Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
File: QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft (raw, json)
Hash identifier: md9CICSdAHdbHJ2z236TlBRiaYSEgYVG0xh5a4oUSNU=
Subject key identifier: 0B:B6:D3:04:4F:AE:88:AE:6B:20:94:02:65:85:06:CA:F5:9D:AD:03
Authority key identifier: 40:C3:D3:7B:E4:35:A9:C3:3F:1C:63:E5:0D:0D:64:64:ED:16:10:04
Certificate issuer: /CN=40c3d37be435a9c33f1c63e50d0d6464ed161004
Certificate serial: 01969ED13A260C0D4CB15C1751149C67B20C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
Manifest number: 147F
Signing time: Mon 05 May 2025 05:00:34 +0000
Manifest this update: Mon 05 May 2025 05:00:34 +0000
Manifest next update: Tue 06 May 2025 05:00:34 +0000
Files and hashes: 1: I3asWb0Ke_YTZ9x8-oMXPECbM9c.roa (hash: DFO6kXzPePgIeZm2V5GpwnQuioD5uOOrmUgP/RCLs14=)
2: QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl (hash: ACKU32oZs2hyC70JFWE2o31hUsKFtYfxXq7h6rPxq8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d1:3a:26:0c:0d:4c:b1:5c:17:51:14:9c:67:b2:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40c3d37be435a9c33f1c63e50d0d6464ed161004
Validity
Not Before: May 5 05:00:34 2025 GMT
Not After : May 6 05:00:34 2025 GMT
Subject: CN=0bb6d3044fae88ae6b209402658506caf59dad03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d0:44:0e:b2:a1:a4:dc:3a:c2:b7:5d:de:4f:
61:0a:df:c7:58:ad:1a:16:42:da:e9:a7:c4:0b:9c:
ea:c0:b4:dd:d9:fd:02:46:5b:7c:03:d1:2e:2b:81:
ea:7f:c3:1f:bb:b1:11:ba:a4:d2:61:98:24:32:41:
3e:04:a3:1b:7d:a1:49:4c:cd:c2:1b:2a:3e:45:44:
b2:72:77:69:3e:6c:35:a9:b0:0a:dc:ff:ec:ad:09:
53:85:f3:15:f6:a2:4b:01:96:45:ee:ef:86:f2:58:
36:e0:7a:fa:3d:74:92:2a:ea:36:fb:a4:d0:66:01:
bf:91:30:a3:5a:d3:40:93:81:c5:58:88:28:c0:ba:
c4:03:8e:41:5c:17:dd:6c:24:9f:44:41:eb:e3:b0:
b1:79:f0:bb:6d:9c:25:1e:06:4b:18:07:e2:00:3b:
7c:29:25:26:69:70:90:c6:31:90:88:ad:ed:9d:77:
eb:48:b9:b7:18:9c:2f:e2:ac:09:df:57:f5:d6:47:
d8:58:9b:ec:cb:11:77:95:3e:6a:77:38:d4:e9:2c:
79:a3:8a:65:24:cc:e8:93:db:ef:7b:96:da:41:32:
16:7c:b4:8e:94:4b:bc:eb:ae:85:b2:45:ee:7a:cc:
c5:a2:5b:2a:de:28:4e:55:60:17:63:d0:e2:9c:f3:
d2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B6:D3:04:4F:AE:88:AE:6B:20:94:02:65:85:06:CA:F5:9D:AD:03
X509v3 Authority Key Identifier:
keyid:40:C3:D3:7B:E4:35:A9:C3:3F:1C:63:E5:0D:0D:64:64:ED:16:10:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:61:ec:10:39:c9:43:48:4a:71:18:01:3d:70:6c:ab:5f:30:
7a:04:87:32:4c:4a:50:5a:e1:f5:e9:3e:38:91:df:84:43:70:
17:72:b2:ea:b7:e8:7f:b9:cb:5c:cf:51:c7:9e:35:b8:37:80:
cc:c4:10:f1:5e:2f:29:de:99:13:de:30:52:68:50:79:b7:db:
14:c3:1c:18:0a:64:bd:75:92:dd:d0:d8:cb:ce:0c:4b:e1:43:
17:b0:bc:11:79:54:36:de:7c:1c:9d:fe:85:95:b6:62:a6:e8:
a5:c0:54:e2:70:6f:b4:02:35:71:7f:0e:ad:e6:ba:54:d9:fa:
3a:68:3c:c7:b3:46:63:fa:88:35:2d:b6:42:e3:49:ad:8b:f8:
76:78:95:39:9a:de:bf:93:4e:da:56:ca:d5:1a:9c:03:0f:e8:
7c:50:c1:c4:c0:2d:ad:14:75:73:9e:0f:69:24:d7:49:c7:8d:
b7:31:02:8c:77:7b:7b:60:27:ac:15:0d:5d:23:7c:de:07:54:
aa:3f:c1:50:84:ad:e1:85:c5:4a:ec:41:a4:36:c7:e6:cc:5a:
82:96:bb:ab:cb:df:91:e0:46:05:88:57:d9:9d:3b:a8:56:fc:
6f:b6:80:ea:28:1a:c4:82:8e:82:1f:79:9d:0a:6c:18:2b:ad:
40:d7:f8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:14:46 2025 by rpki-client