Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft
File: QtzU0b098prdQHW2jymvkHBHRDw.mft (raw, json)
Hash identifier: 2SDxKh94wqgGl3GuPNjQ8LLPMbO9jgYm1Z6C4pzaNKE=
Subject key identifier: 0F:10:92:0C:F1:AF:68:CA:28:D8:E0:0C:68:71:4C:E8:4B:DD:9A:EC
Authority key identifier: 42:DC:D4:D1:BD:3D:F2:9A:DD:40:75:B6:8F:29:AF:90:70:47:44:3C
Certificate issuer: /CN=42dcd4d1bd3df29add4075b68f29af907047443c
Certificate serial: 0196B634CF941D6243145A46F5A0607664C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft
Manifest number: 025E
Signing time: Fri 09 May 2025 18:00:36 +0000
Manifest this update: Fri 09 May 2025 18:00:36 +0000
Manifest next update: Sat 10 May 2025 18:00:36 +0000
Files and hashes: 1: 21zXl1VT2wOLl9fEbNkRa053DOE.roa (hash: 5emuQVjcm3y58xrRXNGECOspFNylmBXZoEALIIh48B4=)
2: QtzU0b098prdQHW2jymvkHBHRDw.crl (hash: DMJqAr4r2BoD2eem3RPkay6VNz1+XtzjszLIfSzRRLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 18:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:34:cf:94:1d:62:43:14:5a:46:f5:a0:60:76:64:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42dcd4d1bd3df29add4075b68f29af907047443c
Validity
Not Before: May 9 18:00:36 2025 GMT
Not After : May 10 18:00:36 2025 GMT
Subject: CN=0f10920cf1af68ca28d8e00c68714ce84bdd9aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e1:ea:46:c2:03:da:50:51:35:68:2d:44:1c:
20:1c:6a:4f:85:82:8e:40:c2:47:2c:c0:ac:09:bb:
e1:01:1c:28:36:ed:fd:a6:11:88:58:1c:c6:93:05:
83:e9:f7:90:71:1e:67:e5:57:fa:eb:75:2c:3b:b5:
7c:6e:25:d0:d8:b8:50:34:39:b9:1c:00:8c:df:40:
c7:78:90:34:33:ba:6d:d1:bf:85:b2:a6:78:16:ce:
92:a2:8f:f6:23:fd:ad:fe:45:a1:95:fb:bc:3a:eb:
81:2f:c1:e5:b6:7a:a6:b6:c4:29:6d:58:17:c1:0c:
7e:f2:2b:89:b7:c2:a8:75:a7:2e:ef:ae:7a:34:20:
0a:77:96:1d:ff:a5:2a:ff:4b:ea:b5:9e:91:58:e2:
74:9c:cc:c0:1f:be:9f:6e:76:5c:1d:db:c0:ba:c0:
33:8a:d3:4e:99:1d:1c:a6:58:d1:86:1d:12:1b:be:
18:8f:09:8a:45:99:fc:48:51:75:e4:34:f0:c4:a2:
10:f1:2f:49:74:be:28:45:c4:67:1b:a3:d4:c0:0c:
44:47:cd:33:f8:ac:d8:dc:38:29:47:71:51:ca:34:
48:34:14:b2:e4:01:03:30:bd:0d:c7:3f:bb:34:16:
d7:27:67:79:a1:8e:c6:64:7d:a5:92:af:99:e6:7e:
57:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:10:92:0C:F1:AF:68:CA:28:D8:E0:0C:68:71:4C:E8:4B:DD:9A:EC
X509v3 Authority Key Identifier:
keyid:42:DC:D4:D1:BD:3D:F2:9A:DD:40:75:B6:8F:29:AF:90:70:47:44:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:6a:48:31:a1:c6:98:f9:43:2a:44:32:48:04:9b:ef:4a:72:
be:15:48:cb:a1:27:6a:a0:4c:b6:64:4f:30:9a:a6:a9:aa:f9:
c5:e8:b7:69:2f:ee:cc:b8:9c:c3:1e:58:1d:6e:de:71:be:32:
90:c0:63:39:db:ee:9b:b2:90:c3:48:79:1d:a7:39:81:ea:84:
14:63:9e:1d:bd:ba:56:b4:aa:e7:9b:55:cb:2e:1e:54:c6:67:
66:24:d1:33:11:d3:4a:14:82:8b:c3:7c:77:24:2f:69:fb:2d:
5e:30:48:a3:68:fc:23:4b:9d:b1:0e:86:d3:fe:6f:70:6f:1a:
79:51:43:3b:9c:ef:97:5c:fb:6d:3d:a6:7e:9e:f8:3a:33:08:
de:d5:4b:83:d9:6e:90:d6:3a:5c:04:8a:bc:63:a2:75:9e:bd:
02:c2:f4:c5:b7:d3:c5:44:24:10:54:f1:48:a7:d7:18:e1:31:
9f:8a:bd:bd:d0:e4:46:68:48:50:03:73:83:b3:03:e9:c2:f5:
3e:2d:02:84:c1:73:1f:51:04:b1:73:5a:cf:e6:18:c3:d5:bb:
5c:fc:50:ca:8e:c0:e2:41:f4:2a:d6:e2:c6:ab:a9:fb:32:62:
1d:a1:d9:92:e0:98:77:7c:87:46:28:a7:6f:6e:f8:96:48:37:
62:6f:c4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:01:55 2025 by rpki-client