Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
File: QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft (raw, json)
Hash identifier: IIPC0tp1iGwHIONMD7fHYcVAjH3/7lQdrjhNZRtPwI0=
Subject key identifier: 03:5A:2B:CC:D1:C1:FC:CF:90:19:3E:E5:E4:FF:B2:EA:03:D4:F0:51
Authority key identifier: 41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
Certificate issuer: /CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Certificate serial: 0196CF18FAC0431BA980333685DD42CE8997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
Manifest number: 1243
Signing time: Wed 14 May 2025 14:00:42 +0000
Manifest this update: Wed 14 May 2025 14:00:42 +0000
Manifest next update: Thu 15 May 2025 14:00:42 +0000
Files and hashes: 1: CLemqr75Yb48Km-cD1hApiGwC9E.roa (hash: EAtUhRgJzB5CWn94r1qk7eU5voV0S7bWsYXXanEEayY=)
2: QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl (hash: VH4NYcb2KVGAOOXxgBsmLqCwe1KqUifPKKaVUB+g+HE=)
3: yEsMSFNm5dJ-A_JpG2DXLz7wI-Y.roa (hash: 8AHka5aF5G+PfLY03Vs1HshDxFgYYrha9TXGX/Fcp3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 13:46:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:18:fa:c0:43:1b:a9:80:33:36:85:dd:42:ce:89:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Validity
Not Before: May 14 14:00:42 2025 GMT
Not After : May 15 14:00:42 2025 GMT
Subject: CN=035a2bccd1c1fccf90193ee5e4ffb2ea03d4f051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8f:e3:84:2e:a8:6c:45:f5:d1:d9:65:bf:c3:
48:ee:57:94:d6:36:a4:27:8a:d2:8d:05:2a:7c:b0:
1b:d4:3d:1f:b1:94:e3:b6:cf:71:02:29:ed:91:47:
f7:c0:42:ae:80:5e:01:e5:d9:a5:12:35:a3:28:86:
f5:f2:84:79:5f:12:14:90:e4:4f:28:1c:69:8f:60:
86:36:64:24:68:d7:fa:f2:2c:81:87:37:31:e9:94:
e6:55:8b:d0:37:98:7b:b5:dd:c6:a3:e0:9c:31:5f:
db:33:48:06:4a:54:df:8f:c2:d7:4b:96:49:b8:fb:
d1:4d:48:7e:3b:c7:bb:e6:61:e3:f6:63:46:1d:0c:
02:8e:0f:0b:51:9c:50:af:5a:55:53:43:8e:4e:19:
c8:e1:33:4c:7a:cc:94:db:ed:20:13:4e:b7:14:20:
f3:7b:49:09:6c:58:e9:6c:07:9d:3e:fe:3e:43:81:
bf:78:c2:9b:e6:c5:9b:4f:20:16:d5:d4:d3:95:6f:
43:90:58:ee:9e:5d:f4:ef:7b:09:18:e7:4a:61:8c:
2b:3c:1f:b3:e1:15:05:b3:28:e5:4a:17:8a:66:c1:
91:37:66:09:e4:a0:b0:51:7f:21:8e:81:22:93:94:
56:b6:2a:11:4f:60:37:bb:35:a6:61:9c:c5:51:c0:
0b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5A:2B:CC:D1:C1:FC:CF:90:19:3E:E5:E4:FF:B2:EA:03:D4:F0:51
X509v3 Authority Key Identifier:
keyid:41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e8:46:63:5b:1a:77:b7:78:ab:9b:6b:4a:0f:ab:3b:52:95:
be:e3:97:ce:fe:4a:ad:13:c9:61:cc:84:d8:f9:f5:66:40:c6:
c6:a7:d9:da:2f:66:9d:d6:63:f2:1f:e0:bf:20:7b:b3:b6:d2:
a5:cf:84:58:33:9c:d5:b3:bb:d6:91:92:24:54:29:fe:19:09:
2b:99:18:6a:5e:7c:83:f9:6a:dc:80:16:e1:c5:22:3c:b5:35:
b1:00:e3:83:16:48:ae:c1:55:9b:a3:11:f3:4d:75:98:a3:9f:
e2:ab:2b:b8:7e:4a:fd:91:54:2d:e9:cf:eb:bf:e9:69:31:bf:
3c:57:46:57:6c:71:bb:2a:00:c6:7f:67:4f:18:51:3e:c8:2e:
d5:92:4d:77:ea:5c:f8:20:cb:9a:f2:ab:18:82:27:1e:48:00:
d1:dc:99:9c:62:b5:8b:09:7a:a9:fd:96:2b:a8:69:de:09:fe:
0c:65:b6:62:d6:6e:e7:f1:23:c8:61:9c:91:58:8a:96:c3:00:
3f:84:73:f5:64:82:90:65:ec:e2:1b:ba:dd:64:e0:08:fa:74:
81:89:04:f6:9f:33:42:6c:e6:e2:76:a7:7d:4e:6c:9a:26:22:
c1:96:34:28:ae:4b:2b:c5:61:71:9d:b3:fd:d1:64:ca:af:0d:
60:13:79:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 17:14:17 2025 by rpki-client