Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
File: QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft (raw, json)
Hash identifier: CL4vsv31x+4dXduQc2HdUZp1DFUzeOR+PnEurIHjN8c=
Subject key identifier: 6E:D3:A9:33:24:F1:8D:A4:D7:E4:01:30:9F:8D:05:12:3A:C7:79:FE
Authority key identifier: 41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
Certificate issuer: /CN=4100e4b4a97882c1798c470e3abd805e325dd595
Certificate serial: 0196B74771B6C1FF23247976C5C29D2A88D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
Manifest number: 0A3D
Signing time: Fri 09 May 2025 23:00:34 +0000
Manifest this update: Fri 09 May 2025 23:00:34 +0000
Manifest next update: Sat 10 May 2025 23:00:34 +0000
Files and hashes: 1: QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl (hash: INVa6iF8YiSgRF6Zcfiono0eq3J/AZqj2la/jGq7zR4=)
2: dKp1x4AjnPUcfIO_WrYQasCbX4c.roa (hash: BBLyfF5z+X1cauuxHi1cH0OZMMJW5dshnRCgSvteyno=)
3: uBNZ4MqXESz6xGHzQdhbKOD3CeA.roa (hash: Xvf1KJxZcyYU4khA0juJ7NXfjXv9HKqoCzWln+BqLrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:47:71:b6:c1:ff:23:24:79:76:c5:c2:9d:2a:88:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4100e4b4a97882c1798c470e3abd805e325dd595
Validity
Not Before: May 9 23:00:34 2025 GMT
Not After : May 10 23:00:34 2025 GMT
Subject: CN=6ed3a93324f18da4d7e401309f8d05123ac779fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e6:02:b8:91:ee:c8:26:40:eb:dc:4e:44:91:
b0:4b:ff:07:27:c7:c9:b2:bc:93:39:c4:ef:44:01:
cd:68:2a:07:5b:1f:e6:4e:c0:4c:0c:97:9a:b4:e6:
b2:3a:33:df:62:53:87:66:86:87:dc:9d:96:4f:24:
24:70:b7:7a:a1:7e:c6:59:b0:7a:91:59:8d:8a:ac:
91:19:f6:73:25:30:95:0c:46:9a:07:96:ac:4b:b1:
3b:88:6b:62:fb:f2:54:7c:fa:77:cd:d1:d5:8f:05:
f4:38:b5:66:bf:33:c0:c2:a8:b3:9a:ee:93:87:a9:
0c:9e:35:eb:f8:1f:a3:6a:3f:c5:61:5c:4a:0e:c9:
b5:6e:f8:2a:75:c7:01:b8:7d:a3:e0:af:22:20:43:
26:1d:22:2c:59:39:b4:c4:a0:d7:cc:77:04:a8:f1:
86:14:34:c1:62:32:e5:6b:32:bd:dc:e1:99:6e:82:
8e:8d:18:fc:92:ba:ff:98:a2:68:94:ab:f3:03:e0:
b3:32:48:6b:1d:c5:97:9e:f9:57:46:18:5f:7c:2c:
9c:62:19:d1:60:78:64:23:78:f6:29:e4:43:a3:d0:
e8:6e:59:02:55:1f:8f:f3:bc:14:78:0b:a7:ce:30:
62:10:af:b3:ed:1f:2a:f2:a0:2a:30:b8:78:25:51:
f8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D3:A9:33:24:F1:8D:A4:D7:E4:01:30:9F:8D:05:12:3A:C7:79:FE
X509v3 Authority Key Identifier:
keyid:41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:50:1a:30:ca:27:7c:5d:fb:40:70:ae:3a:03:03:62:4f:58:
17:0c:0f:56:35:a9:b8:2e:93:b7:fc:6f:86:bb:a7:dd:77:d9:
5c:9b:f0:55:32:76:93:b9:93:0a:9f:be:1c:ec:d4:42:ab:33:
9e:d7:0e:4d:7a:33:cb:b7:e2:78:06:66:46:78:aa:b5:91:93:
07:33:88:e0:6a:11:e2:01:21:ee:4d:69:a0:29:4e:12:6f:76:
b2:d2:e6:bf:03:9c:3f:31:c9:af:1f:92:ba:f9:a7:00:98:f2:
2f:0e:e7:06:d7:74:6b:6c:bc:bb:b3:c1:0b:f7:67:c5:71:62:
2a:c1:b9:f5:44:2e:a7:e8:64:0c:a3:89:8c:06:c5:a5:4b:f3:
ed:4f:6d:96:7a:b7:af:0b:75:41:06:e2:f8:2b:e2:8a:5f:7e:
9f:90:b8:0e:c4:04:b6:24:c6:f4:4c:50:04:b1:e9:95:37:f5:
8f:b6:f4:99:33:fb:20:76:ae:f5:fb:4d:4d:0e:a8:ec:8f:63:
a9:1b:d7:76:ba:c6:98:5c:11:23:14:0c:fa:8c:4b:94:f2:fc:
71:15:f4:38:8f:b9:00:c4:4e:6c:d4:1e:8c:7d:f7:56:49:ee:
85:64:69:65:85:35:78:63:a8:7d:49:7f:e5:f1:f1:9f:64:11:
0f:9f:ed:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:58:39 2025 by rpki-client