Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
File: QA3igTHHO19TIPUdrmwb1Hq4L5I.mft (raw, json)
Hash identifier: Qpfb2veuX8xifB6Wc0Xb7hKL933kGpoB9494z5VJ9Uw=
Subject key identifier: E1:9E:C1:FF:1C:CA:33:92:BF:19:BA:EA:12:5D:3B:3A:51:76:C6:67
Authority key identifier: 40:0D:E2:81:31:C7:3B:5F:53:20:F5:1D:AE:6C:1B:D4:7A:B8:2F:92
Certificate issuer: /CN=400de28131c73b5f5320f51dae6c1bd47ab82f92
Certificate serial: 0196BCA4B6845F67DA10F17C997CD67AC9C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
Manifest number: 0239
Signing time: Sun 11 May 2025 00:00:33 +0000
Manifest this update: Sun 11 May 2025 00:00:33 +0000
Manifest next update: Mon 12 May 2025 00:00:33 +0000
Files and hashes: 1: QA3igTHHO19TIPUdrmwb1Hq4L5I.crl (hash: OFCoQQnuOBpRIHji2ZlB8gNLcbGDl2s4Syzo4dojWP4=)
2: YPXVOgtlv47MULpqvQ2eiJqw0s0.roa (hash: 1U3YQJEvDPze+SY3FCaghiXBlRWFSFhPdqgWDRzyuw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:b6:84:5f:67:da:10:f1:7c:99:7c:d6:7a:c9:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400de28131c73b5f5320f51dae6c1bd47ab82f92
Validity
Not Before: May 11 00:00:33 2025 GMT
Not After : May 12 00:00:33 2025 GMT
Subject: CN=e19ec1ff1cca3392bf19baea125d3b3a5176c667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:12:ea:10:38:12:e7:57:d2:ee:1f:54:55:ba:
00:77:83:55:24:ff:8d:4a:38:c7:75:91:a5:82:48:
29:21:44:e3:94:73:f5:e5:cb:dd:5a:58:76:89:36:
b3:b5:36:10:95:83:f0:18:67:ca:51:40:6b:3f:0c:
95:7b:ee:c8:5d:94:3c:ad:77:90:7b:3c:f6:ea:b4:
9c:e6:10:ff:50:e5:af:dc:da:2a:11:81:3b:9c:9f:
aa:d2:ae:87:d0:e3:d0:24:26:a7:bf:27:d2:43:64:
15:94:33:45:83:f9:8a:ef:04:1e:be:13:d3:79:1c:
4c:89:08:28:c4:5e:9d:33:b0:4c:a7:0f:93:57:08:
76:7d:ac:0f:6e:00:d1:05:0e:9b:bf:b2:a3:fe:4e:
e3:5a:29:75:89:5a:6b:32:31:cc:4f:0d:df:2d:6f:
0f:86:89:14:2c:6f:04:e4:ae:97:1e:6f:d2:34:a7:
d4:76:58:89:b5:b9:24:fa:dc:47:94:94:f6:0c:a1:
5d:b6:aa:aa:94:bd:c3:94:e4:d3:eb:11:0f:da:a0:
62:f4:9a:7f:5a:20:ed:49:44:86:a8:62:e4:96:63:
d8:29:3c:5b:66:fa:04:5f:5d:0f:6c:81:e5:7c:f2:
37:f1:24:84:d7:76:75:32:05:95:96:eb:b9:df:bd:
78:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9E:C1:FF:1C:CA:33:92:BF:19:BA:EA:12:5D:3B:3A:51:76:C6:67
X509v3 Authority Key Identifier:
keyid:40:0D:E2:81:31:C7:3B:5F:53:20:F5:1D:AE:6C:1B:D4:7A:B8:2F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f1:2f:31:42:67:d3:d8:aa:ac:4f:3f:de:6a:6e:76:43:78:
35:a4:a7:29:d6:19:96:02:65:75:c4:ce:97:e1:91:03:5d:e4:
14:41:c2:39:35:a0:25:0c:6f:07:1b:47:dc:11:c5:a1:13:71:
f4:11:47:b3:ec:a5:29:58:73:7c:3e:27:ad:a2:4b:04:83:f9:
6b:af:76:b9:bf:89:27:70:b1:54:5a:55:8d:71:e9:e7:1d:05:
02:e1:3c:50:90:23:52:e8:0e:2d:c9:1c:3e:56:77:f9:42:cb:
e4:5a:62:54:09:d9:e2:80:11:db:e3:0f:8a:ba:15:84:10:87:
d1:d4:61:27:44:91:91:22:94:f2:69:52:38:ed:a2:48:d0:af:
d4:cf:40:22:db:86:4c:08:1a:e0:d2:85:22:c5:00:9a:27:4f:
33:5d:bc:b7:3f:6d:db:2b:56:a8:17:f6:f4:49:da:f5:20:70:
e3:9c:c0:a5:98:eb:4d:0e:cf:f8:e3:3a:cd:00:ed:2b:c8:24:
97:af:9c:21:e0:46:f3:b7:e7:eb:da:53:b0:56:32:eb:48:ed:
81:1f:0c:82:c3:a2:fd:53:54:e6:a5:c0:70:44:7d:ab:4b:f6:
36:c5:53:b8:97:c0:70:64:54:75:5b:ff:f3:2d:e5:46:94:d1:
88:3b:0a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:52:32 2025 by rpki-client