Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
File: QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft (raw, json)
Hash identifier: PC4K2xnT7mJ4WMmokAodRL9nFW+WdViMeZUA+dBFVN0=
Subject key identifier: 9C:A6:97:07:14:B6:90:D9:68:44:BC:81:68:67:5B:F0:0C:A5:DC:0B
Authority key identifier: 40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44
Certificate issuer: /CN=40fac6a32fe4baa7d89b91ec5165a3d96688e144
Certificate serial: 0196515B2821FDE3ED0325D2C7465A5636E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
Manifest number: 0D41
Signing time: Sun 20 Apr 2025 04:00:50 +0000
Manifest this update: Sun 20 Apr 2025 04:00:50 +0000
Manifest next update: Mon 21 Apr 2025 04:00:50 +0000
Files and hashes: 1: 4hn1wVatZQI4O44VQ9afg3_3YCE.roa (hash: Wip87SKY/zyuxOVUXFbAARGlH7AAphh/zZD7B0INIf4=)
2: QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl (hash: IhY0mhGS70JVFUjZzt1f6FTrecMayIYTbqw+xisMzQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:28:21:fd:e3:ed:03:25:d2:c7:46:5a:56:36:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40fac6a32fe4baa7d89b91ec5165a3d96688e144
Validity
Not Before: Apr 20 04:00:50 2025 GMT
Not After : Apr 21 04:00:50 2025 GMT
Subject: CN=9ca6970714b690d96844bc8168675bf00ca5dc0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2b:45:bc:8b:e5:b6:df:1a:47:18:a1:3e:e6:
ca:9c:a4:df:0a:76:e9:1e:e9:ee:df:dd:1f:8b:5a:
53:7f:fd:00:7d:f0:65:79:eb:ae:28:77:05:c5:fe:
e3:f0:5c:c3:f5:6c:f5:94:7b:d2:c0:a1:dd:e2:a9:
36:e2:30:49:ed:b2:bd:52:2b:9f:6a:88:d7:95:8f:
42:15:f8:53:7e:d7:7e:6b:a6:3e:df:d6:3d:2c:11:
1d:ad:96:7e:11:26:ac:4f:86:9d:8a:16:d3:b0:ef:
1a:ec:4d:1e:d3:45:a1:84:6f:96:74:5c:fa:cb:92:
0a:cd:39:ae:e9:c6:ae:da:df:e1:94:b4:f4:51:1b:
0c:af:f4:60:a7:b8:c8:b6:91:67:76:f1:27:ab:05:
65:33:f7:1f:bc:d4:6e:88:01:6e:c9:3b:1b:66:2c:
85:ea:2b:73:e5:db:02:22:55:f1:8f:ee:33:dd:eb:
7c:cc:59:59:5f:52:a1:a3:55:a2:cf:e1:cf:17:7b:
fa:53:82:42:3a:23:38:d9:db:77:13:93:5e:86:66:
bd:8d:e7:b2:09:ec:80:be:b8:02:eb:3f:3f:0c:ae:
09:88:fa:8a:b5:a5:e3:1f:21:a2:c1:2f:49:2a:10:
6a:39:fb:16:5c:5a:a8:17:d8:15:b4:e2:0f:e9:4e:
b7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A6:97:07:14:B6:90:D9:68:44:BC:81:68:67:5B:F0:0C:A5:DC:0B
X509v3 Authority Key Identifier:
keyid:40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b4:91:26:fa:83:77:f5:43:5f:9e:e2:5b:62:6b:41:db:1f:
40:a0:1e:a8:30:0e:60:86:ad:f3:d2:12:6e:1d:4c:4c:d0:d2:
69:de:9f:89:c8:f9:10:ee:c5:b0:e8:03:61:01:2f:42:90:db:
da:6d:9a:7b:94:c2:68:f7:fa:8b:13:4c:8a:58:07:36:6c:e4:
10:96:f6:87:3b:ee:cc:5d:e9:eb:57:c9:26:8b:8a:c4:ac:fd:
41:13:ee:47:9e:de:fd:74:71:2f:ea:38:15:5c:4c:ea:11:9a:
d3:35:84:ea:20:9a:db:77:39:f2:99:f0:e1:50:b2:ed:15:db:
69:d8:d3:a3:9e:db:ac:b6:8a:c9:1c:3c:87:42:6d:0e:d0:98:
fe:f1:b1:67:28:d4:6b:77:b3:1a:56:ca:ca:ba:b0:3d:4f:a3:
c4:bc:f6:8b:aa:fa:09:1e:77:11:df:50:0e:0f:71:c0:93:e8:
d0:d3:06:b6:5c:30:bd:88:86:2b:dc:92:91:9e:89:9a:80:49:
e4:59:31:79:aa:37:cb:64:d5:bb:a0:9a:20:0f:db:3f:5f:86:
61:ca:67:09:8d:03:a9:a2:92:3a:63:b9:8e:bc:98:f3:de:0e:
51:2c:12:fd:c9:52:52:dd:c2:17:df:48:3b:63:9b:5d:3a:01:
1d:57:45:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:01:23 2025 by rpki-client