Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
File: qg-X5jUIIZuWy7IQY0P14bbcWk8.mft (raw, json)
Hash identifier: jpAI8aqACU27HgIcd/KN0gb7XYPN/kWAbBGRxL4aIms=
Subject key identifier: 15:E4:4D:0E:49:7E:3E:60:F2:7C:D0:A9:09:AB:B4:C7:3C:63:2B:51
Authority key identifier: AA:0F:97:E6:35:08:21:9B:96:CB:B2:10:63:43:F5:E1:B6:DC:5A:4F
Certificate issuer: /CN=aa0f97e63508219b96cbb2106343f5e1b6dc5a4f
Certificate serial: 0196BE5CB321C564BE0ACF9505A7AD24A0B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
Manifest number: 023A
Signing time: Sun 11 May 2025 08:01:08 +0000
Manifest this update: Sun 11 May 2025 08:01:08 +0000
Manifest next update: Mon 12 May 2025 08:01:08 +0000
Files and hashes: 1: 9AnxnImjEc49reXZMK2FTMayLmk.roa (hash: 8tldiaw0Efa5JT0iNf3f5fRMFBv7jO6PfNRsCAPI7BY=)
2: qg-X5jUIIZuWy7IQY0P14bbcWk8.crl (hash: 6z8hUeFLBq+r0XuUTIDgRrb7iaNIGnbm7CPD/No4jzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:b3:21:c5:64:be:0a:cf:95:05:a7:ad:24:a0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa0f97e63508219b96cbb2106343f5e1b6dc5a4f
Validity
Not Before: May 11 08:01:08 2025 GMT
Not After : May 12 08:01:08 2025 GMT
Subject: CN=15e44d0e497e3e60f27cd0a909abb4c73c632b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:12:71:02:62:1c:a4:4b:91:d5:55:b1:24:a6:
77:0b:74:67:bd:97:3d:21:3e:b8:3a:d2:71:b9:8d:
34:e1:5c:88:28:bf:5a:80:57:97:e2:82:5f:da:16:
e2:a4:93:27:63:49:90:b0:13:dd:8b:4c:9e:0f:17:
5f:51:75:2a:ed:2e:29:9b:2c:11:5d:38:c2:e8:aa:
f7:14:bd:5e:77:36:52:9d:0a:40:83:08:e9:e6:61:
f1:34:3b:26:7e:c8:dc:2b:a6:02:6c:ae:35:73:13:
4f:c6:90:a8:d1:84:ad:da:43:6c:28:35:34:40:bb:
b5:08:2b:68:d0:70:e4:1c:33:df:d8:88:8d:c4:cd:
d6:97:ae:74:6a:2e:36:b4:68:0d:33:11:9f:6c:2b:
8c:17:42:db:17:03:ee:05:1c:35:a7:15:9a:c2:cc:
4a:a4:ca:0a:25:47:60:ad:5d:22:66:b3:25:0b:8a:
be:75:e7:17:51:d3:af:b0:3f:d5:5a:8a:32:75:9c:
37:07:37:34:ba:74:64:c6:75:6e:72:2a:42:28:5b:
dd:89:86:ad:1a:37:a0:a2:27:12:df:5c:90:3a:d0:
fe:b0:34:82:68:bc:34:c8:77:39:a8:be:2f:4a:70:
34:60:01:29:7b:67:0e:6d:c4:9c:34:c4:81:76:47:
84:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E4:4D:0E:49:7E:3E:60:F2:7C:D0:A9:09:AB:B4:C7:3C:63:2B:51
X509v3 Authority Key Identifier:
keyid:AA:0F:97:E6:35:08:21:9B:96:CB:B2:10:63:43:F5:E1:B6:DC:5A:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b4:94:cd:9f:c7:2d:81:9a:59:55:4b:85:92:79:49:fe:ff:
f3:9c:0e:3a:b0:af:7d:b6:c1:80:ef:0f:54:1a:93:df:7c:21:
65:eb:23:40:38:11:d6:a7:e2:1b:eb:d9:3b:67:ff:a1:82:72:
8c:55:b5:e3:b0:0e:93:62:73:fc:74:6d:de:f2:28:fa:45:d9:
7c:dc:06:1e:e0:7f:cf:12:1d:09:22:df:d3:86:44:b6:ef:e3:
21:c4:22:eb:fc:e4:4c:27:ea:20:1f:e2:fa:f2:ee:87:dd:b1:
ab:66:37:9e:d7:d8:7f:89:0c:98:a0:6a:04:35:54:49:e8:76:
24:b5:95:e2:8a:6d:ab:f3:a8:28:a0:0a:9a:df:0c:81:ed:de:
de:45:c2:21:33:03:45:48:bb:76:be:92:80:76:12:6e:58:3a:
f2:33:c6:2a:4f:8c:a2:e5:a2:14:bc:23:da:33:5c:82:49:ac:
13:af:27:9c:85:99:fa:a2:fb:83:ec:cc:0e:5e:be:95:02:02:
c2:1c:14:26:4f:75:78:4b:51:47:a4:c5:bb:4a:55:63:e1:e0:
24:9f:30:f3:76:df:76:ad:92:07:6a:4d:df:9d:9a:2b:2f:e4:
eb:86:3b:7d:ba:b2:a7:cb:0e:dc:42:cb:41:67:10:f8:9d:5c:
46:17:4c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:47:28 2025 by rpki-client