Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
File: QYbmudH3jJTWP6yTSrmq3AyW1D4.mft (raw, json)
Hash identifier: c5jVxq7YjJq2xazZ+XSV5mu4cas17vcKCUZXPflQufQ=
Subject key identifier: 23:63:A5:D9:47:B3:AD:1D:6F:26:9E:D8:EE:1D:82:DF:43:20:26:84
Authority key identifier: 41:86:E6:B9:D1:F7:8C:94:D6:3F:AC:93:4A:B9:AA:DC:0C:96:D4:3E
Certificate issuer: /CN=4186e6b9d1f78c94d63fac934ab9aadc0c96d43e
Certificate serial: 019655A64405AA03046A49C075A61CB9C1EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 00:01:21 +0000
Manifest this update: Mon 21 Apr 2025 00:01:21 +0000
Manifest next update: Tue 22 Apr 2025 00:01:21 +0000
Files and hashes: 1: 4siTv1cIQqiRqqbBP3me0G2tMEA.roa (hash: SDh+UpJOyjnagfNdrfriJXPS5zpz808h3YCOrbfCctg=)
2: QYbmudH3jJTWP6yTSrmq3AyW1D4.crl (hash: yEvqNVUAkv/8iYxOhlY9YF3d/5nV5ymhgz5o6VvVEj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a6:44:05:aa:03:04:6a:49:c0:75:a6:1c:b9:c1:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4186e6b9d1f78c94d63fac934ab9aadc0c96d43e
Validity
Not Before: Apr 21 00:01:21 2025 GMT
Not After : Apr 22 00:01:21 2025 GMT
Subject: CN=2363a5d947b3ad1d6f269ed8ee1d82df43202684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2a:b8:b5:91:6f:24:e4:39:30:93:18:10:d1:
f9:46:40:aa:cf:0a:e5:49:f9:88:bc:3e:5f:53:11:
b5:34:23:62:83:d9:25:02:e3:fe:76:d2:2e:de:a5:
e2:75:8e:29:5c:78:12:e7:19:a6:e1:29:f3:f8:e7:
dd:2b:80:ea:35:1a:5f:b8:ac:e8:4d:69:9f:ca:1b:
1c:72:93:e3:9a:8d:91:6a:78:40:81:bb:21:92:12:
5f:de:61:72:19:ee:c1:4f:0a:e7:41:81:e7:a8:4d:
9b:dd:f2:66:ae:11:cd:7e:39:bc:b6:6b:e7:32:99:
9a:e8:1d:13:e2:53:22:50:05:c7:4f:b1:de:c5:ce:
26:51:45:33:00:a5:0d:c1:66:c7:26:84:c0:c0:3a:
0a:77:60:16:4c:6a:8a:35:11:52:ff:dd:34:b0:d8:
03:f7:16:f9:33:12:64:b5:2c:44:cc:3e:95:81:39:
02:d6:67:a7:0a:10:69:c2:aa:5e:50:a2:d5:44:67:
88:c9:e1:24:9d:9d:53:44:3c:1f:1a:a8:48:df:66:
5b:f6:dd:8a:ff:42:95:8d:8b:f8:91:97:c0:cf:7b:
cd:ff:ca:d7:8a:fc:ea:ba:ce:8c:27:f8:c5:0a:05:
61:73:2d:7a:98:f9:4e:a8:96:5b:bc:64:91:13:06:
4a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:63:A5:D9:47:B3:AD:1D:6F:26:9E:D8:EE:1D:82:DF:43:20:26:84
X509v3 Authority Key Identifier:
keyid:41:86:E6:B9:D1:F7:8C:94:D6:3F:AC:93:4A:B9:AA:DC:0C:96:D4:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b8:bd:22:6f:d6:d9:fc:f6:6b:fb:c6:8b:a7:0d:21:c0:3e:
d5:16:09:ac:a6:b1:0e:24:71:f0:85:98:55:40:98:5f:d5:38:
e3:e7:2f:b2:76:46:6c:cc:24:92:58:0f:74:62:cc:af:72:c0:
21:42:3c:ff:57:a2:d8:d4:c8:53:62:52:4d:89:db:e4:76:35:
e1:d4:7b:3b:44:3c:4a:ea:77:34:71:2b:5c:dd:8d:e5:20:6c:
94:d7:f8:99:d8:f2:31:c2:9c:e1:7e:1d:2f:13:62:e0:c4:75:
2b:15:8b:83:c1:d1:d8:2a:77:4e:c8:58:78:58:ed:37:c4:d7:
32:ce:4a:e0:6b:01:57:5d:3b:4c:c8:14:36:ed:bb:fc:65:5c:
48:78:28:14:f2:67:f0:f4:1d:dd:73:fd:52:c7:81:4d:21:e4:
d4:c5:88:dc:97:76:fc:2d:bb:8f:f8:60:e0:bf:7e:89:57:ab:
6d:d4:ad:e2:34:07:ce:30:26:69:d3:ac:fa:4f:fd:9f:47:af:
4f:1a:a1:02:2a:06:83:86:e1:4d:ad:f9:d4:60:dd:11:81:00:
13:0a:b0:50:f6:8c:55:bd:ba:0a:90:6c:7d:b5:f2:48:c7:6f:
aa:bb:67:46:08:99:6c:77:b5:c7:84:57:d8:83:ef:7c:71:a8:
ec:fd:76:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:11:05 2025 by rpki-client