Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
File: QsoaHj0JJUIzEMFUtQLChCiI5hI.mft (raw, json)
Hash identifier: 6asrZh0vYoR0teI0KVPfxyskbLoi9qW9w+eTvQXSLbY=
Subject key identifier: 9E:53:47:D9:6C:71:72:06:3A:52:CE:BB:C2:C5:3B:C0:C0:A2:3F:9B
Authority key identifier: 42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12
Certificate issuer: /CN=42ca1a1e3d0925423310c154b502c2842888e612
Certificate serial: 019655DD234499F30F6006EA7C99206A5621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
Manifest number: 1507
Signing time: Mon 21 Apr 2025 01:01:17 +0000
Manifest this update: Mon 21 Apr 2025 01:01:17 +0000
Manifest next update: Tue 22 Apr 2025 01:01:17 +0000
Files and hashes: 1: FxWyjGUTIC45dat-1Rxw3IG5Eak.roa (hash: VjQJokywMbR3ejkYBNWJHSZbR0fnNPmK9n+7WEsPRYs=)
2: QsoaHj0JJUIzEMFUtQLChCiI5hI.crl (hash: Ei+7rZXL+sNWrZmj7tYshAfBnjJbtumYMPCW7qBLoM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dd:23:44:99:f3:0f:60:06:ea:7c:99:20:6a:56:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ca1a1e3d0925423310c154b502c2842888e612
Validity
Not Before: Apr 21 01:01:17 2025 GMT
Not After : Apr 22 01:01:17 2025 GMT
Subject: CN=9e5347d96c7172063a52cebbc2c53bc0c0a23f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fe:d4:90:50:82:ee:69:45:98:b1:e2:a3:13:
c9:1a:07:e2:63:e8:7d:b4:7d:e0:9f:69:d9:d9:37:
f4:1b:39:67:64:12:0a:69:ad:2c:ab:8a:d6:9a:ef:
8b:96:35:a0:e5:c6:70:b6:23:9b:1b:2a:ff:ca:41:
3c:61:aa:08:d8:33:ce:4d:a4:3b:71:dc:01:8d:7e:
dc:65:7e:fa:0d:a1:92:9d:d3:a8:bb:93:1e:94:22:
f9:0c:4d:66:35:21:8e:27:b0:e5:be:2b:db:1c:9d:
3e:09:6b:cf:8b:81:cf:3f:d9:6b:75:8e:88:83:c0:
e5:be:d2:6b:b5:7e:3f:2e:50:51:8b:e0:19:54:ba:
aa:04:c9:40:c9:76:fb:40:8c:a8:59:ec:b0:1c:f9:
ba:a2:88:44:87:74:94:66:0d:2d:00:93:b0:b4:a5:
8d:75:0b:2f:4c:21:94:5c:0d:71:38:3d:45:57:3b:
b9:f7:2e:77:03:7c:d5:2c:eb:5f:b0:18:f2:9b:a0:
57:25:15:74:ab:51:57:50:c0:06:d3:4c:fb:3b:53:
de:90:84:cc:4b:f1:67:3a:78:4f:46:7c:c8:e8:d4:
d1:05:3d:e2:07:6d:32:1c:86:d1:4e:ca:e0:16:c1:
c0:3a:e0:a4:e3:f5:00:46:c7:79:ec:bf:dd:08:e1:
5d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:53:47:D9:6C:71:72:06:3A:52:CE:BB:C2:C5:3B:C0:C0:A2:3F:9B
X509v3 Authority Key Identifier:
keyid:42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:2b:1e:b7:f9:ab:dc:3a:5a:f2:73:6a:f3:27:63:44:4e:4a:
32:cb:43:97:1d:c7:82:8e:c3:b8:d9:ef:a3:35:fb:53:9c:42:
10:da:95:6f:08:71:51:41:2f:c8:99:9a:c1:a2:be:b5:f9:8b:
19:c6:1e:13:05:45:33:fd:b1:7a:f0:73:62:54:cb:05:ba:ea:
15:8d:a7:cb:13:02:1e:86:99:4f:be:40:f3:33:7d:91:65:22:
86:fb:08:3b:14:75:b3:47:8d:59:7c:b8:1f:42:40:a0:fc:b4:
8f:0f:ad:8a:d9:3c:af:12:94:be:23:07:03:96:c8:d8:73:a9:
0a:07:68:79:fe:8d:74:a8:c0:45:fa:51:ee:e3:83:88:3e:d1:
16:c1:83:33:26:fd:37:da:2f:25:a2:2f:57:b0:eb:2b:bb:dc:
de:3f:ab:08:6c:3f:81:82:fd:78:36:ca:13:ee:21:0a:43:88:
29:ff:1c:4f:ab:55:c7:75:70:84:a8:32:31:1e:ab:0e:21:fb:
01:97:66:db:8e:c1:f7:88:db:4b:12:b9:fd:e4:b8:a5:f2:52:
d3:9a:7e:c6:20:9a:77:ff:ec:8d:30:d1:cb:b4:e8:ef:ee:f5:
af:b2:8b:b5:25:85:7c:26:4d:83:ca:f5:9e:9d:78:9a:f4:6a:
89:f7:f9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:04 2025 by rpki-client