Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.mft
File: QD8Iu6_6QWGEMgOop1erbpVGsM4.mft (raw, json)
Hash identifier: TMDBw/4khs/EEnsJujCXVIp/r8QCWFUI2aFAcR7Z7VA=
Subject key identifier: AC:8D:92:F5:CD:DF:0D:65:E3:14:BD:D5:A9:19:C6:4C:BD:5C:E0:6C
Authority key identifier: 40:3F:08:BB:AF:FA:41:61:84:32:03:A8:A7:57:AB:6E:95:46:B0:CE
Certificate issuer: /CN=403f08bbaffa4161843203a8a757ab6e9546b0ce
Certificate serial: 0196C0B8A919057FFF32277200EC6B1D2DAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QD8Iu6_6QWGEMgOop1erbpVGsM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.mft
Manifest number: 0449
Signing time: Sun 11 May 2025 19:00:49 +0000
Manifest this update: Sun 11 May 2025 19:00:49 +0000
Manifest next update: Mon 12 May 2025 19:00:49 +0000
Files and hashes: 1: 4PjPPpWKgAtzAAOasr7gIk0JbPI.roa (hash: yiKX1aQ5yWrVl7HwLmjfK1M9G+FpWFiXbyU5qVlLbDY=)
2: QD8Iu6_6QWGEMgOop1erbpVGsM4.crl (hash: mR/cwzGaBzoiti0Dk1BN3pJt4/wsGkrEnilxtg+JmnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QD8Iu6_6QWGEMgOop1erbpVGsM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:a9:19:05:7f:ff:32:27:72:00:ec:6b:1d:2d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403f08bbaffa4161843203a8a757ab6e9546b0ce
Validity
Not Before: May 11 19:00:49 2025 GMT
Not After : May 12 19:00:49 2025 GMT
Subject: CN=ac8d92f5cddf0d65e314bdd5a919c64cbd5ce06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fa:c6:c1:91:ff:39:c0:10:68:b7:13:cf:cc:
b0:5d:1c:06:93:06:5d:ff:a0:8e:59:35:92:4e:3a:
83:c7:d9:6f:ca:1b:83:17:0e:53:6e:06:f8:7e:eb:
89:87:10:ff:72:f8:63:35:4e:a4:3f:33:be:ee:62:
01:fa:a1:50:5a:b8:8b:59:6a:54:aa:c0:28:c5:4d:
a3:e3:70:6d:35:cc:58:2a:1e:d5:dc:8c:c2:c3:4c:
5a:ad:9e:dd:79:a0:d5:5d:42:c9:55:9e:e1:57:59:
71:aa:69:0e:2a:95:33:ef:4c:2b:77:8f:a2:e2:6b:
3c:3e:6c:fb:28:88:fe:4a:4f:68:d8:a5:1d:ba:a0:
8f:4f:dc:7b:b0:3a:cb:b6:b2:ea:5d:7c:6f:de:80:
ba:0f:3b:15:6b:25:9f:c4:fb:c9:97:d4:45:30:c8:
ed:f6:54:0a:d8:46:fa:b3:2d:c4:10:e5:0a:3c:05:
17:28:4f:4e:49:33:0e:af:80:9d:fb:0c:d3:e6:fe:
c3:2a:f8:35:b2:d2:eb:a6:a0:a9:c6:d7:bd:95:6f:
79:c3:f2:ec:14:3d:ec:a6:44:9d:16:2e:9c:ff:5b:
f7:87:cd:2b:f0:d3:ef:3e:06:3c:eb:ae:42:e2:69:
56:ee:82:11:d4:9f:60:62:7d:56:a2:0b:80:09:c3:
2e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8D:92:F5:CD:DF:0D:65:E3:14:BD:D5:A9:19:C6:4C:BD:5C:E0:6C
X509v3 Authority Key Identifier:
keyid:40:3F:08:BB:AF:FA:41:61:84:32:03:A8:A7:57:AB:6E:95:46:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD8Iu6_6QWGEMgOop1erbpVGsM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:31:05:72:c8:99:a5:5b:ca:5a:47:b9:4e:61:b4:21:87:2a:
45:29:b1:ec:d1:20:e8:7c:47:57:4f:e0:78:f9:24:98:47:ac:
54:34:6d:5f:67:86:ca:0a:fe:0d:72:22:fd:b6:66:64:28:3e:
fc:ce:08:e5:e9:a8:b8:ff:3d:51:96:d1:ea:15:8c:3e:9b:71:
b7:bf:fa:95:65:9a:4c:c0:3c:9e:e1:85:95:38:2a:f6:3e:3f:
24:03:9e:d1:ae:bc:8f:dc:39:31:ca:df:60:81:d2:78:9a:7a:
3c:5d:a7:f0:47:b8:42:77:ec:df:f5:e1:bd:c1:f1:a5:77:0a:
9d:f1:27:d3:b7:aa:8b:80:c2:9e:9f:53:1a:22:35:aa:e0:cd:
c5:1b:53:9a:dc:f3:f3:87:8f:3b:a4:ae:ef:12:14:66:0e:25:
ba:88:f3:b0:08:a4:a2:88:40:31:29:2a:77:2d:35:bc:b8:aa:
a7:6c:52:e1:26:ba:6f:5c:15:2f:6b:ae:7a:a5:9c:72:94:8e:
f8:5d:fe:f9:f4:a3:5e:4f:92:2a:22:78:cd:62:92:14:7b:c3:
ef:af:9f:b9:f9:cc:34:97:d0:18:e2:34:3d:61:b8:58:d3:d9:
c7:d9:1b:cf:24:31:1e:82:c9:8c:96:6e:a2:53:2d:bf:85:f7:
98:ed:95:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:51:23 2025 by rpki-client