Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft
File: QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft (raw, json)
Hash identifier: X981DABCq4QXikSXsaGtMeoGwNBr9SxP8qQ8FU96BMo=
Subject key identifier: 58:27:38:BB:A1:41:0B:AC:23:5F:AE:F1:AA:BD:C3:B0:52:AB:AF:79
Authority key identifier: 41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
Certificate issuer: /CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Certificate serial: 0196C984D333F59DD4C712CFBE8065790672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft
Manifest number: 1556
Signing time: Tue 13 May 2025 12:00:47 +0000
Manifest this update: Tue 13 May 2025 12:00:47 +0000
Manifest next update: Wed 14 May 2025 12:00:47 +0000
Files and hashes: 1: 0lMFcdtNp26YfQNn5iPba6FXABM.roa (hash: qwNKo6mD7mKcqzNSQWlJycWA8l92Zl/i3CclTpihme0=)
2: 1-HPsIaOnC6OFdiyQbPCVTA9WLMY.roa (hash: GLjRp44S9t7k9/gNlz4F+5PxTttEffZtUX3wedwaMj4=)
3: AffVDnLnSLh0V7EinGng8G5nPjQ.roa (hash: hYx/BpJDcyTVNDkPP1YvXND6zbbHVisFIC82719FbiA=)
4: QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl (hash: Aqt1ZfD5J5RdwvzX4CMOUcnMBQhWCUJtl0XMD8xBEmk=)
5: X6B3yM6JPuRoNiHbz1ZaIgfYnuw.roa (hash: arcjlfWRdddSSndOkjcyUSHuh1XDl/Fc5uW5b/PuIbI=)
6: ml8HfpgZooz4Fs5VNgkwYze5t_M.roa (hash: KgRvypNeE4qoLntupCEeIzNpWhk2E20WSo1RiDNCO2U=)
7: ngnhG7uE9YHHo9YXMg4zT5zGeQk.roa (hash: a+4S0fbb+Q4assLZ0oTVcSUfUQDBn8eYYqxTad0XqL0=)
8: oI0m6JBhMDS_eEyHOtg7vo158Js.roa (hash: l4BG5WDsCRX9NtPnj37JkO0LvM0tJm7+HRwBv6mDOds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:84:d3:33:f5:9d:d4:c7:12:cf:be:80:65:79:06:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Validity
Not Before: May 13 12:00:47 2025 GMT
Not After : May 14 12:00:47 2025 GMT
Subject: CN=582738bba1410bac235faef1aabdc3b052abaf79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d9:f5:df:a3:66:0f:18:b2:80:5d:7d:86:4a:
ed:d0:1d:2a:05:66:bb:83:a5:ee:36:d7:57:04:a9:
79:66:14:4a:20:37:db:44:47:08:a4:f4:50:55:4e:
cb:f8:85:81:45:74:92:38:bf:e1:6d:e5:ef:28:15:
48:6c:5b:9a:74:58:6b:59:27:c2:2f:eb:f8:85:10:
d9:de:30:c3:70:a4:3c:e9:07:cf:44:46:a3:16:06:
b1:24:12:b6:cd:93:93:76:ac:c0:94:aa:31:6f:40:
52:3e:d4:23:4e:d5:bb:06:79:0a:89:77:e2:cd:7f:
41:0d:a9:63:72:a9:80:3b:f2:7e:35:91:a1:c9:19:
07:8b:21:67:da:bc:75:72:2d:f7:ee:b9:02:3c:a0:
42:49:7d:22:27:19:49:a2:f1:d7:12:54:26:7b:fc:
c1:66:44:2f:88:25:29:f1:91:5d:42:36:f7:a2:2b:
23:dc:54:01:5c:aa:a8:bf:b0:b0:d6:3a:77:04:6b:
f7:3a:5c:d8:49:59:a8:9d:a8:07:66:08:f4:72:5b:
a7:f4:d5:7e:e6:c1:3a:87:42:02:f1:eb:d2:36:95:
62:1d:6b:77:13:a0:9f:8b:c7:76:7b:37:ea:00:de:
c4:bb:0d:88:3f:67:bf:3a:8c:32:20:a6:40:4f:3d:
9e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:27:38:BB:A1:41:0B:AC:23:5F:AE:F1:AA:BD:C3:B0:52:AB:AF:79
X509v3 Authority Key Identifier:
keyid:41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:13:d8:75:50:85:83:27:e5:f6:2a:ad:93:0a:ee:20:e4:6b:
21:39:9e:96:4b:4e:07:23:01:b9:cf:76:b2:d9:8b:99:5a:ac:
54:9b:8a:4c:62:a3:29:b4:27:00:6a:5f:dc:fc:6c:d0:95:13:
87:7c:dc:a7:2e:a9:d8:3b:6e:fb:29:3d:d6:2f:7b:b5:61:da:
c3:e8:34:0d:55:39:b1:e6:65:a3:37:16:cf:c3:4e:8e:24:91:
75:e0:d4:67:d0:ff:66:c4:a2:39:07:88:e3:34:67:3b:76:66:
42:01:15:45:31:16:d2:67:9d:e8:10:76:f0:08:2c:60:94:13:
6f:64:f8:ed:7f:74:42:ae:0f:7d:b8:ce:47:dc:bf:8d:d9:11:
2c:be:57:94:0a:45:fe:07:e6:d5:f6:bd:14:9b:b8:b5:a3:62:
19:f4:05:c7:f2:4d:d2:de:bc:02:1e:ea:5f:16:7a:fa:d9:3e:
8e:9a:41:c8:6a:41:87:27:89:37:97:d0:a3:28:11:71:e7:5b:
d4:00:04:b5:a5:55:66:01:21:89:78:5a:9c:0b:85:2b:6b:7c:
a9:a9:8f:20:1d:15:39:18:1b:a0:c9:98:d8:d7:6e:b6:f8:9c:
fb:5e:26:39:bd:e1:d7:d2:1c:98:de:14:c1:84:99:c7:19:97:
a5:55:14:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:16:52 2025 by rpki-client