Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
File: QXc-Xx1p3qDAHzE5eWLn10tD17o.mft (raw, json)
Hash identifier: 9fzSG6sgIfyOZCvaIAbX3/NO+w8Uyn8tJ28Q1MSTP/E=
Subject key identifier: 78:2A:EE:38:1B:4E:53:98:34:DC:1F:48:5C:EA:8A:5E:BD:29:C1:E2
Authority key identifier: 41:77:3E:5F:1D:69:DE:A0:C0:1F:31:39:79:62:E7:D7:4B:43:D7:BA
Certificate issuer: /CN=41773e5f1d69dea0c01f31397962e7d74b43d7ba
Certificate serial: 019655DCD54F6A6C622D2E3D6CAADBC3DFC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
Manifest number: 148C
Signing time: Mon 21 Apr 2025 01:00:57 +0000
Manifest this update: Mon 21 Apr 2025 01:00:57 +0000
Manifest next update: Tue 22 Apr 2025 01:00:57 +0000
Files and hashes: 1: NQOLfJVX_vVpBv1f8Gp913T9yy0.roa (hash: stjbo1zNgVaXdBLW+9MS1MMZaoclllk3ul73C9N6vmM=)
2: QXc-Xx1p3qDAHzE5eWLn10tD17o.crl (hash: FgK7/+Fj+kwOtY40Qek1ZSAKhtH0QM3QKSQ5+222Sg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:d5:4f:6a:6c:62:2d:2e:3d:6c:aa:db:c3:df:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41773e5f1d69dea0c01f31397962e7d74b43d7ba
Validity
Not Before: Apr 21 01:00:57 2025 GMT
Not After : Apr 22 01:00:57 2025 GMT
Subject: CN=782aee381b4e539834dc1f485cea8a5ebd29c1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f3:e7:ef:57:81:7c:a6:82:e0:a0:a0:dd:4c:
70:84:3d:1e:d4:db:18:fd:d3:56:91:df:17:10:3d:
40:7c:28:8b:85:23:af:29:be:6b:51:53:29:23:30:
7d:a8:76:cf:73:4a:d1:02:46:2b:9a:1e:23:aa:c4:
ef:ae:10:6c:c1:bd:67:25:4d:9e:06:01:f6:e1:ad:
81:da:09:0e:1f:08:ba:99:3c:d4:c8:73:34:96:16:
93:36:b8:8f:ee:98:20:9e:f6:4e:fe:07:00:e4:3a:
16:55:2e:43:96:8c:b8:41:ee:08:19:88:ad:a1:77:
0c:c7:43:62:0c:2c:65:d2:d1:cb:87:c3:ec:6f:3d:
d7:d1:5c:11:7e:e2:bf:89:67:1a:26:70:f7:ac:26:
cd:c3:a1:ca:c0:c1:9e:4d:8f:a0:7a:5e:01:30:f5:
6e:81:03:2e:cf:1e:a2:70:1b:63:d8:2f:f2:41:7a:
1c:9b:c8:c2:4b:2b:e6:2a:ce:7c:8b:ca:3e:a0:b5:
8a:e6:d3:6f:fa:db:99:95:f5:95:5c:bf:f3:30:02:
ef:ad:4f:61:6d:76:58:ac:2b:5c:dc:ac:8b:e4:9e:
e8:f6:6a:d2:10:64:f8:1a:8e:5c:65:ae:16:af:54:
f0:dd:53:1b:95:76:79:83:f7:eb:f0:5f:d2:49:34:
48:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2A:EE:38:1B:4E:53:98:34:DC:1F:48:5C:EA:8A:5E:BD:29:C1:E2
X509v3 Authority Key Identifier:
keyid:41:77:3E:5F:1D:69:DE:A0:C0:1F:31:39:79:62:E7:D7:4B:43:D7:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:9c:fd:52:80:70:51:62:b3:79:ac:95:09:f2:5b:0d:74:e4:
da:c8:2f:57:51:01:f2:0e:fc:33:10:68:9e:dd:f6:e1:5e:67:
0a:7b:da:88:49:03:ee:d3:c8:3a:50:89:64:96:30:8a:52:20:
ca:d5:f1:d6:9c:7e:69:6d:25:56:9d:8e:5e:4c:11:ac:74:4d:
30:36:d7:e7:3a:33:dd:c8:2e:04:d2:ba:36:b3:bd:26:96:81:
4c:f4:87:e2:5d:2e:ff:7e:eb:e2:7c:35:a8:8f:6e:30:35:2b:
3e:d8:95:48:61:57:12:37:fd:c5:f0:06:b8:8a:85:1d:70:0f:
ae:9a:3a:f3:30:6c:4e:d5:b2:1a:24:bf:eb:01:89:83:78:41:
35:bb:86:74:70:65:31:48:e5:3d:7a:de:33:ee:43:6e:64:af:
bf:2b:25:8d:27:4d:d9:f2:f6:c5:c0:be:65:3d:a9:95:34:d5:
3a:7f:2e:7f:33:b7:3f:e7:54:5c:aa:a7:fa:22:68:45:b4:61:
5d:23:a2:c0:a6:6f:20:af:bb:c7:9c:62:21:b9:81:a9:26:52:
f9:18:1d:c8:0e:bb:08:26:0e:da:17:66:ba:86:34:1d:66:c3:
b0:03:03:c0:a2:e1:55:34:e6:03:de:f2:57:c6:fe:b3:90:29:
35:47:bc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:35:10 2025 by rpki-client