Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
File: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft (raw, json)
Hash identifier: U7b5QO0ZNBy8nkoCgIF7F//VcegmsFxRIpesX5Lekn4=
Subject key identifier: ED:87:FD:DF:83:E4:EF:83:57:1E:8D:B4:A8:1E:E5:DC:8A:F4:4A:58
Authority key identifier: 40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
Certificate issuer: /CN=4092c47db8a21931154605d576c3b7341d06b4b4
Certificate serial: 0196C5A7BB5792611F91A602042C2BC54648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
Manifest number: 12C1
Signing time: Mon 12 May 2025 18:00:26 +0000
Manifest this update: Mon 12 May 2025 18:00:26 +0000
Manifest next update: Tue 13 May 2025 18:00:26 +0000
Files and hashes: 1: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl (hash: eFLOF7szKJd23jrLtv4SIL6QKBoMdnKAydvtpJuwXtM=)
2: knkqtZcmX5gSTiCaXxHQZfriQgw.roa (hash: E9ZLKfrMdp8ZIK1kQ0GbAJkgNgAmhxZR6M5lJ1uXi1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a7:bb:57:92:61:1f:91:a6:02:04:2c:2b:c5:46:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4092c47db8a21931154605d576c3b7341d06b4b4
Validity
Not Before: May 12 18:00:26 2025 GMT
Not After : May 13 18:00:26 2025 GMT
Subject: CN=ed87fddf83e4ef83571e8db4a81ee5dc8af44a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:56:5a:b9:de:6e:58:45:21:2b:41:be:26:ff:
24:6a:46:72:5f:77:40:35:f6:37:86:0e:85:6d:a2:
73:e2:f0:c2:fe:63:98:ab:ff:7d:32:55:9f:c2:15:
06:3f:4d:43:a5:5f:af:bb:5b:25:e5:1b:6c:95:b2:
ae:7c:90:52:7c:f3:ee:b8:27:ee:f5:0a:e8:0f:7f:
d6:20:f4:34:04:96:47:11:6a:43:60:7d:83:c3:c2:
3e:f7:cb:65:0d:8d:2d:03:42:6c:67:06:bc:b2:fe:
51:bf:15:dd:ff:34:2a:b5:7d:19:cc:f2:66:4e:79:
88:6b:52:9a:0e:dc:1b:9e:9b:2e:75:cf:c9:0f:51:
84:cf:48:fb:55:3e:2f:0d:31:21:fd:15:c7:57:5f:
25:ff:53:4a:af:7e:2c:d3:ed:d0:75:2b:5e:e5:84:
6b:1c:39:62:41:13:60:1b:56:6b:85:f2:f6:dd:5b:
10:71:0f:23:c1:4c:50:4b:1e:f8:c3:80:a8:92:5f:
93:61:5f:85:a2:b9:2b:ef:42:f9:1c:a7:98:b7:0f:
0d:ea:9a:1e:83:c6:11:33:76:e5:76:5f:3d:8a:d4:
16:aa:5a:7d:f6:53:56:98:2c:20:1a:80:c9:b8:18:
58:8f:5b:ff:3c:b0:32:9b:23:84:e3:fd:9c:9f:aa:
d5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:87:FD:DF:83:E4:EF:83:57:1E:8D:B4:A8:1E:E5:DC:8A:F4:4A:58
X509v3 Authority Key Identifier:
keyid:40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ce:22:c1:c2:01:57:c3:fc:1b:c0:1d:03:e7:e4:f2:57:f8:
87:6e:be:83:95:ed:63:d0:46:aa:03:5e:70:d1:63:2c:ea:2a:
2a:e5:7a:d8:0b:b0:f0:6a:78:ee:c0:6c:3f:d5:cb:e5:e9:40:
82:3e:76:59:97:0c:fc:15:87:b3:b5:d0:0e:c6:27:db:9e:3b:
d4:f8:c1:e7:20:1e:e5:09:ec:9d:85:f9:d5:23:de:7a:0c:25:
9c:c5:d6:fd:32:27:cc:8c:77:9f:af:16:63:57:7c:51:81:fa:
69:9e:7f:b5:35:23:15:a7:8f:77:a4:f6:90:80:51:94:b4:f2:
42:6d:e6:e3:90:d1:5f:dc:fb:b1:4b:eb:ee:8c:58:fb:cb:b0:
9d:99:c4:df:12:10:ba:db:7d:a1:5d:bc:0b:e2:b7:0a:98:e2:
be:34:42:df:da:a6:2c:04:47:40:12:94:7f:ac:a1:56:fd:74:
fa:60:19:55:65:42:c7:a8:09:ef:cf:02:51:83:f5:e8:4f:66:
47:1c:dc:9d:56:72:84:62:20:28:cc:88:36:e2:41:52:19:94:
c9:9a:70:1a:c8:7a:bb:fb:8c:85:49:fb:17:ce:fa:3e:2e:a1:
77:df:f1:cb:06:bd:cc:e2:37:1a:0b:d0:9f:64:0e:9c:3e:08:
76:e0:c0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:27:13 2025 by rpki-client