Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
File: QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft (raw, json)
Hash identifier: QUlThNk0t01taK+VnzGF6YTFnckeSc4+w+stDV3u+f0=
Subject key identifier: D5:C1:09:FD:76:D0:DD:63:62:5B:DA:8A:7C:FA:01:98:C1:D2:B2:E5
Authority key identifier: 42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
Certificate issuer: /CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Certificate serial: 01969DBEB5DB11261D2C62F2818EA289E0EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
Manifest number: 12B8
Signing time: Mon 05 May 2025 00:00:43 +0000
Manifest this update: Mon 05 May 2025 00:00:43 +0000
Manifest next update: Tue 06 May 2025 00:00:43 +0000
Files and hashes: 1: PHhq7bUnGcZX4y_ykkmnYZLunMM.roa (hash: LoLkLVHGuU31zRjTVmAdVTtSVPzxLCqr19G9NEBPRqg=)
2: QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl (hash: XiBjGyjPDcdeAGfXSz2l+ty1/tdGfZI6vvf4QSFWYwA=)
3: ZHuGa1b5EE3BXDt8zUZ6H71dsTI.roa (hash: c5Q65E0/2d2vtEwjuw2BN9yFwucni9qkVj/W8ITRCHA=)
4: mbmOrU1gpeptZI3HpUCwe4-8PxQ.roa (hash: U1SXSUwkwzX7zwHV3CIwtefKowszejuGaOw7kehwc7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:be:b5:db:11:26:1d:2c:62:f2:81:8e:a2:89:e0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Validity
Not Before: May 5 00:00:43 2025 GMT
Not After : May 6 00:00:43 2025 GMT
Subject: CN=d5c109fd76d0dd63625bda8a7cfa0198c1d2b2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:17:0e:6c:e6:e9:bd:5b:6e:3f:e5:67:10:81:
9a:cf:0d:18:3c:ec:37:76:4d:0b:8e:06:30:bd:c8:
3e:95:3a:77:3c:9f:a9:9b:34:2c:e1:80:c7:17:bb:
f8:55:4a:42:89:3d:bf:98:2e:22:9f:e9:7b:8d:0e:
12:e5:68:62:bf:0b:0b:58:f7:60:e0:28:9a:f9:68:
a0:89:a5:7c:f9:a7:56:3b:7d:0e:60:c9:57:84:03:
7e:3c:07:b0:a9:d2:d4:33:6c:a3:e1:6e:fe:bd:af:
d4:1e:db:f5:03:38:1b:47:ab:d3:56:56:10:33:56:
19:d8:6d:d1:f5:c7:72:b4:95:e5:3d:99:db:a3:55:
6e:d9:11:25:ad:f0:94:1d:77:24:06:8f:29:7f:b2:
27:70:f3:f1:04:a8:a7:8e:08:83:7f:97:9b:1c:aa:
e6:d0:d9:53:43:29:9d:97:93:07:1a:78:0d:7e:cb:
72:18:cb:fb:7c:ef:96:95:99:26:2f:39:fd:49:84:
ba:65:c9:23:3e:91:43:8c:b5:84:41:1b:e2:6f:7a:
20:3c:9e:10:fb:b1:f2:64:2c:26:ae:69:ce:0b:a7:
fa:08:08:71:91:bf:33:30:d0:9f:78:9e:bd:84:57:
7d:79:1f:29:34:aa:2f:b8:12:3d:df:91:e5:dc:18:
de:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C1:09:FD:76:D0:DD:63:62:5B:DA:8A:7C:FA:01:98:C1:D2:B2:E5
X509v3 Authority Key Identifier:
keyid:42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a9:16:a8:19:7c:eb:e0:c6:39:bf:ac:3e:c6:0a:01:ff:14:
13:80:40:c0:b3:33:ec:73:15:e2:f0:ba:20:61:de:e6:3b:f6:
a0:21:60:ad:54:ae:bf:a5:28:77:be:ea:4a:b9:f2:e1:79:9e:
17:c7:5e:02:7c:67:8c:30:a4:c0:70:4e:81:79:2a:ee:31:c1:
7b:49:e7:41:31:c4:35:c3:69:50:fc:aa:af:75:52:e4:df:4d:
58:e4:b3:8f:2d:10:fd:bc:f5:cc:3b:77:b5:ee:1b:78:8e:e9:
47:49:a5:e7:ce:b6:af:70:94:90:7f:c4:f4:a8:92:ac:99:12:
1d:fa:02:ed:09:c2:70:0a:25:8c:1c:59:bd:ed:6b:24:e3:30:
2d:f8:7e:67:b5:de:87:93:de:8b:53:19:60:e2:3c:70:1d:d6:
97:8f:2a:2a:28:dd:a2:21:78:e4:4a:f1:56:e9:b0:d5:b2:f6:
e0:bd:3e:c3:1f:ee:38:5f:d8:cf:51:7d:a7:c1:82:9b:72:ca:
f6:3e:da:43:85:19:cc:94:c6:89:9d:56:df:e7:ff:3b:4d:ef:
6a:f4:76:64:4d:d2:0f:c0:c8:12:f1:15:c7:90:81:3e:4e:7c:
8d:f6:b3:d7:e4:35:96:0b:b9:0b:89:57:3b:81:32:e8:b6:21:
e0:f7:69:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:23:16 2025 by rpki-client