Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
File: QXQcBdStftaQ5XHvXtD4dSLaR9c.mft (raw, json)
Hash identifier: KIaRuRPgwKs4BW5kWC5NlshC7QQMFLA1FzzjDaJq/TE=
Subject key identifier: A0:6C:22:6C:A4:86:36:97:3C:40:B3:89:29:DF:6A:8F:83:24:22:D7
Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Certificate serial: 0196B7B58A458C5B12A4E0699B35440C0A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
Manifest number: 10DA
Signing time: Sat 10 May 2025 01:00:49 +0000
Manifest this update: Sat 10 May 2025 01:00:49 +0000
Manifest next update: Sun 11 May 2025 01:00:49 +0000
Files and hashes: 1: OGdT4POvRKruGu3WkbDGyulN7-E.roa (hash: b9NvSjn/aHaqKwweHNflC1898I0DAuoT3bsiarDB3TM=)
2: QXQcBdStftaQ5XHvXtD4dSLaR9c.crl (hash: hGJJgVNSMWPtXSN+JjpxpEGagc7dUQ9186P/5nnDEAo=)
3: jAQvRieRHpKKkjGe64CNxUPvYbk.roa (hash: PMyEFynYeCxi/eWEtMPHh64XLB427usSjnQuhMiP8MA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:8a:45:8c:5b:12:a4:e0:69:9b:35:44:0c:0a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Validity
Not Before: May 10 01:00:49 2025 GMT
Not After : May 11 01:00:49 2025 GMT
Subject: CN=a06c226ca48636973c40b38929df6a8f832422d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9d:b0:5e:29:bf:6b:54:af:a0:dc:52:d4:2b:
75:75:17:18:c9:ca:4a:6d:25:de:5c:45:89:a7:f6:
7a:41:ad:ee:09:5c:e4:1a:59:5d:0b:92:02:00:44:
96:77:c9:07:0b:10:08:58:3a:d1:68:7a:84:9c:fb:
d3:9d:a6:dc:13:d8:bc:fb:a3:36:a3:c2:86:57:cf:
f7:89:41:0d:7b:08:cc:08:48:65:8a:56:a9:80:ed:
d9:db:1a:c2:ae:60:4f:ba:25:76:1d:bc:10:db:7d:
b4:c7:22:c9:60:6b:56:6a:14:58:6b:cd:f9:15:79:
45:52:1a:9f:96:d7:1d:7e:e4:77:b3:1d:73:e4:ad:
9e:75:de:0f:54:60:fd:a4:3c:70:7a:9b:70:ac:94:
aa:a0:ba:f0:75:00:79:5f:a6:bc:f2:b6:3c:91:e9:
99:e2:df:b5:67:2d:14:b3:49:c0:30:43:09:9d:2b:
f5:d2:f1:6d:5e:14:e7:6f:9a:36:ae:6d:0f:c6:30:
9f:a6:e0:31:51:1a:70:9f:bb:95:ea:ca:1d:9f:ef:
8f:61:95:fb:23:4b:1a:fd:e6:10:40:a9:d4:81:3a:
74:9c:aa:e1:bb:39:45:f1:c2:b0:3f:2f:c1:23:54:
47:a2:c3:91:26:e5:0f:ac:4d:60:71:99:ef:0d:09:
eb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6C:22:6C:A4:86:36:97:3C:40:B3:89:29:DF:6A:8F:83:24:22:D7
X509v3 Authority Key Identifier:
keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:aa:79:d4:77:ae:6f:42:5c:ed:dd:6a:1b:98:00:de:bf:f9:
c6:5c:f2:44:d1:e5:8f:84:55:1f:27:c7:d9:b1:b9:e2:c3:03:
96:08:1e:21:6f:d8:0d:ae:1d:cf:df:71:4b:af:a3:85:b0:a4:
1d:cd:0c:a2:d9:8b:d5:b6:76:1a:88:7b:0d:94:56:b5:b3:d2:
b8:23:55:a4:14:6c:f2:16:f5:a3:89:37:46:53:84:d8:11:34:
d2:b1:52:b8:26:f6:b8:7b:4c:51:2f:f8:b0:f1:e1:25:a0:88:
5f:6e:ed:fd:f1:93:cf:be:36:d4:b8:98:4d:4a:66:12:f8:27:
71:d7:04:a9:00:16:8d:e5:46:c7:19:bd:15:a7:a7:6f:63:df:
39:60:44:99:eb:f7:9e:90:39:38:e8:73:b7:f4:53:44:93:e5:
e6:5a:27:72:0b:6d:f3:c8:b7:1e:0e:cd:1b:d2:e2:08:bc:cf:
a3:fc:d1:6a:57:d2:75:95:6b:9e:2d:20:87:e8:35:74:cf:45:
11:e4:ff:e9:af:5f:4a:bd:d1:0d:d7:2c:99:bb:c5:fe:f6:d7:
1e:e2:6d:23:8d:24:56:b8:e1:07:a0:d4:74:09:0d:dc:bb:b3:
95:30:49:8c:26:ef:bb:9a:f4:c1:cc:d9:0c:f2:5f:23:57:e0:
3c:10:d3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:22:58 2025 by rpki-client