Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
File: QF1kV0EhVne3dI0f3v1BYgetsS0.mft (raw, json)
Hash identifier: 4zhVhGbGmiH31gcPifLzkOS+SerZvOMQ0cAImvt9+iI=
Subject key identifier: 3E:CB:19:15:A8:7F:44:C6:0D:B9:C5:50:02:A2:DD:8D:42:5B:D3:B3
Authority key identifier: 40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D
Certificate issuer: /CN=405d645741215677b7748d1fdefd416207adb12d
Certificate serial: 0196BF6F5637489A6B3B7F6503642F480EDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
Manifest number: 091D
Signing time: Sun 11 May 2025 13:01:06 +0000
Manifest this update: Sun 11 May 2025 13:01:06 +0000
Manifest next update: Mon 12 May 2025 13:01:06 +0000
Files and hashes: 1: QF1kV0EhVne3dI0f3v1BYgetsS0.crl (hash: Gu7AX5iht4AkUMcb99suAZkuBbA4nbac3cWcVmLBD28=)
2: fWWj4vN4Pakh4py4ZoRjfwdn1QQ.roa (hash: FY8bBIFYDCHCGhqOrrG5nSouUPyCK8D06l8J0Ub7EYk=)
3: nRHvC3S6H6OF9LLq0ogOX8Zl4yo.roa (hash: tS76E2lzZsDNXN+CpTO/PY5u/Eonx622qRvZjqr5TcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:56:37:48:9a:6b:3b:7f:65:03:64:2f:48:0e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405d645741215677b7748d1fdefd416207adb12d
Validity
Not Before: May 11 13:01:06 2025 GMT
Not After : May 12 13:01:06 2025 GMT
Subject: CN=3ecb1915a87f44c60db9c55002a2dd8d425bd3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:70:4b:20:59:73:f0:f7:b5:d7:7c:4b:16:eb:
1a:dc:9d:7a:c4:3f:4e:95:96:33:1c:c3:41:a4:a2:
86:12:97:8c:f1:58:4d:f7:78:6d:cc:8c:29:b1:e8:
1a:60:4d:50:f7:35:81:c6:8c:dc:43:14:81:59:13:
2e:ad:bb:3e:b5:42:28:9d:df:98:9b:43:2c:6d:fd:
40:a3:50:c5:f2:1a:11:dc:64:86:9a:7b:29:d2:a7:
d5:5a:78:fe:1e:bb:dc:c0:f5:2c:83:ed:4a:39:f4:
0b:b9:44:af:1e:90:06:78:c9:4b:35:e9:fc:53:42:
3d:89:08:2f:29:32:84:e6:97:bb:16:03:55:0b:40:
01:13:0f:4d:fb:ca:2c:3e:b1:76:d9:e2:ee:82:5e:
03:a7:6c:82:6c:fc:90:57:07:76:4a:64:b1:e6:87:
88:de:ac:80:5d:0a:94:ea:37:ed:50:b4:99:76:2c:
fb:8f:38:a2:61:60:da:4c:17:52:29:b1:c4:0a:6d:
14:35:91:69:c6:8c:bc:f8:d1:27:7e:fe:f2:6b:a6:
43:bc:5a:40:48:d4:38:16:10:69:03:5c:98:8d:40:
4f:fb:67:20:c3:f9:5e:a4:dc:32:24:83:fe:d3:5e:
a7:e9:34:c3:58:09:84:b4:41:1e:8f:cc:1a:b9:fb:
33:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CB:19:15:A8:7F:44:C6:0D:B9:C5:50:02:A2:DD:8D:42:5B:D3:B3
X509v3 Authority Key Identifier:
keyid:40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:12:cd:ab:97:3c:dd:2a:4f:10:5c:0d:c2:bf:b6:22:67:c7:
1a:50:93:26:e6:a8:a9:c2:91:c3:ce:07:a8:76:ab:c0:fc:0f:
77:d0:74:09:16:a8:65:cf:70:68:af:12:9c:9f:03:a2:7d:4b:
03:88:a7:53:52:7b:bf:08:c3:e3:05:de:cf:08:da:08:b7:fe:
c0:e4:8c:9a:82:77:d4:04:c6:9d:89:94:45:39:6d:d3:93:ce:
e8:9f:84:e6:c8:80:0d:e9:bf:c3:dc:e3:9f:34:66:f5:c3:77:
7a:41:9f:c0:17:ce:31:1b:ac:4e:5d:ea:45:f3:19:a7:61:6e:
0c:82:cd:43:5c:52:08:24:75:75:18:4a:0a:5a:f8:d8:69:af:
a6:a7:e6:1e:b6:57:28:88:e0:95:ec:4a:59:37:b0:8c:6c:02:
53:b3:07:85:39:a0:f4:e8:2e:97:ab:15:f3:15:5e:c4:29:17:
3c:87:20:76:3b:fb:fb:d5:dc:db:a9:53:03:b4:f6:5d:c8:f4:
8b:ff:f2:66:18:a5:f8:8a:b3:7d:82:06:68:4a:9f:18:7b:65:
8e:e7:a7:c6:3c:df:2d:dd:f8:02:5d:78:d2:23:b2:65:4a:2d:
d8:39:90:04:60:1b:48:3c:66:29:89:e7:a6:b4:43:dd:49:f8:
98:0d:28:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:03:07 2025 by rpki-client