMjSff2hGRE7TeYNMjHAA.roa (hash: L63ZPeMKf3x9Sz6aPgJwaNunh2cW66rmUBDYxNx9F1E=)
2: QIAlx94EAODzyI1KEioxfjLF4hw.crl (hash: CZ0ifx8xEMt462OTuXvb3QQ2DX6qwUYglf5vuwbdip0=)
3: UauqkNEmM03HfyR0DfZ-u4VKpi4.roa (hash: awMAcPwR6G+MfeZBXCCLJ68VGxx4mPcomrMOc4HQztA=)
4: XuDenjm8kUtBAuV4QGpzOH7mGc4.roa (hash: JNV/wOADSaN3R96qV0GAYEvW10iJH7xuBlcwSDA4/FE=)
5: c1UFEngK3GGY1urY5KGBx69byP4.roa (hash: +n2tU72CIBGho6rrhlHMLTcRKx6Op/7dsiuNf5HzdOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:99:43:b4:6e:4e:45:e8:a9:4f:c3:e2:ea:a7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Validity
Not Before: May 11 17:00:36 2025 GMT
Not After : May 12 17:00:36 2025 GMT
Subject: CN=49346084704b8223159fd1b2092428353ddc7fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e1:f5:ed:97:f0:48:96:41:ba:29:4f:10:70:
6d:29:ef:73:fe:57:89:37:b7:b1:88:ce:1e:6a:3c:
42:0e:96:49:2a:15:bb:14:c9:d3:dd:7f:8a:72:31:
55:5a:cb:39:13:0a:9a:69:cc:36:ee:37:3d:c6:15:
8a:9a:5d:26:dd:af:81:cd:ed:55:54:c2:c9:bd:be:
50:28:1d:78:e2:3d:42:c4:09:27:39:cf:fe:e0:1d:
a6:25:3b:dc:9f:ae:1a:68:08:32:ca:b0:b6:42:a3:
a4:ee:e3:28:3b:fb:72:aa:a6:78:40:4f:f0:5f:33:
e4:fa:36:4c:c0:3f:81:c8:ed:59:6f:a4:4d:92:9d:
04:09:e2:97:3a:74:f2:f2:dd:c5:ff:ba:3e:2d:d8:
42:2f:03:ec:04:15:62:0f:73:d0:f9:9f:f3:ac:ac:
fd:be:ce:d9:46:09:b9:6c:5d:87:34:7d:6c:6f:f5:
77:4e:80:74:f7:76:08:47:ca:0b:ea:c4:e7:ab:41:
62:70:c3:61:ed:37:1c:06:97:10:53:f8:bf:f6:82:
7c:67:b1:35:cd:02:e4:b6:2b:95:67:d0:a8:b0:db:
8b:2e:db:76:fe:12:da:1f:17:3c:d0:49:4b:37:4f:
80:21:48:5b:a5:78:4b:31:8f:3e:a7:1d:92:25:13:
67:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:34:60:84:70:4B:82:23:15:9F:D1:B2:09:24:28:35:3D:DC:7F:AC
X509v3 Authority Key Identifier:
keyid:40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:0c:8c:aa:9a:82:9e:a1:80:60:75:37:d4:75:1d:28:44:bf:
83:28:d6:16:f4:3c:a4:bd:58:c9:b8:ba:a0:09:10:07:62:43:
12:e3:39:25:a3:20:6f:d0:75:6c:7d:dd:d6:c2:af:3b:1c:4d:
22:a6:73:70:f9:8c:72:f2:03:c9:b1:f2:af:8a:b3:30:f1:f8:
23:c2:05:f9:b3:f1:77:0a:2c:e8:0b:52:68:dc:59:e8:46:16:
89:f4:8d:5a:6f:b0:04:0f:b6:2c:11:31:36:fc:8e:4b:d7:d4:
51:93:64:ab:19:bc:14:51:0f:e0:8d:43:9d:b6:ae:a6:73:24:
15:11:bb:27:ed:a2:33:7e:f3:dc:cb:81:be:28:b2:c5:61:68:
f9:c8:6d:e1:9e:d0:9f:b4:d6:06:c1:23:2b:66:05:4e:c1:a8:
10:e0:31:03:11:17:4f:65:71:13:78:c3:80:8e:0f:33:5d:8f:
01:22:82:b5:03:6b:d3:4f:3e:7a:66:30:34:b4:eb:7c:a5:8e:
aa:74:99:9c:e5:42:b3:fb:9c:f2:47:b0:e8:36:71:48:1f:76:
0b:fc:79:b0:2d:0d:6f:0f:24:5b:09:cd:f8:1e:01:45:70:e9:
26:be:2f:c8:9d:1b:20:17:5d:7c:0c:44:59:35:83:c3:87:d9:
ea:45:0b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:23:45 2025 by rpki-client