Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
File: QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft (raw, json)
Hash identifier: 20pgTNfhUqr61qW9plrZ/7nhhjKyuqPxYyzRWkTIO9A=
Subject key identifier: B8:06:CF:64:19:25:26:4F:8A:FA:B7:68:0D:02:90:3B:FC:30:93:50
Authority key identifier: 41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88
Certificate issuer: /CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88
Certificate serial: 01969DF569F70F1A3BF2A772FD8476D5E459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
Manifest number: 036F
Signing time: Mon 05 May 2025 01:00:28 +0000
Manifest this update: Mon 05 May 2025 01:00:28 +0000
Manifest next update: Tue 06 May 2025 01:00:28 +0000
Files and hashes: 1: CuZieAFfwXX8uyaqskcHIzJ9fWo.roa (hash: pBXWN5uV+yQFyDFWsCRJrE7yKliZlwC2u5aCXtkg+Do=)
2: QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl (hash: 0ygBw7zeO5fRWuhc2kt7tz4bzEEpcJPGzLNwhBWTAEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f5:69:f7:0f:1a:3b:f2:a7:72:fd:84:76:d5:e4:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88
Validity
Not Before: May 5 01:00:28 2025 GMT
Not After : May 6 01:00:28 2025 GMT
Subject: CN=b806cf641925264f8afab7680d02903bfc309350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:03:05:b5:0e:36:2a:a4:30:e9:22:9f:a7:ab:
03:60:8c:7f:fb:4f:48:14:d1:48:b2:62:62:ba:52:
e5:ba:6f:ad:c3:3a:f5:f8:fc:3a:12:c9:6a:ab:56:
ac:9d:95:82:bb:e8:80:88:f5:e0:a5:ea:e6:2d:aa:
26:64:5d:86:2d:46:a4:e4:7c:f2:fd:0f:35:9c:25:
b6:63:60:df:5f:43:cc:f2:42:37:93:17:c5:33:66:
23:43:60:0d:a8:d3:3b:c8:38:f1:33:9e:d8:15:94:
88:9e:1c:93:2b:5a:e4:c0:59:bb:36:f7:ce:0d:1e:
4b:7a:83:99:12:5d:e2:ba:68:52:3d:86:e6:f2:de:
22:32:00:5c:c9:d7:4d:fa:3f:eb:d6:07:7d:9c:64:
ae:51:7f:02:47:f9:ca:f4:75:a9:49:8b:08:1f:b3:
5f:cc:7b:7d:d6:8e:2c:32:12:8d:9b:cc:c4:2a:af:
12:75:b2:5e:52:97:46:37:d1:db:19:62:b8:b0:79:
8b:af:94:0e:c1:d1:f5:dc:b7:eb:2f:bc:46:83:ca:
32:92:d3:2f:f1:1c:24:cf:be:50:d6:ae:78:96:ab:
3c:67:36:60:aa:57:fc:f1:c4:cd:f6:82:c5:99:e2:
81:7d:e6:33:09:78:b2:a7:f0:fd:d5:13:c2:bf:d4:
56:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:06:CF:64:19:25:26:4F:8A:FA:B7:68:0D:02:90:3B:FC:30:93:50
X509v3 Authority Key Identifier:
keyid:41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:4e:bb:09:8a:74:f5:e9:9f:43:d8:bb:a8:e3:a4:a7:de:29:
88:cc:fc:c5:7b:21:b3:9d:7b:87:05:56:17:82:03:5f:e9:00:
58:eb:0c:c5:a4:1c:17:1e:cd:a8:de:6a:49:0c:ff:a6:64:c5:
bc:66:48:11:bd:a6:88:73:cf:67:5f:2e:ed:d6:8b:3b:6c:53:
3a:8b:f9:7f:62:d6:c3:51:df:75:8b:d4:df:3e:40:43:27:40:
35:9b:62:55:52:7a:1b:0f:cf:43:da:ad:0f:2f:08:46:af:8d:
75:db:f4:56:13:f9:b8:c8:14:4e:d5:6f:21:7a:d5:f1:16:42:
4b:9f:6f:10:15:e7:68:ce:bd:ca:bf:90:85:55:e0:5d:00:f1:
11:92:d2:d4:07:f7:87:d9:df:99:58:06:a8:99:55:11:da:a2:
59:3e:4a:f8:1e:c0:d6:d6:5d:31:af:14:3d:35:78:5d:95:8f:
4f:92:4d:a7:2e:64:66:0d:ef:2c:de:6c:a9:90:14:b8:29:b5:
1b:18:0d:b5:33:66:93:8a:98:9a:5d:8c:04:24:d5:07:30:27:
1d:6c:30:8e:25:8a:af:bf:2c:e4:ee:d3:a7:ba:b6:e8:07:c1:
04:dc:a0:f6:dc:1f:f7:fd:fb:14:a8:6c:4f:de:af:03:9c:91:
09:9e:57:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:43:26 2025 by rpki-client