Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
File: QDx-hd5J15JM5Q09ap5S6enC4xI.mft (raw, json)
Hash identifier: bQlFzlQHa7ndOkEm0BiYzO6lco29dEAbAPZEUJuP0Lc=
Subject key identifier: 23:F9:17:E5:D6:C0:5A:B9:21:8E:33:0D:76:15:6B:7F:90:03:27:04
Authority key identifier: 40:3C:7E:85:DE:49:D7:92:4C:E5:0D:3D:6A:9E:52:E9:E9:C2:E3:12
Certificate issuer: /CN=403c7e85de49d7924ce50d3d6a9e52e9e9c2e312
Certificate serial: 0196594B225A42179010E506DDDA52FF2C6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
Manifest number: 12C6
Signing time: Mon 21 Apr 2025 17:00:18 +0000
Manifest this update: Mon 21 Apr 2025 17:00:18 +0000
Manifest next update: Tue 22 Apr 2025 17:00:18 +0000
Files and hashes: 1: QDx-hd5J15JM5Q09ap5S6enC4xI.crl (hash: KjrB0q40z/qXUHoyCoUeisJXPgziKSXWSTBWiPgNhbQ=)
2: zBQLlk6R8SMqXeJs9KlWAq-2zWs.roa (hash: H5Z9T6mivR2DyTqTRYiFtEvpcqAnMQHqnVNqaL10pMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:4b:22:5a:42:17:90:10:e5:06:dd:da:52:ff:2c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403c7e85de49d7924ce50d3d6a9e52e9e9c2e312
Validity
Not Before: Apr 21 17:00:18 2025 GMT
Not After : Apr 22 17:00:18 2025 GMT
Subject: CN=23f917e5d6c05ab9218e330d76156b7f90032704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cc:eb:f0:c8:2e:48:31:2c:f8:6e:4c:cd:f3:
77:88:99:bf:4c:2d:c9:fc:68:65:aa:0e:82:d8:7b:
46:4d:c7:cb:c3:f8:34:9f:e9:f6:b3:b6:69:56:2d:
2d:e0:18:db:02:a5:51:a1:c9:2b:32:1e:dd:2e:10:
59:41:5c:5c:2c:55:62:c3:6f:1c:e9:0f:fa:c1:d0:
74:f0:03:4b:0d:7e:b4:3a:9a:c8:27:82:ed:94:aa:
c9:50:3c:d9:5e:17:f2:c2:c3:59:a3:18:58:1d:50:
05:30:43:7f:dc:21:e0:d2:52:36:6f:f3:3a:0f:ba:
c7:93:6e:2b:55:0a:65:04:3f:ad:13:0e:2b:db:87:
a8:df:06:98:25:93:b9:86:b6:e3:71:dd:7e:8e:9e:
d6:af:70:f5:e2:fe:b1:f1:76:5e:ca:ff:ce:3d:41:
1d:46:f3:0e:e7:6c:16:33:8e:48:f5:7b:8c:58:69:
35:34:5e:ee:59:34:6e:ca:d1:3c:d3:36:bf:76:b2:
82:48:0f:21:99:96:fa:eb:74:58:70:1d:16:0c:a1:
7c:14:42:ec:7a:6a:d7:43:53:a8:96:db:97:e3:94:
35:14:e1:8b:da:ae:20:d7:d8:c3:3b:74:e7:4d:3c:
f9:60:1a:87:20:5f:22:75:cc:8e:e6:77:88:94:ff:
4b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F9:17:E5:D6:C0:5A:B9:21:8E:33:0D:76:15:6B:7F:90:03:27:04
X509v3 Authority Key Identifier:
keyid:40:3C:7E:85:DE:49:D7:92:4C:E5:0D:3D:6A:9E:52:E9:E9:C2:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c0:80:a7:31:fb:d2:4a:b1:a6:9d:6f:45:cd:a7:c8:2b:02:
b9:c9:9a:f5:e4:9f:b6:ce:c9:a4:b1:94:2e:ad:86:ed:97:8b:
15:be:2f:34:f4:d7:ec:e6:fb:57:e8:91:e9:ed:bf:ba:0f:8a:
10:a2:7f:60:d3:0a:d6:05:7c:12:6a:2a:fa:2f:60:aa:bb:26:
bf:48:42:a2:ab:ac:87:cc:2d:21:4b:5e:6b:4b:49:7f:ed:14:
14:6c:af:c4:88:a7:4e:97:0a:36:47:a9:8d:b4:78:16:d3:dc:
c4:f9:76:17:2a:43:a1:1c:df:70:cd:86:3b:6c:b5:72:08:c8:
e6:81:34:ab:01:a5:0c:d1:d7:4e:50:6a:24:9e:da:ea:57:8e:
b0:a4:6d:39:4e:50:79:6d:82:aa:36:33:2b:a1:b5:18:01:7a:
8f:11:87:ab:c0:77:2e:e6:4d:b5:82:3b:83:2e:e3:32:a4:28:
2c:61:ea:fd:07:47:e4:d9:3b:16:e6:c1:d7:67:c3:ad:dd:af:
9e:e8:91:f8:d2:18:b3:b2:7b:58:10:af:0e:8b:c5:b3:a3:fe:
6e:30:64:d2:25:d0:5e:0c:c0:b0:1b:bd:66:59:cd:03:ee:90:
c4:5a:f7:d3:fd:f0:16:cb:1a:02:81:fe:58:7c:8b:f6:55:fa:
b1:2c:df:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:59 2025 by rpki-client