Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
File: QGqSJQwoWA8q1MwcNXsColp5DPc.mft (raw, json)
Hash identifier: 26komzNPmweBHQzN+99a2uZzHZJM2TXuYJEzh1Irqy0=
Subject key identifier: E6:D7:B2:D6:85:9F:2A:9D:61:76:AC:E9:5C:AB:4C:35:0C:00:4F:8C
Authority key identifier: 40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
Certificate issuer: /CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Certificate serial: 0196A4D3938C4843F81330C9E58CB3F3E574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
Manifest number: 1529
Signing time: Tue 06 May 2025 09:00:51 +0000
Manifest this update: Tue 06 May 2025 09:00:51 +0000
Manifest next update: Wed 07 May 2025 09:00:51 +0000
Files and hashes: 1: QGqSJQwoWA8q1MwcNXsColp5DPc.crl (hash: XDAZhzuC/m8hOeh8dpuVcNsQzNN7iMhg4GCok2RsxG0=)
2: osrkqaQb3qx2EG4vPDrSx-jUbRs.roa (hash: 60lpTHLn4dLpnmjc421kdUFig6Uy9lDHTrD8OxkZHo4=)
3: xkbe7-bpi_soiL6y9FjVY-pZjq4.roa (hash: DD/O2GJZO7TOSqwXXJo222/YwW4YcV/75ci14nBdOpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:d3:93:8c:48:43:f8:13:30:c9:e5:8c:b3:f3:e5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Validity
Not Before: May 6 09:00:51 2025 GMT
Not After : May 7 09:00:51 2025 GMT
Subject: CN=e6d7b2d6859f2a9d6176ace95cab4c350c004f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:70:14:53:d6:9d:b1:72:cc:27:5f:9c:8b:78:
df:ae:13:d5:69:da:b7:a2:73:e4:1a:d8:57:b5:18:
53:1d:13:0b:4e:fc:27:15:21:14:33:be:35:7c:24:
9f:9b:47:f6:bf:9b:bb:8d:da:ae:a9:e5:3c:18:d5:
2d:ca:02:70:fa:9a:32:a9:51:6c:4e:be:bc:32:7b:
e3:3b:5a:0a:b8:32:9d:9a:92:dd:09:76:a6:fc:2c:
8b:91:5e:f9:83:b9:8a:1e:d4:0f:67:99:44:15:49:
65:01:87:24:a1:74:d2:bf:67:43:ec:2c:ac:c9:eb:
1c:fb:7d:c8:92:ab:0f:e5:22:3d:1f:4f:e5:d1:d8:
17:18:bc:1a:d9:43:37:7f:e6:cf:c5:0c:23:f7:a9:
82:b7:3b:a5:af:23:05:42:a5:d3:33:d3:5d:5b:ee:
94:1f:bd:3c:6f:19:d3:00:90:18:0e:ad:cf:ea:7f:
0d:a7:ee:8b:68:1a:6b:73:d0:eb:8d:df:0e:ab:bb:
4c:c0:01:49:c6:1a:44:f2:78:f1:dc:51:af:0c:f2:
db:0b:56:fc:de:4d:82:10:52:e9:a0:ea:35:f3:08:
0b:88:a9:0d:01:4a:f2:ed:1e:9e:1e:e8:5e:f6:65:
5b:db:ba:ad:e2:2a:cb:95:90:1f:9d:3f:04:43:cb:
65:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D7:B2:D6:85:9F:2A:9D:61:76:AC:E9:5C:AB:4C:35:0C:00:4F:8C
X509v3 Authority Key Identifier:
keyid:40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:3d:6f:b3:15:52:72:cc:69:1f:01:10:4a:1f:7b:82:4f:e9:
31:1f:f8:da:cd:3f:3c:10:65:bd:a3:04:0c:b7:16:6a:66:13:
57:f6:eb:20:3b:ae:66:e9:17:03:a1:33:43:07:ab:2c:bd:50:
73:62:9b:8a:55:7d:a1:8e:e0:80:41:4f:74:3c:c4:ea:b1:5b:
f2:46:81:57:2e:15:c9:2c:9b:40:30:45:6b:a2:09:3e:e0:a9:
73:13:32:07:a9:d0:c3:01:06:d1:fb:34:38:9f:1d:8a:6a:77:
22:4f:1f:08:7d:40:a2:91:b9:2b:48:c4:f2:26:cc:5a:b0:9c:
35:1d:a0:05:3c:1d:e2:90:40:33:ee:14:92:e5:f6:c4:57:10:
87:fd:bf:53:7a:ad:69:f9:1b:f2:e5:76:63:f1:77:56:8b:48:
85:37:56:8d:32:2b:6f:77:4d:73:c5:04:69:aa:78:db:1a:32:
15:4b:8e:91:6c:43:51:f5:4a:a4:9a:1a:91:cc:58:52:11:2e:
a1:9e:73:b9:b5:c0:5a:8b:1f:a7:d9:1d:23:ff:b6:ca:a5:73:
8d:0e:b3:db:95:04:8f:16:44:12:76:99:9a:6f:ab:ba:2b:ab:
a9:a7:81:1a:71:15:b0:53:a3:50:f3:86:e6:5e:04:ea:c5:8b:
ae:e9:ea:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 16:42:23 2025 by rpki-client