Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
File: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft (raw, json)
Hash identifier: HE9Us+QJJU12p/aBMfpHWoSuppmCPhS2byYs8YJFfoo=
Subject key identifier: 87:CD:19:91:8E:1A:AB:96:14:9C:83:21:9B:90:CC:94:A8:F8:28:38
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 0196102915854419E2B7C410645B2DFD8845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
Manifest number: 114D
Signing time: Mon 07 Apr 2025 12:10:49 +0000
Manifest this update: Mon 07 Apr 2025 12:10:49 +0000
Manifest next update: Tue 08 Apr 2025 12:10:49 +0000
Files and hashes: 1: G3gmpYNNP9JYrhaqiMsAU_EbEhU.roa (hash: JYCLWmpn2x1tQh9BdgAPsoxEsKAREWa0Chd9mMo9Jyk=)
2: P8r0bc3cljmCfBx136KPQShS3O8.roa (hash: zmPirJcGZiuowifL5CV0/efp4MLtVscwhTPAYNjTuUI=)
3: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl (hash: gt7qbj1y2kqW9fxNakCcvP3zxbJgSecbYKxWDMWw1zE=)
4: UEolp0R-hRHKGcTNGe0AoFHIQN0.roa (hash: MIhc/4dE+vXix8ModKbHmu/83XSuv98iPqMBE/1dwmU=)
5: Z4jvQpNliqhDur0DLqjSiIw-Y0A.roa (hash: DfQMPGoZNssvuxBrhCXJLfOHeuzlWhIa//2s8bwFkhw=)
6: bNTthk-6VNC8BPqO0CXb0wpv7Ko.roa (hash: U+k7jHV+TEaRK88+v5GTKPK+suUq7iPi4AwDl7BFsh0=)
7: zMd7m5mxh6U6DbEOt4OgQ4iJ1U0.roa (hash: bhC49t061SBKpaBxLjJKGavc/n4xCA6rE46xrsPt5jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:10:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:29:15:85:44:19:e2:b7:c4:10:64:5b:2d:fd:88:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Apr 7 12:10:49 2025 GMT
Not After : Apr 8 12:10:49 2025 GMT
Subject: CN=87cd19918e1aab96149c83219b90cc94a8f82838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e8:f3:c9:db:a6:f3:e6:a5:b6:6a:91:17:3e:
4d:52:5a:66:44:95:7e:de:1b:f4:50:65:5f:53:00:
72:0d:62:6d:8d:9a:10:d3:98:1f:e9:55:f1:64:d9:
d2:d1:a4:81:69:75:89:f9:55:f5:fc:9d:83:85:43:
e3:11:8b:3a:c7:d6:55:7c:e9:96:80:25:55:39:bf:
f3:66:09:bc:03:44:4a:4b:ef:37:93:6f:c4:ed:66:
18:ae:67:65:bc:2a:e7:2b:ed:94:50:3b:2f:f2:f4:
25:b8:c8:fa:cd:12:b7:c6:92:28:52:4f:59:1a:33:
78:4b:63:fc:2d:b8:eb:ce:44:97:c7:3e:f0:d3:f7:
3a:2d:3f:d9:34:87:72:6d:0f:70:b6:c7:e2:cb:ec:
50:fc:cf:02:0e:23:3c:c5:2b:53:7f:cd:b0:a8:61:
35:90:e5:5c:ac:89:11:56:f2:7b:70:d5:ca:8d:a4:
54:80:6d:ef:d6:35:1a:9d:b3:e7:66:40:82:a5:17:
7d:eb:6d:b8:36:42:48:0e:54:ab:11:c4:b5:77:65:
5e:82:38:0a:b9:1d:51:71:1b:5f:f6:b7:fd:49:b8:
cb:87:39:46:73:03:ef:40:9f:ff:22:88:d0:ff:1e:
d0:12:4f:f1:f7:66:3e:4d:97:5d:0a:2c:56:f9:2d:
9d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CD:19:91:8E:1A:AB:96:14:9C:83:21:9B:90:CC:94:A8:F8:28:38
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:b9:8f:e8:3d:42:9d:1f:38:25:c7:f4:56:f8:d7:7d:13:53:
bc:5f:e7:47:62:39:fe:0a:e5:fc:18:8e:ef:7d:b0:cf:e0:1f:
82:61:84:36:36:6b:f6:03:a5:63:be:c3:03:59:c0:e0:3d:54:
31:af:6c:7e:d0:c6:29:4e:35:18:bc:d3:de:85:7b:50:84:8e:
b4:61:69:4b:a6:10:8c:ec:20:5f:cc:6b:05:d6:1e:e9:0e:70:
4d:51:c0:3f:c7:39:a4:80:2b:c3:86:0b:53:82:77:20:c5:8c:
e0:3a:62:3e:4c:5d:09:c6:c5:c4:1a:1f:51:36:25:c4:5c:7f:
3c:96:80:de:80:e9:28:24:f0:1c:0e:63:d3:99:36:bf:32:70:
b1:09:1a:27:78:1f:d0:c4:6a:17:cf:60:3b:2c:32:59:ef:65:
f5:c1:00:0a:6a:e4:86:63:a8:b9:6a:e7:13:ce:6f:62:0d:43:
93:9f:5d:9a:5e:64:89:ae:8e:94:5b:33:fc:b5:30:1f:1b:28:
52:44:bc:0d:ea:92:01:50:10:10:01:48:65:6e:22:6e:dc:c6:
0c:1a:d4:78:ef:d0:4d:db:7d:37:af:aa:c5:9e:e0:1f:49:ef:
ee:15:d3:fb:0c:d1:24:17:b0:71:1c:5e:b2:5f:b5:fe:dc:cd:
72:10:cd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:58:05 2025 by rpki-client