Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
File: QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft (raw, json)
Hash identifier: s8hHLwvg4kjpxnQtiiuq1PQXgCQ++VIAVNBzb7WY2Mk=
Subject key identifier: F8:C5:BF:86:C0:4D:67:32:58:5D:11:B9:24:BD:19:DB:20:08:1E:BB
Authority key identifier: 40:D5:59:1A:75:BD:69:3E:9D:3B:76:68:34:BF:07:4F:7B:1E:EE:3A
Certificate issuer: /CN=40d5591a75bd693e9d3b766834bf074f7b1eee3a
Certificate serial: 01964D7EBAF2EC5D89A6FC7EE55FF0776321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVZGnW9aT6dO3ZoNL8HT3se7jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
Manifest number: 0907
Signing time: Sat 19 Apr 2025 10:01:13 +0000
Manifest this update: Sat 19 Apr 2025 10:01:13 +0000
Manifest next update: Sun 20 Apr 2025 10:01:13 +0000
Files and hashes: 1: QNVZGnW9aT6dO3ZoNL8HT3se7jo.crl (hash: uDtAlM4GY3hme043okLNiK8kyys8tElBPkX4pusoNpU=)
2: dmWwMKmVtBjrQ943YS9mH5Wi3ME.roa (hash: prLT1d+yXEMIyzM51qGGgQHR5qaRcSsmNt9aZioq8kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNVZGnW9aT6dO3ZoNL8HT3se7jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:ba:f2:ec:5d:89:a6:fc:7e:e5:5f:f0:77:63:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d5591a75bd693e9d3b766834bf074f7b1eee3a
Validity
Not Before: Apr 19 10:01:13 2025 GMT
Not After : Apr 20 10:01:13 2025 GMT
Subject: CN=f8c5bf86c04d6732585d11b924bd19db20081ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e5:67:8a:dd:2b:11:2d:db:59:fb:97:93:ad:
a7:72:2b:de:98:f5:c3:c7:75:99:a6:99:6c:dc:d1:
e0:2a:61:0c:35:97:e8:81:38:59:32:bb:b2:94:d7:
1b:a6:4e:df:9d:67:63:f3:75:72:38:6c:68:2f:eb:
7f:fc:e4:0c:ad:54:1e:e3:50:b0:5b:c2:f2:48:f3:
11:e2:85:35:a8:5e:d0:c3:10:d9:8a:fc:4d:3c:d3:
7f:1f:5b:5b:d3:54:a0:9e:d5:c8:27:17:e1:85:1e:
08:d6:9a:27:f8:5b:ca:3d:ef:f9:0d:dd:8c:1c:79:
ff:bf:76:19:9b:98:2d:50:36:c4:cc:c9:34:12:c5:
e7:ce:fb:a4:c5:58:6e:af:dc:8e:9f:50:2d:41:f9:
10:76:2d:29:1b:70:ba:e9:d9:a1:64:a4:70:24:0c:
64:0f:05:b5:b7:f8:0d:a6:69:94:71:f0:48:f3:18:
0f:35:d8:f0:90:85:c1:06:50:87:5f:2f:30:e7:ca:
66:f3:94:1a:83:39:e0:f0:ce:38:e8:5e:da:57:98:
d8:cb:20:1d:68:8e:52:84:f0:e4:2f:6f:b0:8d:11:
b9:ab:75:d0:61:c7:b6:62:7e:2d:88:d0:ba:16:4f:
e5:3c:12:e1:25:c8:f3:70:f5:f1:29:7e:d4:be:de:
31:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C5:BF:86:C0:4D:67:32:58:5D:11:B9:24:BD:19:DB:20:08:1E:BB
X509v3 Authority Key Identifier:
keyid:40:D5:59:1A:75:BD:69:3E:9D:3B:76:68:34:BF:07:4F:7B:1E:EE:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVZGnW9aT6dO3ZoNL8HT3se7jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e4:ff:e4:ea:50:a1:b1:61:3e:3f:67:af:22:48:9b:66:98:
7a:2b:fc:97:52:ff:e6:e4:ad:6b:d8:f9:e9:de:34:67:3f:f4:
cc:32:80:27:5c:60:b8:45:1f:d9:72:2b:ef:75:a0:66:4f:24:
61:f0:b4:bb:70:65:25:e0:0b:9d:0e:16:15:67:46:bf:7e:c6:
fc:9e:31:dd:bf:16:b6:18:7c:d9:ad:c9:2a:4d:18:79:70:89:
a7:12:86:97:5a:e6:3e:f8:bd:a1:d9:d0:67:51:88:f2:4f:89:
a4:fc:3a:74:9a:f4:f0:a1:6a:4d:bd:9e:fd:82:a9:ad:ac:33:
15:8d:fc:d7:5d:ab:9c:0d:98:f4:5e:bc:2f:d1:4a:b1:e9:b3:
cd:63:86:97:a7:b6:56:71:21:c8:f6:52:18:15:32:4c:d2:1c:
93:35:ce:67:84:1d:3c:6b:37:37:2f:ab:35:ae:5f:e8:6e:38:
67:a9:5d:f6:7f:cf:64:41:79:a8:53:10:f2:b0:aa:42:6f:a3:
1e:9b:8b:18:32:92:ef:e7:58:21:62:ce:de:27:ee:65:e6:b7:
0e:2f:96:24:65:70:cd:6a:5a:34:25:46:fc:02:53:f7:f8:4c:
0d:16:9d:19:fe:95:f4:cd:ad:6d:8a:2b:ee:bc:86:62:c6:91:
e7:59:7b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:24:36 2025 by rpki-client