Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
File: QD1jsy5xwcFpJD79ttVu1cprgk4.mft (raw, json)
Hash identifier: ZZbbVv3EYvgQFV3wOVhvmLSr6HIoKi3Sop2zwl8+4gI=
Subject key identifier: 9A:A4:52:04:E8:80:49:23:39:24:E0:2A:DE:87:07:23:9E:97:71:86
Authority key identifier: 40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
Certificate issuer: /CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Certificate serial: 01964143435F37753FBEBF94CBA4848CE362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
Manifest number: 1424
Signing time: Thu 17 Apr 2025 01:00:49 +0000
Manifest this update: Thu 17 Apr 2025 01:00:49 +0000
Manifest next update: Fri 18 Apr 2025 01:00:49 +0000
Files and hashes: 1: QD1jsy5xwcFpJD79ttVu1cprgk4.crl (hash: CzyaKP6jppSaxAKWRxAZ1h+5Bf9EaebYLHdsoRXToZ4=)
2: sEgqJVQsrJEI5D6KmALm-jn8fK4.roa (hash: wkSem0GjNV7CDayzITuhm9bdRNzF4MpUUCFS49t70yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:43:43:5f:37:75:3f:be:bf:94:cb:a4:84:8c:e3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Validity
Not Before: Apr 17 01:00:49 2025 GMT
Not After : Apr 18 01:00:49 2025 GMT
Subject: CN=9aa45204e88049233924e02ade8707239e977186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:59:d0:9f:b8:fa:10:7c:60:d5:27:45:9d:90:
a7:41:22:e0:8f:fd:e0:33:d3:26:de:03:0c:1b:f0:
ef:0a:93:0b:83:e9:b0:17:4b:b3:77:57:3c:51:04:
8f:7c:24:ad:c0:1e:33:84:70:3a:11:1b:fe:16:77:
4b:61:47:62:85:07:22:48:cd:85:e7:c1:7b:b0:a8:
f7:20:b4:f4:50:ca:57:dd:0d:2f:ae:11:f0:56:16:
6b:31:ff:b9:f9:42:11:36:de:d8:f8:34:76:0e:60:
e1:84:b5:11:73:2a:69:02:76:70:0b:02:8c:93:32:
27:aa:f5:eb:c4:f0:63:9b:db:df:fa:a0:92:22:a3:
fa:3e:ec:35:46:aa:bf:e7:5c:a1:d3:91:a9:e7:a0:
e1:94:8f:ff:c3:f4:c5:a4:6c:6d:72:6d:72:b9:7e:
55:df:a4:37:93:fc:e6:27:a2:65:eb:da:e8:21:98:
90:89:d7:58:48:fd:e4:65:78:7a:d1:8d:a0:9b:c0:
f1:ab:e5:50:65:05:b1:d0:0e:ba:9f:cc:74:fb:73:
c1:6f:54:f2:43:53:16:82:2a:8f:8a:aa:a9:85:bb:
81:8d:54:cd:98:3e:1c:75:ce:b1:0a:43:da:a9:eb:
06:3d:80:b9:43:87:0a:c5:1e:ed:fe:17:a1:93:a5:
a0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A4:52:04:E8:80:49:23:39:24:E0:2A:DE:87:07:23:9E:97:71:86
X509v3 Authority Key Identifier:
keyid:40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:71:73:b1:aa:86:1d:2f:f0:63:1b:0a:a5:d0:13:d7:66:94:
a8:0a:72:c2:5d:b6:c1:1c:ef:08:be:a1:e5:b8:f7:1d:cc:30:
d8:ae:20:e3:7a:77:95:c3:b8:15:a1:bf:60:9c:68:32:37:bf:
72:e9:15:eb:87:03:4b:d1:e7:7d:50:8c:db:8f:a6:5f:53:20:
9b:02:c5:c4:cb:a3:5b:be:61:45:0d:a6:bc:10:dc:fc:d2:28:
91:db:78:17:66:2f:82:ea:46:0f:80:63:e4:a9:4c:56:2d:88:
d7:eb:fe:ce:dc:8e:b4:f5:eb:f0:2c:62:f0:1e:f9:34:69:0d:
85:c4:fa:9f:2d:79:f6:4e:15:39:c9:36:78:0d:22:05:37:e9:
e6:6c:84:0a:da:cd:0e:4c:33:a0:07:30:40:f4:54:ac:eb:d5:
59:4e:14:72:4e:bf:1d:77:69:06:b4:a2:19:2e:0c:47:66:eb:
4f:f8:a6:33:9d:40:07:64:9d:d2:86:97:38:aa:48:25:6d:c4:
22:4a:b8:39:65:2b:5f:75:3b:54:13:5c:de:65:44:1b:a3:6b:
bc:43:73:b6:4b:d0:d9:9b:59:1e:bf:97:8e:b5:69:e7:9a:30:
67:04:80:f0:60:32:f5:d5:86:79:d8:58:d3:75:18:c8:3f:53:
16:80:4e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:28:47 2025 by rpki-client