Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
File: QdD5FclU2DtKG_GEz7wTjEftpR4.mft (raw, json)
Hash identifier: VTJ+9NlgD/E1gRnxzAQsc35HHX8gAgHJWmHf4SU2+AI=
Subject key identifier: 98:B3:E1:58:03:E5:28:17:53:F8:A4:37:BD:80:BF:E4:62:9B:52:08
Authority key identifier: 41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E
Certificate issuer: /CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e
Certificate serial: 01964F35B1794A88563710D9326C00A75F4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
Manifest number: 118D
Signing time: Sat 19 Apr 2025 18:00:40 +0000
Manifest this update: Sat 19 Apr 2025 18:00:40 +0000
Manifest next update: Sun 20 Apr 2025 18:00:40 +0000
Files and hashes: 1: QdD5FclU2DtKG_GEz7wTjEftpR4.crl (hash: W1ds7iWKTD5bERmF4B/AtlSzyQjnNGwyZmtd5ih57ws=)
2: f6uKeUIzMA-uVptKc1ueYhFBFxM.roa (hash: yRxjbOfn/yIPjsEZSwuKIczmA3RcTEjtjojH+74JQXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:b1:79:4a:88:56:37:10:d9:32:6c:00:a7:5f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e
Validity
Not Before: Apr 19 18:00:40 2025 GMT
Not After : Apr 20 18:00:40 2025 GMT
Subject: CN=98b3e15803e5281753f8a437bd80bfe4629b5208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7c:d1:fb:e5:e8:5c:bf:cf:06:34:a7:7a:2b:
9b:42:7d:d5:ad:40:d4:3f:3e:5b:78:01:68:b2:32:
fd:60:3d:40:db:e1:4a:5b:d8:c4:f0:f1:d3:90:b2:
90:bb:52:d7:59:ee:c1:22:3e:64:47:b7:61:f9:f3:
d4:59:e5:93:34:be:13:ee:11:64:7a:fe:fb:43:77:
a5:b9:67:59:ed:13:7a:d5:2a:2f:c5:0c:f5:0b:d3:
f1:96:98:04:84:3c:e4:15:35:aa:d5:85:9b:7e:27:
be:a0:9a:e4:08:66:2c:17:50:10:f2:20:a1:2f:73:
1d:89:91:78:c9:22:7c:5a:cf:36:aa:27:45:a8:43:
87:ae:da:40:58:85:cb:0d:97:02:82:23:5c:10:d8:
9e:2e:27:c1:93:62:3d:d8:bf:58:10:a5:18:21:73:
90:6f:6c:bb:d1:93:8e:0f:f0:30:03:4a:10:2d:d9:
09:91:ab:9d:8d:63:c1:82:09:da:f6:5c:0e:19:00:
40:aa:7e:a8:f7:34:8f:b1:0b:f6:26:95:31:b3:9f:
63:23:92:5e:9b:ed:4b:97:ca:5f:41:12:20:f8:4b:
42:f9:d0:79:6f:93:0a:9e:4b:9d:8c:91:7c:12:cf:
7f:87:e1:04:f9:37:9d:5f:8c:aa:6d:4f:98:05:33:
16:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B3:E1:58:03:E5:28:17:53:F8:A4:37:BD:80:BF:E4:62:9B:52:08
X509v3 Authority Key Identifier:
keyid:41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e6:c4:cd:15:b0:29:f3:c0:a2:d0:8d:a0:93:15:a2:d0:eb:
19:a5:31:5b:67:41:72:50:ed:b3:b1:2e:14:79:0b:53:68:8d:
f9:42:69:3c:74:bd:5f:a9:69:8c:c4:f4:38:4e:2c:8c:5b:54:
ec:a7:48:bb:27:37:f7:4f:20:82:64:0a:35:e3:e3:52:bb:62:
20:dd:c1:a1:d6:cc:49:63:09:cf:1a:6c:e2:46:3a:ed:a1:20:
e7:f6:ad:ef:52:6e:80:42:e6:51:4e:d3:64:7d:98:0a:65:0c:
37:2c:02:a1:ae:c1:51:90:ed:8b:a3:dc:db:af:d1:72:13:fc:
9b:bb:70:17:25:41:ed:5d:b0:fd:75:8a:74:f1:67:2a:0b:9c:
3d:a2:b8:2e:f3:d7:33:31:db:96:ea:b8:a4:ed:f1:14:b8:24:
7a:df:22:70:68:72:2e:dd:89:ea:0d:5d:a8:c3:34:17:86:5a:
09:1a:2c:14:1c:5b:d5:e8:da:f7:ea:db:dc:08:0c:a5:ef:23:
84:30:30:48:bb:b8:fa:ca:55:03:a6:b8:05:00:48:86:f8:44:
b7:f2:24:09:be:54:00:51:49:c7:de:8e:15:44:40:0c:79:7a:
3c:ee:05:bd:83:18:a0:8b:16:93:9c:99:e6:64:a3:6e:1d:71:
3d:d8:01:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:55:45 2025 by rpki-client