Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
File: QONYGt3WuZ3YdEueKIb7sCrpGOM.mft (raw, json)
Hash identifier: LoDMYXQnnwrRr4MkuhQFvt5Cdvz7VRqn8NR+/dHP/jU=
Subject key identifier: 85:EE:C7:62:DB:E8:FB:C6:9E:77:2E:21:B2:F4:30:CB:30:1E:9C:1F
Authority key identifier: 40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
Certificate issuer: /CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Certificate serial: 01965A94C5A13571D4A003C4074940F748D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 23:00:21 +0000
Manifest this update: Mon 21 Apr 2025 23:00:21 +0000
Manifest next update: Tue 22 Apr 2025 23:00:21 +0000
Files and hashes: 1: 7sL1UBW9oIL-S5vfH1jOO3eYhUk.roa (hash: WnpcdVTaXzH616PZ8mN25gQu/poO33PVXu+tGiulqjA=)
2: QONYGt3WuZ3YdEueKIb7sCrpGOM.crl (hash: tldBFAWzsp8wNEHEhbyw2HGWZlCcq5n08BUgQhlZ4mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:94:c5:a1:35:71:d4:a0:03:c4:07:49:40:f7:48:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Validity
Not Before: Apr 21 23:00:21 2025 GMT
Not After : Apr 22 23:00:21 2025 GMT
Subject: CN=85eec762dbe8fbc69e772e21b2f430cb301e9c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:62:60:bb:d6:46:da:eb:26:55:47:73:dd:4f:
2f:bb:26:4d:54:88:b0:37:e2:1f:3e:df:01:3e:07:
eb:92:07:1d:0f:f9:dc:1c:74:e2:b3:ed:1f:12:2e:
2f:a2:06:b1:6b:c2:6c:ca:48:99:51:bc:b2:48:6e:
34:4e:22:98:bd:da:24:64:b4:cc:57:f4:f0:93:0c:
8c:91:d8:d5:03:db:66:f6:95:4a:0e:af:20:03:b5:
45:68:db:25:a6:61:e2:68:bc:9b:7d:ec:43:a5:af:
b6:31:69:27:3a:f2:44:dd:3f:f1:78:b8:11:60:49:
6e:ac:07:f1:11:7a:5f:a7:ec:f6:0a:fb:7c:2b:74:
e0:74:e0:c7:33:62:32:20:b5:a6:bd:bd:f7:f1:4a:
0f:b4:8a:c9:cd:41:af:e2:0e:8e:17:b5:2d:f5:45:
11:83:d2:26:02:e6:29:44:0d:67:28:50:87:68:3d:
d5:d8:39:e4:6e:9e:68:09:fa:b0:30:9d:b7:4d:01:
37:3b:3c:4e:e3:57:20:a2:4b:19:7e:e9:bb:49:ee:
10:af:c6:dc:0f:d3:55:82:3c:5b:8d:98:7e:be:ae:
0f:33:0b:16:68:1e:75:d2:5c:7e:ce:ff:ea:a4:b1:
be:a4:a9:8e:0d:9c:a1:a5:23:5b:d1:e1:96:6c:f2:
02:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EE:C7:62:DB:E8:FB:C6:9E:77:2E:21:B2:F4:30:CB:30:1E:9C:1F
X509v3 Authority Key Identifier:
keyid:40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:07:51:12:c3:73:8b:66:7a:82:87:6c:a2:ab:09:2b:e0:de:
38:fc:e6:10:a9:11:ce:8b:3c:c7:89:12:ee:e1:57:ba:b2:cd:
30:37:1e:ac:ce:21:7d:ad:d0:50:00:cf:8a:3f:ec:dc:0b:f5:
5e:c3:12:ef:95:67:3f:5b:f1:f3:e8:aa:90:53:b9:97:c3:ce:
d1:b9:35:92:b0:59:36:9f:69:e5:f9:50:17:d5:ef:ee:a1:f5:
99:59:8f:2b:b1:e7:8c:cd:b4:47:64:f7:c5:89:45:0e:e2:66:
80:4a:62:90:2d:1a:80:ed:86:45:15:22:8d:ad:85:62:e7:34:
b3:c5:fa:55:e4:2e:da:2a:1a:89:14:0c:ab:38:7b:8d:f2:29:
52:dc:29:c6:d5:18:8a:b3:73:25:8a:5b:98:13:b2:1f:ff:fa:
98:9b:7a:0d:9c:7b:ff:e7:f9:b2:2d:28:19:31:f2:c1:d2:16:
aa:86:d4:18:11:bc:ff:31:3c:bf:63:6f:67:1b:b8:64:41:4a:
f5:53:55:0f:79:0a:3b:2c:12:71:d5:d6:b3:ec:0c:f7:e4:36:
24:b2:05:e4:94:8a:3e:45:99:91:d0:ac:7c:2f:29:26:17:35:
0d:84:8b:0f:cf:4a:e0:27:da:60:37:41:0a:8a:b7:39:6f:7f:
aa:f4:ac:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:49:14 2025 by rpki-client