Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
File: QHShwDg61esPBYjkwzlLo0AQpiE.mft (raw, json)
Hash identifier: l6UYtajwpqHgv31fdXV+qu2t7MgGoqneBvZNmKvdt18=
Subject key identifier: 0B:AE:ED:90:1B:F5:BD:A8:BA:EC:0E:CF:5A:3C:DD:B1:0C:F7:18:3D
Authority key identifier: 40:74:A1:C0:38:3A:D5:EB:0F:05:88:E4:C3:39:4B:A3:40:10:A6:21
Certificate issuer: /CN=4074a1c0383ad5eb0f0588e4c3394ba34010a621
Certificate serial: 0196E079F5A60D8DE2CB0479C81FC0A06A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
Manifest number: 1548
Signing time: Sat 17 May 2025 23:00:11 +0000
Manifest this update: Sat 17 May 2025 23:00:11 +0000
Manifest next update: Sun 18 May 2025 23:00:11 +0000
Files and hashes: 1: DrD2EGGK8WeukKhW_YJ8LCGTR78.roa (hash: b5xoiz2oFHur8HWu35m6ElddpxbfSrT/Y2/iqOY1S6Y=)
2: IcWYNvOBamTxu6amEYkiVctQe18.roa (hash: DVw0i9jC2LodVXO+VD00rdFIuWtsdo/jV9gSa2jJOsM=)
3: QHShwDg61esPBYjkwzlLo0AQpiE.crl (hash: OkWnsRJIt3lnkT4ravVD+FcB9jUTc9+IzC/CvvCZF8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e0:79:f5:a6:0d:8d:e2:cb:04:79:c8:1f:c0:a0:6a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4074a1c0383ad5eb0f0588e4c3394ba34010a621
Validity
Not Before: May 17 23:00:11 2025 GMT
Not After : May 18 23:00:11 2025 GMT
Subject: CN=0baeed901bf5bda8baec0ecf5a3cddb10cf7183d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0b:b7:71:40:af:5c:02:e1:d4:41:56:43:23:
2b:6e:0c:88:a4:13:57:8d:75:98:3c:9c:22:f6:0c:
30:ae:70:7c:a9:0a:a8:e2:45:cc:7f:63:73:19:cc:
59:b2:ed:fb:5a:bf:e9:70:79:b2:0b:b5:22:e1:89:
84:9e:81:54:aa:07:1b:58:77:02:9a:f2:ba:8b:b3:
65:b7:11:08:5e:ce:49:24:c0:89:ac:a4:88:8d:bb:
b0:e0:d8:6a:4a:11:7f:c1:6d:9b:65:6b:8e:ef:9d:
c4:b9:ae:a2:26:38:f7:9a:d1:3b:32:c7:2a:28:78:
63:41:af:75:1f:64:79:8b:62:f5:9c:a6:26:e5:e0:
19:a1:2d:86:f4:bf:51:8a:d5:a7:71:fd:d4:38:1a:
f1:1b:5a:2e:b5:8c:1f:ab:33:df:3f:74:22:ba:34:
34:fd:6b:68:94:ad:57:89:0b:a6:ee:a0:b4:47:5e:
0b:a3:9f:02:1b:00:3d:f4:20:21:13:05:da:63:24:
3a:10:72:a8:f2:1b:f6:87:c2:1e:68:f2:78:ea:24:
ca:51:40:ed:c1:34:d9:2a:76:97:57:48:5e:e4:31:
7a:54:31:ef:ef:ab:a5:5b:04:b4:54:f1:3a:12:30:
b1:79:45:0e:19:e4:7e:87:0b:bc:3a:91:8a:86:e0:
bd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AE:ED:90:1B:F5:BD:A8:BA:EC:0E:CF:5A:3C:DD:B1:0C:F7:18:3D
X509v3 Authority Key Identifier:
keyid:40:74:A1:C0:38:3A:D5:EB:0F:05:88:E4:C3:39:4B:A3:40:10:A6:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:df:11:6e:c6:62:1f:4e:9e:c2:1a:37:55:d8:69:a7:18:71:
2c:ee:09:51:70:0e:05:b4:fd:8a:8f:68:5e:5b:0a:6c:42:0b:
92:e1:e5:f3:dc:06:cd:72:13:9d:fe:f3:70:90:cf:75:ca:06:
29:1e:e4:27:1f:49:bf:31:ed:cb:04:3b:96:62:42:9b:70:4c:
27:68:7a:fe:6d:28:aa:2d:5f:db:36:10:ec:33:b3:6c:02:a8:
88:9d:9c:92:d6:e7:4f:9a:1d:01:a9:04:71:85:4c:da:fe:19:
ef:44:02:f8:4a:5e:44:fa:25:dc:7c:e0:0f:45:c7:0c:13:9b:
e8:29:2b:5a:01:62:88:7f:58:c0:66:08:2b:da:fb:6a:42:d3:
74:f3:a9:fd:d0:64:eb:98:66:91:da:c0:50:aa:25:f8:a5:b0:
8d:ef:25:59:f6:57:64:8d:dd:b5:05:c8:bf:b8:39:09:ac:c2:
0d:a1:b8:ba:e2:01:77:06:76:f8:37:c5:28:c3:76:ad:cf:c6:
6a:28:a7:1f:51:ce:2d:7f:31:6d:3d:1f:d5:6f:72:14:69:5b:
2c:55:c5:de:a8:74:72:5a:6f:3c:05:1f:72:56:63:67:0f:fb:
4c:1b:97:32:dc:8c:e0:43:03:60:31:d4:14:b9:c3:50:05:c0:
f7:71:4c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 00:48:53 2025 by rpki-client