Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
File: Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft (raw, json)
Hash identifier: fMsYbmZDHC0VNGDSTTa2U8AVbuG+oo0F0ITgiK1xG4s=
Subject key identifier: 22:DD:D9:08:A4:00:0D:BC:E6:80:0D:CD:02:17:98:FB:E3:63:7E:F4
Authority key identifier: 43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB
Certificate issuer: /CN=431f1480651f1b338be26341e2db3a0aa3b344eb
Certificate serial: 0196ACFAB2514ED11D91F9EA9452C8C560E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
Manifest number: 040C
Signing time: Wed 07 May 2025 23:00:32 +0000
Manifest this update: Wed 07 May 2025 23:00:32 +0000
Manifest next update: Thu 08 May 2025 23:00:32 +0000
Files and hashes: 1: 3ZVx610sqQi3jR1aN5jm4CubkNI.roa (hash: ailedL7i/J97fdockeVNWVcnZPHz5O3htVX32ZMAjHU=)
2: Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl (hash: Xb6hfXefCfUXinduG4O9W/TS0yT/D2b8eNNodC8A/Ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:fa:b2:51:4e:d1:1d:91:f9:ea:94:52:c8:c5:60:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=431f1480651f1b338be26341e2db3a0aa3b344eb
Validity
Not Before: May 7 23:00:32 2025 GMT
Not After : May 8 23:00:32 2025 GMT
Subject: CN=22ddd908a4000dbce6800dcd021798fbe3637ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b2:72:b0:22:7f:f5:cf:fb:9d:ee:0d:dc:bc:
b6:e3:63:4b:c7:1b:f6:59:d5:b6:5f:76:e7:1b:16:
fc:55:c2:fe:91:b2:d4:ff:a1:94:5f:5c:64:8a:bd:
ee:c5:08:d5:92:c6:97:4d:59:3a:33:e0:f8:0f:f8:
91:69:b8:ed:e6:be:69:7a:23:6c:e5:df:70:08:68:
9a:97:25:f1:75:0a:cc:78:19:f4:21:1d:d9:22:25:
a6:30:ef:28:f3:84:86:c8:60:87:18:5a:91:40:4e:
4a:b7:57:21:d4:89:6a:b1:3c:36:2f:fa:d2:d0:9a:
a3:8b:20:04:b7:23:23:94:39:d5:b1:89:a5:34:cb:
1c:d8:c6:12:56:f5:53:44:42:3a:a7:e3:c2:28:a2:
80:d8:95:e9:6e:4e:55:49:70:ef:8c:f4:76:4a:d6:
1c:24:15:a5:61:12:10:7d:74:24:0e:92:d6:86:5e:
b6:d2:c7:a5:7d:b0:d2:f0:3b:25:94:6d:95:f2:b0:
b0:15:dc:19:83:ed:29:4f:f9:89:ef:ec:3e:fa:d1:
c7:4d:d4:da:26:33:74:0d:cd:a9:77:db:ea:9c:15:
ff:f3:85:14:b6:8f:5d:ed:c5:03:20:9e:1e:ee:32:
ab:ff:b9:79:a0:84:b0:f9:23:3e:9e:fe:fa:6b:6c:
8f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DD:D9:08:A4:00:0D:BC:E6:80:0D:CD:02:17:98:FB:E3:63:7E:F4
X509v3 Authority Key Identifier:
keyid:43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c7:73:38:11:7a:b7:34:f4:ef:40:8e:25:81:9a:13:1b:bf:
0d:08:d1:5e:5f:1f:c3:f2:9e:e3:7b:10:f9:85:d9:5e:49:c4:
8b:44:b7:ce:a1:78:c3:6f:c2:e2:6c:9a:2d:fe:4e:f4:50:8f:
0d:c8:49:4a:95:e6:14:ca:1f:8d:4e:a3:1e:1e:c1:b8:a1:64:
45:de:2c:27:53:a2:d1:81:8b:be:05:51:4b:1f:c3:2a:4a:cb:
9e:5f:e5:38:a3:2b:cc:a9:d4:60:e9:f8:72:5f:b1:a1:13:5f:
5d:4b:a8:b2:64:68:11:26:f5:05:1e:36:bc:19:d4:18:e1:cc:
31:ed:5f:dc:d3:3b:05:37:54:0a:d8:63:62:1c:04:d7:7c:c2:
2e:b2:19:99:04:2c:9b:36:eb:05:58:24:6f:ce:36:dd:6d:cd:
8a:4c:c8:b9:63:b1:33:34:5b:b6:4a:19:7d:12:ea:a0:a9:3c:
44:97:0f:72:88:3e:7d:06:c2:81:96:c8:d5:c0:e7:84:b0:48:
98:b6:90:cf:52:34:e9:d0:8d:69:4b:04:9d:31:f1:9f:6c:05:
5b:0d:e7:fa:e1:17:cf:a5:c3:d6:58:06:e1:0d:f0:c5:a1:41:
db:50:6b:68:8a:ee:1d:49:ee:0c:a1:ea:90:e4:0e:6c:bd:08:
3a:13:bc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 05:04:49 2025 by rpki-client