Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/2098ac-c2de-4362-a255-acd72d2c6cb6/1/QA-ULrBzNco-f70Y8GwVjbN8_Us.mft
File: QA-ULrBzNco-f70Y8GwVjbN8_Us.mft (raw, json)
Hash identifier: +9x2khI5H6VJ9y46v2T+1V1J/g6Uq6LeTSXJy9mAT84=
Subject key identifier: D8:4D:AF:25:29:DC:F9:16:E8:6B:15:CC:29:46:F1:FA:CE:40:BA:45
Authority key identifier: 40:0F:94:2E:B0:73:35:CA:3E:7F:BD:18:F0:6C:15:8D:B3:7C:FD:4B
Certificate issuer: /CN=400f942eb07335ca3e7fbd18f06c158db37cfd4b
Certificate serial: 01965500734382F7F5B4B885ABA7F5A87234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA-ULrBzNco-f70Y8GwVjbN8_Us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/2098ac-c2de-4362-a255-acd72d2c6cb6/1/QA-ULrBzNco-f70Y8GwVjbN8_Us.mft
Manifest number: 1162
Signing time: Sun 20 Apr 2025 21:00:14 +0000
Manifest this update: Sun 20 Apr 2025 21:00:14 +0000
Manifest next update: Mon 21 Apr 2025 21:00:14 +0000
Files and hashes: 1: CRyZWe4rqJ2qdiNWuAP-OJQeZow.roa (hash: g+uZ3IirtTKelPa51RylP3yoQBkp1cF9hHY0LUNHp8g=)
2: QA-ULrBzNco-f70Y8GwVjbN8_Us.crl (hash: ZUQdK8vGxwsQ5d6vqt4EcOhcJllMmynYl78RtDy/sw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/2098ac-c2de-4362-a255-acd72d2c6cb6/1/QA-ULrBzNco-f70Y8GwVjbN8_Us.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/2098ac-c2de-4362-a255-acd72d2c6cb6/1/QA-ULrBzNco-f70Y8GwVjbN8_Us.mft
rsync://rpki.ripe.net/repository/DEFAULT/QA-ULrBzNco-f70Y8GwVjbN8_Us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:73:43:82:f7:f5:b4:b8:85:ab:a7:f5:a8:72:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400f942eb07335ca3e7fbd18f06c158db37cfd4b
Validity
Not Before: Apr 20 21:00:14 2025 GMT
Not After : Apr 21 21:00:14 2025 GMT
Subject: CN=d84daf2529dcf916e86b15cc2946f1face40ba45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:69:e1:57:03:66:c0:f9:fb:bf:63:f9:96:0c:
cf:db:e3:c4:12:88:be:6a:0c:5c:f2:84:b6:e4:15:
1f:c2:19:5c:5c:ba:3a:11:1f:5a:d6:32:10:59:48:
36:d8:a2:ce:f1:75:7d:da:28:ae:0f:33:4b:14:13:
6c:3d:1b:d5:29:49:e9:d1:ad:12:ad:e6:90:4b:1e:
05:58:70:c6:20:14:e7:db:73:d2:80:7a:05:55:ca:
3d:8c:2e:f9:28:0a:48:05:d4:6a:de:5b:9f:a1:8a:
2b:83:2f:92:02:b8:cc:f1:fc:be:5d:6a:ff:b5:68:
72:bc:9f:2f:e6:03:df:02:03:a3:4e:a2:fb:b8:10:
dd:d1:dd:de:e2:41:52:d7:50:f1:7b:ad:71:26:22:
2f:68:f1:f4:88:77:cd:0e:67:13:30:44:ef:fd:f7:
56:89:c6:30:ec:8e:c6:41:76:af:a9:bd:90:d1:14:
33:92:64:0e:22:ac:34:df:82:70:0a:2a:fa:78:5f:
65:bb:0b:a4:56:90:67:5d:cf:05:ac:b9:ad:51:b5:
77:fe:c1:1d:df:fd:27:75:70:ec:3b:76:b5:9a:a5:
3e:69:d9:ba:ea:d2:f6:cd:7e:f1:a1:8b:b1:61:ee:
0b:9b:8d:c2:54:cd:02:fc:f2:3d:4f:5d:7e:87:07:
44:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4D:AF:25:29:DC:F9:16:E8:6B:15:CC:29:46:F1:FA:CE:40:BA:45
X509v3 Authority Key Identifier:
keyid:40:0F:94:2E:B0:73:35:CA:3E:7F:BD:18:F0:6C:15:8D:B3:7C:FD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA-ULrBzNco-f70Y8GwVjbN8_Us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2098ac-c2de-4362-a255-acd72d2c6cb6/1/QA-ULrBzNco-f70Y8GwVjbN8_Us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2098ac-c2de-4362-a255-acd72d2c6cb6/1/QA-ULrBzNco-f70Y8GwVjbN8_Us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ba:b2:b7:09:e3:e3:09:e6:08:16:a4:58:11:07:b9:33:06:
76:21:90:37:17:0b:71:de:f7:e9:35:75:25:41:0c:7d:42:c6:
7d:80:db:cb:00:80:2f:c7:d1:a7:45:4c:0c:b5:28:54:3d:6d:
9a:1f:36:fd:17:ad:72:fe:9a:ac:9a:99:53:b8:d2:8e:ec:de:
19:a1:ae:01:b0:f0:5a:26:c3:0b:b9:5a:9f:11:cc:31:ca:f2:
8e:f9:c3:d5:13:0b:48:25:c8:d7:5d:0e:48:bd:7e:e7:17:fc:
2c:cb:89:36:ef:68:33:36:7a:78:e9:6b:e1:da:9b:72:46:8c:
1c:06:75:d9:c3:29:cb:fe:39:e8:f7:6c:9f:e4:77:38:11:e3:
b6:e1:97:0e:de:3e:e2:10:34:d9:88:e4:c1:de:fd:df:52:96:
4a:83:c7:a0:1c:56:63:79:59:b8:13:39:80:28:72:f7:43:d0:
f5:93:cf:65:d6:12:4b:19:48:0e:ed:9b:7a:b1:36:d4:59:3d:
fd:dd:ff:e5:74:10:34:d1:52:86:1c:5f:7c:46:be:97:35:2d:
c8:4c:cd:24:f7:64:0d:29:0b:e0:4f:81:4c:f2:17:42:1b:77:
d4:56:b2:0f:0e:9f:1d:52:43:b1:a4:41:87:60:89:fd:67:a0:
47:22:44:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:18:55 2025 by rpki-client