Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
File: QDx-hd5J15JM5Q09ap5S6enC4xI.mft (raw, json)
Hash identifier: XMez/jEayNCGXHdGc7GTyIDcTrMejfaFp4bw+O+JfJQ=
Subject key identifier: AC:BE:1B:35:D5:15:11:06:30:A1:52:82:50:A3:2C:72:E3:AC:41:D6
Authority key identifier: 40:3C:7E:85:DE:49:D7:92:4C:E5:0D:3D:6A:9E:52:E9:E9:C2:E3:12
Certificate issuer: /CN=403c7e85de49d7924ce50d3d6a9e52e9e9c2e312
Certificate serial: 019510FDEA6F0C0E6A42326C15C14FF0923F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
Manifest number: 121C
Signing time: Sun 16 Feb 2025 23:00:30 +0000
Manifest this update: Sun 16 Feb 2025 23:00:30 +0000
Manifest next update: Mon 17 Feb 2025 23:00:30 +0000
Files and hashes: 1: QDx-hd5J15JM5Q09ap5S6enC4xI.crl (hash: WPQrH11PCv2cFlmeVpZGNMcUOK9u3DttsZ2MXMb+400=)
2: zBQLlk6R8SMqXeJs9KlWAq-2zWs.roa (hash: H5Z9T6mivR2DyTqTRYiFtEvpcqAnMQHqnVNqaL10pMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:ea:6f:0c:0e:6a:42:32:6c:15:c1:4f:f0:92:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403c7e85de49d7924ce50d3d6a9e52e9e9c2e312
Validity
Not Before: Feb 16 23:00:30 2025 GMT
Not After : Feb 17 23:00:30 2025 GMT
Subject: CN=acbe1b35d515110630a1528250a32c72e3ac41d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a0:55:d2:2e:00:20:9f:55:0c:73:25:fc:ea:
45:42:48:1c:cf:a1:61:61:52:c6:d5:0d:54:9a:90:
4d:f5:65:5a:c4:ed:bb:bd:f9:0c:42:64:fb:3f:37:
ea:bb:f6:02:40:65:95:8a:bd:8e:e3:c2:d5:20:8a:
1c:f0:4c:03:59:7b:fd:6b:1e:d4:de:ed:53:41:fb:
6a:05:56:e7:6a:a0:33:d5:22:ab:0a:76:41:80:fa:
8d:c5:da:43:c7:b9:e3:6f:99:d5:a8:b6:da:2e:1b:
12:44:47:ec:10:b0:4b:01:bf:27:b0:57:92:ed:6f:
2f:e5:77:05:30:40:97:31:b3:57:a2:95:ad:bd:d6:
03:6e:ed:96:34:46:8e:6c:a6:f9:f7:16:56:bb:c4:
f1:06:b0:aa:fc:fb:69:09:96:3d:ca:5f:25:f6:80:
78:a0:a0:e6:f6:82:67:bb:eb:6a:32:57:dc:f6:4b:
49:47:d3:84:37:6d:6b:25:60:6c:60:59:fe:4d:53:
e4:d1:1c:4a:13:a7:c7:9b:14:b7:09:48:50:0d:fc:
96:c2:df:d9:0d:17:de:19:35:f1:9e:00:c7:54:ab:
d3:84:cd:66:ba:71:6a:06:ac:88:70:ff:06:ea:fa:
e9:2a:bc:c0:9a:e9:6f:6e:13:54:f0:ac:2d:c6:72:
a7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BE:1B:35:D5:15:11:06:30:A1:52:82:50:A3:2C:72:E3:AC:41:D6
X509v3 Authority Key Identifier:
keyid:40:3C:7E:85:DE:49:D7:92:4C:E5:0D:3D:6A:9E:52:E9:E9:C2:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:a8:1b:9c:e2:2f:53:bb:70:28:d6:11:c7:3d:5b:08:d9:14:
c2:29:b9:16:af:13:5c:a4:82:a3:e5:92:0c:87:89:2d:61:a2:
9d:1f:16:c0:c3:b0:5b:a7:15:55:03:df:a5:9a:ec:8b:0b:de:
dd:f9:40:9d:31:af:fd:75:9d:79:6d:0b:3d:d7:ee:b8:fe:b1:
c8:2d:7c:dd:6b:59:98:c2:ff:b8:a6:99:a6:e5:de:48:1a:57:
62:1f:a0:df:80:30:49:80:d6:8e:2c:fa:22:33:38:36:ba:32:
44:8d:82:a8:73:1a:95:28:79:8a:53:0e:14:14:28:d5:e8:f3:
3c:e5:ed:bd:fc:cd:53:65:4d:33:b7:99:36:5b:0e:1a:d1:5f:
93:37:bd:39:0b:a1:f9:28:d2:9c:7f:a9:a0:85:4d:b9:ad:df:
9e:79:95:29:00:02:e1:f3:3e:ae:27:69:a2:46:a3:f9:94:8e:
05:a9:6b:60:c7:71:d8:88:f2:41:1f:73:cd:23:a5:a7:2e:17:
dd:6a:c2:05:0f:fc:de:6e:72:de:bb:46:08:d1:4c:c9:a4:a5:
0b:84:a4:01:30:25:0a:b3:f0:1c:97:b0:df:12:be:61:73:d2:
a0:52:3b:10:d9:cf:5d:fa:ad:68:5c:83:c9:2d:15:a2:06:9c:
ca:a7:b7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:12 2025 by rpki-client