Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
File: QMV_fAvv5jtgBOlE32hMnVHkaPM.mft (raw, json)
Hash identifier: Xd+JeQIO//9fVPaDygVXHa8cFqbBRjpsAyCo0TGGlNY=
Subject key identifier: CF:2E:C2:D5:20:5F:31:88:6A:44:48:1E:19:7A:17:75:7B:41:2B:E0
Authority key identifier: 40:C5:7F:7C:0B:EF:E6:3B:60:04:E9:44:DF:68:4C:9D:51:E4:68:F3
Certificate issuer: /CN=40c57f7c0befe63b6004e944df684c9d51e468f3
Certificate serial: 019658DD9AFAFA8F2613898253F912E99B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
Manifest number: 08A2
Signing time: Mon 21 Apr 2025 15:00:40 +0000
Manifest this update: Mon 21 Apr 2025 15:00:40 +0000
Manifest next update: Tue 22 Apr 2025 15:00:40 +0000
Files and hashes: 1: QMV_fAvv5jtgBOlE32hMnVHkaPM.crl (hash: tgzmebVEfvGAYd/DERYUZIUTQIjcIfxGuFpVOInXkRc=)
2: VtNDBe4WLUvuXuHOTlAK7Ldf5W4.roa (hash: 2/Ux5k6jwyAwcxnEpPd/SFbt5+kWg1F4N3TK8J41W34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:dd:9a:fa:fa:8f:26:13:89:82:53:f9:12:e9:9b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40c57f7c0befe63b6004e944df684c9d51e468f3
Validity
Not Before: Apr 21 15:00:40 2025 GMT
Not After : Apr 22 15:00:40 2025 GMT
Subject: CN=cf2ec2d5205f31886a44481e197a17757b412be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e1:10:c3:21:24:44:ae:e4:b1:74:22:85:a3:
16:e5:bd:c4:61:b1:91:72:64:c7:a5:84:98:88:cd:
09:c1:28:e8:6e:60:bd:5e:51:e6:54:99:3f:9d:44:
2e:31:c9:c4:cf:61:97:59:9c:b0:a3:14:13:ec:d3:
4b:c9:a3:07:93:53:41:4a:8f:d7:f2:89:13:e3:96:
08:4e:3b:1e:a3:ce:52:fd:e8:30:fb:24:99:25:90:
42:30:d1:0a:29:22:0a:44:6a:9d:6f:52:9a:06:b4:
f2:6d:50:d5:d9:a9:5c:fd:c4:cb:47:57:06:51:68:
1a:65:ba:9c:b6:5b:df:2c:df:56:91:d8:f1:48:f1:
38:da:f5:a6:d1:de:d8:a4:5c:a6:6c:f2:5e:1a:da:
8f:f0:37:b5:86:98:e9:94:db:c1:c5:20:0b:93:58:
67:f6:22:67:59:f3:79:b7:5b:93:7b:96:2f:97:e8:
ca:1c:e5:5d:3a:58:41:61:bd:61:41:d2:c3:96:b0:
2e:56:d9:7a:84:42:ee:c5:c5:4c:1e:6b:a5:26:b4:
08:22:3f:0a:b4:b1:fe:72:b8:1c:4d:c4:19:e5:35:
79:fd:51:a1:33:b5:f8:28:aa:1d:4a:ef:ac:c6:35:
89:7d:21:f9:1a:47:b8:4a:15:1b:93:06:bb:29:46:
19:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2E:C2:D5:20:5F:31:88:6A:44:48:1E:19:7A:17:75:7B:41:2B:E0
X509v3 Authority Key Identifier:
keyid:40:C5:7F:7C:0B:EF:E6:3B:60:04:E9:44:DF:68:4C:9D:51:E4:68:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:72:42:86:5c:07:0c:f0:5c:a1:5f:b0:99:99:0d:13:d2:97:
63:6f:e7:63:fa:24:1f:75:66:5a:c5:59:c3:0c:e4:3f:ba:0c:
5c:2c:39:df:65:0f:00:47:64:bc:d8:13:86:29:ab:55:f1:42:
88:02:ae:83:c4:77:8d:22:b7:8c:3d:4f:91:2b:02:c1:7d:c1:
6a:7a:b6:f8:3d:2d:5b:79:ba:75:cd:f6:6d:27:81:30:05:e3:
19:87:bf:b2:1f:4e:e7:59:96:41:ea:0d:df:29:5f:1d:13:4c:
e7:f2:28:08:9c:00:d2:d7:35:67:90:aa:48:8d:64:b3:a0:b2:
92:d2:b0:00:cc:2a:9e:f9:3d:f0:c2:25:e0:74:f9:c2:67:08:
0f:47:91:26:bd:f7:54:34:ad:50:66:c1:e0:3a:c7:05:f6:7b:
f2:6e:79:fc:11:5f:db:21:6b:95:c3:2c:4c:bd:7d:1c:f0:b2:
e7:b7:3a:9f:ed:a1:fa:a1:c5:5f:2f:3f:e4:c7:05:82:13:e8:
bd:98:a9:11:50:69:c8:c7:fb:0b:b5:3b:05:96:4c:01:5c:62:
c1:0b:b8:1e:f2:86:44:b6:ba:bd:34:83:8e:31:f3:ba:38:cb:
2d:62:7d:02:b3:b0:46:3e:89:9e:2b:b4:cd:a8:0f:d4:21:2a:
df:6e:a3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:03:24 2025 by rpki-client