Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
File: QhFndK-17RrJkmsLwtV_i4BYs-c.mft (raw, json)
Hash identifier: B5u2xHvoOP5fTRnJ8ZBw/ZmC3MCBXUhoP5mNFAMbZoE=
Subject key identifier: F4:9F:01:78:C0:E0:76:D2:03:0C:1E:C4:3F:F8:9A:0E:56:D7:4F:B8
Authority key identifier: 42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
Certificate issuer: /CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Certificate serial: 01964CA2182A0420122BA9F0AFB629CC9807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
Manifest number: 1149
Signing time: Sat 19 Apr 2025 06:00:13 +0000
Manifest this update: Sat 19 Apr 2025 06:00:13 +0000
Manifest next update: Sun 20 Apr 2025 06:00:13 +0000
Files and hashes: 1: QhFndK-17RrJkmsLwtV_i4BYs-c.crl (hash: VjlNzNkGdDihu0W1hhd44AIryWLe3wjsDD0bRpTnhDg=)
2: v4w1l1in0yr2EsXsMhwK7smhe5c.roa (hash: 7H5QERbsex398Y/VCrt/sp2Qpj6rfwjWtrt7q4PvQAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 06:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:18:2a:04:20:12:2b:a9:f0:af:b6:29:cc:98:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Validity
Not Before: Apr 19 06:00:13 2025 GMT
Not After : Apr 20 06:00:13 2025 GMT
Subject: CN=f49f0178c0e076d2030c1ec43ff89a0e56d74fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2a:51:c5:5b:7b:c4:1c:29:18:2b:a0:e6:e2:
46:16:e0:da:29:15:f3:85:65:f4:11:21:00:e0:7e:
33:26:54:6b:1b:be:73:5a:01:98:f1:6a:3a:e8:1f:
7f:c1:1b:26:84:12:30:82:0e:1d:6d:86:86:fd:0c:
01:9f:8a:ad:8d:25:9f:9e:c3:18:c6:c3:3a:9c:a4:
52:cd:9a:44:f1:24:49:66:14:49:48:7e:73:2d:74:
8b:47:43:4b:d1:de:38:68:55:ea:40:81:39:dd:c2:
73:d1:20:8f:a3:5e:c4:71:34:6f:6f:6d:9b:db:87:
b4:c9:52:17:b3:b7:2b:b6:5e:d7:eb:e3:9e:40:fa:
11:75:0a:c6:5b:cf:99:2b:aa:a2:08:89:4a:d5:09:
7e:6f:90:d3:9b:12:4e:18:fb:ff:70:25:f5:2c:71:
78:f9:c5:f0:aa:7c:ed:51:d4:4f:e9:7c:c6:5d:58:
52:18:65:78:f3:4e:37:bf:20:5e:8b:7e:3e:c2:71:
a3:1d:9a:72:51:bf:6a:f6:c3:e5:8a:65:2d:a4:68:
ae:da:ce:95:c8:ea:ea:bf:d7:b2:17:ee:88:90:fe:
cb:43:38:0a:33:23:48:db:e1:cd:d5:5d:cd:7d:14:
29:73:d6:26:31:ef:85:88:66:27:b0:94:ed:4d:e2:
bd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9F:01:78:C0:E0:76:D2:03:0C:1E:C4:3F:F8:9A:0E:56:D7:4F:B8
X509v3 Authority Key Identifier:
keyid:42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:37:2f:23:e5:b9:6c:6b:39:65:c9:7a:86:8e:86:37:fa:9d:
b9:67:11:ae:19:35:8a:89:05:2e:b8:b8:c0:4a:ad:79:04:88:
68:2c:af:f3:8d:d9:2e:2c:cd:c2:1c:f1:45:11:b0:3b:f3:64:
4a:5b:36:79:9e:f2:83:8e:af:24:08:d1:db:6f:e1:28:74:41:
d3:92:d9:a3:20:79:7b:50:42:9a:3d:dc:7a:4d:72:bd:f9:2e:
e3:39:25:1f:01:52:63:fc:a5:67:6a:89:72:d8:35:f0:64:40:
54:67:8d:22:c2:db:5c:f7:22:e0:c2:53:f1:b8:ae:bd:25:1e:
33:b3:41:82:19:17:14:c1:41:6a:8e:0d:38:32:ad:83:fe:eb:
61:5c:3c:68:dc:22:57:7e:9e:93:fb:84:fe:4a:a0:d2:ba:63:
68:e8:30:5f:8c:40:ec:a3:5b:60:6a:47:55:37:f2:76:03:a5:
2c:c1:18:8e:97:01:27:16:dd:55:a3:93:04:b1:0c:79:26:33:
4f:ac:1d:b9:c4:4c:1f:ad:08:33:bd:14:67:c8:3e:6a:ec:ff:
b5:7e:af:06:f9:cb:a4:70:5b:a0:68:db:ae:8c:b6:33:f6:4e:
8e:6d:bf:40:aa:01:01:7c:c1:fd:59:a5:76:69:59:40:4f:19:
46:c7:b1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:13:52 2025 by rpki-client