Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
File: QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft (raw, json)
Hash identifier: hxlogTEA/lhfJ+/E1oIdmKL1bcf23H60c8fDLliyVmM=
Subject key identifier: 38:85:F2:C1:04:E7:B3:7A:0B:AF:13:80:F6:34:FA:33:51:70:D2:4E
Authority key identifier: 43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1
Certificate issuer: /CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
Certificate serial: 0196AFC4E9199F2DC124A4C6F9031C4C8B80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
Manifest number: 152D
Signing time: Thu 08 May 2025 12:00:39 +0000
Manifest this update: Thu 08 May 2025 12:00:39 +0000
Manifest next update: Fri 09 May 2025 12:00:39 +0000
Files and hashes: 1: 1OkV1FOSt0CIRzcv_xhQZDIhaCY.roa (hash: 0nS1ugbBt4Oiv/4rCAPHlWm5w4EZo3UZ1Why6gpAxu4=)
2: KmelkdSsmbJtVWU94thK7d4v5RE.roa (hash: oIEVJa5VewYKMBXTZDUCkwziB09TzVnzHNBtgzRneDA=)
3: QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl (hash: y6FLaryQfXlzZW2Xj5g5LeXJ/nLML/CDwrDUAW7Tv28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:c4:e9:19:9f:2d:c1:24:a4:c6:f9:03:1c:4c:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
Validity
Not Before: May 8 12:00:39 2025 GMT
Not After : May 9 12:00:39 2025 GMT
Subject: CN=3885f2c104e7b37a0baf1380f634fa335170d24e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:29:3e:c0:ca:17:74:96:87:71:de:ae:02:7e:
e2:7d:1f:34:01:62:1e:ca:94:f1:22:f2:24:ae:f0:
11:72:90:a2:c9:d7:be:35:61:ed:40:1e:4a:bb:a7:
ef:52:d4:09:7f:99:e3:65:23:37:b8:b8:3d:ba:83:
0b:85:0c:65:e4:57:13:4b:d8:08:de:90:b5:c8:e4:
88:10:f4:8e:2c:f9:e6:65:96:15:25:53:ba:49:8a:
46:3f:45:d3:e5:99:b7:19:a2:d6:e7:58:90:1d:07:
07:b1:58:77:63:ce:c2:3c:07:f4:f4:41:92:83:df:
5b:97:e0:30:41:e4:92:e8:3d:b8:b4:dc:50:d3:b6:
6d:dc:6d:d6:ea:41:f6:25:38:fe:be:93:4d:99:8c:
88:74:c1:30:55:81:e8:b2:64:1c:b6:9a:66:4e:56:
4f:d0:3f:28:b2:af:87:bb:f2:d4:39:42:7c:d8:57:
60:25:ad:8a:71:05:15:39:02:95:24:01:21:2d:93:
49:88:2a:ac:45:cd:b1:52:40:09:3d:e6:5d:d3:c9:
21:a0:fe:e1:12:86:de:db:dc:d4:4c:20:bc:cb:14:
52:b8:c7:9c:5f:86:18:12:ea:80:10:dc:24:c6:d1:
0c:36:d0:58:71:d2:fe:30:95:46:52:49:94:73:41:
28:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:85:F2:C1:04:E7:B3:7A:0B:AF:13:80:F6:34:FA:33:51:70:D2:4E
X509v3 Authority Key Identifier:
keyid:43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b3:8d:a0:5d:fb:36:f2:2c:93:eb:41:c7:cf:62:a6:49:5b:
29:3e:c4:ae:70:6c:06:5d:4e:1b:bd:d1:c0:6c:28:d9:a5:e4:
5f:8f:40:af:73:13:9a:6b:88:f0:2d:6e:55:6d:5d:24:e3:47:
06:2c:63:34:c5:e7:62:f7:55:14:3e:04:88:04:0a:aa:f4:f7:
05:98:d7:17:77:71:16:b5:1a:1e:ec:03:75:8a:ad:eb:fa:1f:
b6:b9:0a:2f:81:d7:49:3b:bd:79:ac:2d:bd:28:fa:9d:6e:5f:
00:c1:19:28:24:ea:bd:56:80:bd:ad:73:bf:b3:88:cb:81:cb:
73:2e:8f:65:e9:5d:c4:bc:0f:32:3a:8e:fb:5f:c1:7f:91:b8:
04:24:34:97:8d:bf:02:e9:e5:13:75:78:a5:87:55:ed:2d:40:
21:13:da:9f:37:58:3f:6e:df:60:8c:56:d2:f5:b9:84:6a:97:
c1:65:30:14:84:cb:71:ab:15:6f:4a:b8:67:23:cd:e5:50:ae:
6c:2b:7c:00:b5:3e:f7:78:3d:2e:0b:63:a0:44:1f:91:c3:ca:
8d:d3:57:15:72:41:3b:82:b5:b5:64:0a:70:f4:9f:b0:86:3e:
91:93:a7:33:66:3f:47:77:c4:ab:53:3e:21:31:0c:b5:18:67:
b8:a5:78:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 16:20:48 2025 by rpki-client