Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
File: QSasSvr9JpiBwQrS7KL03vjtvSE.mft (raw, json)
Hash identifier: amtp23lo3nyoswj6f22z1Ie+t/UuXe8gWSh4yKe6Ezo=
Subject key identifier: A9:D1:B9:52:BB:0C:8B:69:79:B8:B4:EC:4E:F1:CC:64:6C:34:6D:27
Authority key identifier: 41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
Certificate issuer: /CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Certificate serial: 0196BD80C5AEEE4520393F3E9A12FEF258C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 04:00:55 +0000
Manifest this update: Sun 11 May 2025 04:00:55 +0000
Manifest next update: Mon 12 May 2025 04:00:55 +0000
Files and hashes: 1: 1-OpArz-cvr3_w4LMxpPZzSxCtqI.roa (hash: p66SMlwKH8qksSnzyFy8M1MJ9eGvVUlsB0A2v++rXYg=)
2: BO2GxdENWf3nZf4IjS3W9dxIBdA.roa (hash: CoT9/NP4/6nCeDdnm6fFk7HZ3lUZardt1KwDlood7sQ=)
3: QSasSvr9JpiBwQrS7KL03vjtvSE.crl (hash: Xh89iwSIstN4QUg9f6l/f7RuutYs9BH9sI9o+Lu7/Ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:c5:ae:ee:45:20:39:3f:3e:9a:12:fe:f2:58:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Validity
Not Before: May 11 04:00:55 2025 GMT
Not After : May 12 04:00:55 2025 GMT
Subject: CN=a9d1b952bb0c8b6979b8b4ec4ef1cc646c346d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:aa:2d:10:55:2c:81:20:54:9e:e1:67:a1:48:
6a:2e:7f:bd:fa:04:73:08:0a:3d:15:52:2e:ba:d7:
87:4a:5f:a1:aa:20:cd:a5:59:8d:60:33:15:fd:ed:
24:70:ca:92:c3:ca:c0:52:4e:50:38:a4:ec:d5:be:
bb:3f:a4:55:b7:47:df:2e:a1:ba:1e:62:f2:8c:f1:
6e:85:2b:ed:88:2b:f7:1d:f2:aa:e1:cf:82:af:44:
13:5a:a1:0c:ac:19:5a:31:a0:58:9a:06:1b:fa:86:
ac:d2:b3:95:fa:20:21:e1:6c:5b:8d:20:04:9f:bb:
05:ca:e8:99:68:64:94:17:46:84:7f:26:7f:51:c8:
da:65:86:04:f1:b7:f0:e7:66:3c:11:66:10:f3:54:
d1:e3:5d:e3:0a:e5:fa:2a:71:71:c2:17:e4:72:60:
fc:f9:3b:3e:fa:c9:f9:dd:42:91:be:5c:1e:2e:51:
3f:e2:1b:07:29:ce:28:af:f8:1c:79:bf:d4:dd:0b:
cf:4d:5c:df:32:c2:b7:56:4c:f5:70:92:f4:1e:d7:
4f:98:9c:91:cc:3a:6c:ce:e9:47:a3:82:87:9d:71:
7c:eb:98:7e:6b:ef:59:91:87:05:d6:c1:90:34:24:
99:5e:ed:62:90:26:f9:9e:bf:b9:58:fc:70:9d:3a:
ad:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D1:B9:52:BB:0C:8B:69:79:B8:B4:EC:4E:F1:CC:64:6C:34:6D:27
X509v3 Authority Key Identifier:
keyid:41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:08:57:a7:79:8e:1c:7c:b6:0d:1f:ab:a4:84:cc:29:c1:c6:
47:69:84:f5:d7:3b:1e:ef:8a:70:44:de:d3:94:2b:28:22:10:
d7:aa:31:67:1c:44:40:72:cb:a0:e8:20:c3:82:81:5f:3f:d4:
ab:99:75:db:27:37:a1:17:dd:91:bf:41:ea:2a:10:71:bf:66:
71:0d:b1:81:b0:4b:04:cf:92:af:d1:05:57:20:2a:4b:45:fc:
88:d5:a2:da:39:8a:6a:eb:d3:b7:c2:d1:01:ca:ef:04:11:87:
c5:27:90:51:36:98:32:a4:10:51:c5:d9:ba:01:f7:9d:c0:09:
eb:c2:dd:75:77:cc:d3:eb:2c:72:a0:cf:32:3c:e4:e5:bb:0f:
63:25:0a:9f:b4:f8:7d:63:b1:0d:fc:80:65:11:35:dd:89:15:
a6:b1:c8:93:ec:33:eb:41:4b:0f:03:4d:c0:70:cc:40:52:a3:
08:38:4a:17:06:23:be:73:9a:76:f2:05:d6:17:8f:18:72:83:
f4:70:cc:56:ac:21:b7:7c:3d:cb:f1:06:72:5d:7b:71:09:65:
2d:2b:d8:b6:ad:32:03:ae:90:a1:ce:3d:f8:5a:97:79:8b:e3:
76:3e:9f:62:6a:72:5f:93:4d:dd:12:2e:dd:76:b9:de:9a:2c:
3e:65:25:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:03:24 2025 by rpki-client