Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
File: QNiN23rtct6j_41pztZTGlJ5Sqc.mft (raw, json)
Hash identifier: C7Ivoay7XrB1ZVOyWAH4+LD1TqtNH5RVXbdM1FxRTrY=
Subject key identifier: 7C:F2:F6:35:0B:25:46:48:D6:E8:EA:66:40:8F:2B:27:A8:F8:79:7B
Authority key identifier: 40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7
Certificate issuer: /CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7
Certificate serial: 0196BEC9B4DA009BF1756A7D555B56D0C7CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
Manifest number: 10EB
Signing time: Sun 11 May 2025 10:00:12 +0000
Manifest this update: Sun 11 May 2025 10:00:12 +0000
Manifest next update: Mon 12 May 2025 10:00:12 +0000
Files and hashes: 1: NNmIvWC2aG45EdXCFQyfOgMs8UM.roa (hash: dgfGD7cFEmQYML/LCfaIOvrAjQWUEzucY+z8ExOp2jM=)
2: QNiN23rtct6j_41pztZTGlJ5Sqc.crl (hash: lIdRN+RNYdGk8U+U3L4jUhDxtw730EBoF8B2U6Yow0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:c9:b4:da:00:9b:f1:75:6a:7d:55:5b:56:d0:c7:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7
Validity
Not Before: May 11 10:00:12 2025 GMT
Not After : May 12 10:00:12 2025 GMT
Subject: CN=7cf2f6350b254648d6e8ea66408f2b27a8f8797b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:04:53:ac:a4:62:a4:50:c2:5f:4e:6f:8b:f7:
ec:2b:66:c7:be:bc:d4:ca:b0:76:a1:ad:c0:35:53:
ff:ec:7b:e0:7d:1d:05:01:31:c8:ab:8c:ed:e3:55:
3d:6a:5b:34:89:ce:fa:51:5f:6e:b0:61:2d:2c:8f:
06:07:61:b4:ea:22:85:e2:cf:ce:69:10:2e:94:bb:
15:8e:af:11:9c:e7:bf:50:98:d8:39:2e:91:41:47:
45:2c:cc:19:ae:ea:6d:aa:37:39:5c:c1:68:13:e5:
a7:6b:27:90:e8:01:9c:d6:d7:08:5c:4a:a2:ca:9a:
07:52:c2:b5:7d:12:bd:58:b5:b5:01:1d:19:c4:04:
05:7e:fd:40:67:c6:a2:8d:e3:3f:00:86:ce:82:cc:
37:fd:ec:24:0b:37:31:0f:19:ed:6c:78:19:e2:70:
c7:0e:53:5e:f7:5d:13:80:60:ce:c3:20:4d:d4:d1:
91:77:0a:70:fc:80:75:59:fc:da:98:cc:e3:d8:6c:
12:dc:95:68:c0:21:68:28:78:32:8e:9b:a4:bf:3e:
5d:c4:90:a6:ba:b6:8b:bd:f6:2b:a3:23:45:ea:e2:
95:90:ec:71:e0:40:a1:1d:a7:f7:3f:86:8c:a8:13:
1f:22:6e:6a:c2:3c:ee:10:60:a0:cc:db:d0:8b:d9:
1a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F2:F6:35:0B:25:46:48:D6:E8:EA:66:40:8F:2B:27:A8:F8:79:7B
X509v3 Authority Key Identifier:
keyid:40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:12:0e:c6:d9:76:2e:8b:b1:30:c6:0a:5f:00:15:50:b3:ee:
79:c8:71:51:60:2f:f9:ed:1a:a5:8f:6f:4a:41:db:94:41:b3:
14:c1:fc:0c:6f:59:cd:c9:f3:c0:c5:e6:0f:8b:81:7e:ac:ec:
73:74:e2:24:71:71:dd:40:c5:12:6a:31:42:4c:2a:5d:6a:50:
0d:22:c8:16:31:b8:47:af:a2:1d:99:4d:cd:bd:34:58:b2:c0:
12:51:74:ac:c1:29:50:4a:d6:d5:00:11:54:c8:c3:c7:bb:18:
d5:2a:57:2d:79:60:57:54:22:00:29:1a:ef:7f:e1:04:89:10:
f6:8a:70:04:7f:12:8b:08:20:19:d8:39:7d:9f:a9:76:58:83:
fe:2e:be:5f:dc:c2:b6:66:35:d3:e8:b1:88:bb:ac:70:36:94:
2c:35:af:85:ef:21:71:33:f5:65:15:36:19:6d:22:14:0a:4f:
16:18:20:bc:dc:62:22:8a:4e:ab:99:02:3d:c8:53:46:9a:8c:
63:0e:7b:0c:39:d2:c2:95:d9:2d:39:ff:f6:92:57:d4:97:fc:
54:01:87:c1:4b:6b:c4:41:30:e1:c1:d0:20:40:d1:e6:55:11:
cc:3b:80:48:31:9c:38:1a:5b:76:6e:2d:52:cb:b7:93:ae:d6:
ff:29:3e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:49:43 2025 by rpki-client