Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
File: QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft (raw, json)
Hash identifier: YwclNcjpZbAVkG8wVZS11+g+rYxLFDPfaUEq4Ih16xU=
Subject key identifier: 2D:F2:83:3E:50:D8:F8:9E:1C:9A:43:84:38:41:6D:7E:21:75:3F:85
Authority key identifier: 41:2A:DD:94:55:BC:13:2B:73:0E:72:70:51:F0:B6:4B:A4:5F:CD:A4
Certificate issuer: /CN=412add9455bc132b730e727051f0b64ba45fcda4
Certificate serial: 01958F98737C55BCFE4595BA81151D648C14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
Manifest number: 0188
Signing time: Thu 13 Mar 2025 13:01:27 +0000
Manifest this update: Thu 13 Mar 2025 13:01:27 +0000
Manifest next update: Fri 14 Mar 2025 13:01:27 +0000
Files and hashes: 1: OCmtvoyutUlmQYHtPYpUref_Lcw.roa (hash: Fe4u65PoUtBXtctFyHwAqLin/v4sGRun96RsjrSGCO0=)
2: QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl (hash: KdkuHq1iJDsuYgyoSKkEsns29NWac2VNJMWisFXvxNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:98:73:7c:55:bc:fe:45:95:ba:81:15:1d:64:8c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412add9455bc132b730e727051f0b64ba45fcda4
Validity
Not Before: Mar 13 13:01:27 2025 GMT
Not After : Mar 14 13:01:27 2025 GMT
Subject: CN=2df2833e50d8f89e1c9a438438416d7e21753f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:81:48:71:e4:38:c4:f4:61:43:e0:92:51:bb:
a2:97:59:3a:67:27:ef:f8:e3:18:14:88:5f:27:cd:
b3:4f:26:23:74:de:8c:00:21:c1:29:11:f3:6f:94:
36:9a:3e:ae:9f:48:4a:c1:6c:80:85:7c:ac:f9:07:
71:bc:7c:de:44:96:c8:91:0c:b5:58:8a:95:bf:af:
0f:da:cb:04:b9:ae:52:a7:a2:6b:84:0b:bf:88:36:
2e:09:d9:38:35:c0:12:48:7c:d0:6d:b5:19:b8:26:
a8:af:e4:f5:46:e4:30:d2:3e:bb:4c:72:0f:6f:67:
0d:2c:01:80:0d:b3:12:e6:3f:40:4f:fd:70:e7:8f:
66:3d:80:df:99:03:71:5e:7a:5d:8d:29:52:0c:c9:
28:11:88:51:b6:0d:2b:8f:20:f3:20:96:fa:c8:ae:
52:56:84:a0:12:e8:fe:40:d1:8d:2c:69:d8:99:fe:
77:61:01:6c:dc:d4:80:76:4f:75:17:f1:51:da:ad:
11:33:64:8e:98:26:ab:fe:c1:c9:be:b4:d7:e1:12:
2c:e3:9e:f4:70:ed:c1:e1:0f:78:16:3c:83:1c:fe:
8d:13:dd:3a:81:6e:4e:60:5f:53:64:5a:c3:c2:d3:
5b:92:72:a8:9d:92:ed:3e:de:81:fa:91:32:c1:69:
28:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F2:83:3E:50:D8:F8:9E:1C:9A:43:84:38:41:6D:7E:21:75:3F:85
X509v3 Authority Key Identifier:
keyid:41:2A:DD:94:55:BC:13:2B:73:0E:72:70:51:F0:B6:4B:A4:5F:CD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b5:4e:36:08:56:8a:0c:ed:76:dd:d0:17:1e:eb:fc:bb:f6:
37:66:0d:80:a6:85:1b:1a:51:3d:56:93:18:78:63:f2:f2:d3:
c2:3e:98:d6:74:03:18:9a:dd:26:5e:fe:df:f4:3d:ca:a6:87:
f7:26:20:81:76:b4:3b:ac:ac:81:81:48:ce:c9:af:f2:c2:49:
c2:82:05:5f:4d:6e:3e:db:08:9b:55:8e:b4:73:f9:a3:8c:be:
3d:21:bb:50:63:f5:cc:c1:c6:63:84:0b:24:cc:d9:03:1f:76:
2a:88:36:18:c0:e7:f2:a9:d5:ad:d2:71:a8:e2:87:21:e4:2a:
34:59:d7:ae:7a:cd:82:bc:9b:10:0d:64:71:8f:36:1e:a1:1c:
5e:2a:ac:72:a1:cb:16:25:80:0a:09:10:3a:45:37:2c:51:df:
36:35:e6:29:db:a8:da:cf:e0:1c:2b:47:9f:40:b3:f4:58:99:
9f:0e:dd:d2:c6:11:dd:47:17:58:93:2a:23:ef:09:24:26:49:
ed:5b:13:32:89:21:7e:49:68:df:74:2c:65:92:04:d0:33:ee:
06:79:e2:de:8f:c1:1f:cc:30:d7:c2:2f:d0:8c:e7:40:51:c4:
60:17:81:6b:5e:8e:f6:43:b1:c6:16:59:b7:5e:56:02:39:2a:
b9:79:90:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:02:52 2025 by rpki-client