Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
File: QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft (raw, json)
Hash identifier: EbqOGW00Dkx/DzQRDjC69DyP8Rps9T9p7gb7O2JK4AA=
Subject key identifier: 85:77:D6:CA:A9:F3:5B:15:F8:7F:F7:B6:75:87:F2:4A:27:F6:63:26
Authority key identifier: 40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
Certificate issuer: /CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Certificate serial: 01963A65423DACCD11B41B66B1DAB17CB0EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
Manifest number: 11CB
Signing time: Tue 15 Apr 2025 17:00:36 +0000
Manifest this update: Tue 15 Apr 2025 17:00:36 +0000
Manifest next update: Wed 16 Apr 2025 17:00:36 +0000
Files and hashes: 1: QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl (hash: BUXTbmG/70F6xo7M8uxgMhww3GK0m9ZFdhmv03qgPxM=)
2: oQC9sPpcZyPZwpQuNTqhI-X9Nlw.roa (hash: vCUpk6P/EjQs3Tpm0wCNehcuCpZGGg9z5aDmzRFQJKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3a:65:42:3d:ac:cd:11:b4:1b:66:b1:da:b1:7c:b0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Validity
Not Before: Apr 15 17:00:36 2025 GMT
Not After : Apr 16 17:00:36 2025 GMT
Subject: CN=8577d6caa9f35b15f87ff7b67587f24a27f66326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:ca:bb:67:e5:b3:91:11:8b:d5:c8:7e:78:
12:68:58:8a:80:36:80:a9:e7:a2:2a:95:f0:d9:26:
d4:d0:92:87:ce:a9:37:e4:27:30:74:38:93:61:95:
4a:0a:b7:25:95:5d:ee:b6:44:3c:2c:85:95:73:3d:
b5:9f:09:b1:f9:8d:35:36:88:31:0e:d5:02:b7:fc:
4a:f8:65:ce:3a:cf:fc:a4:5b:61:8a:5b:e3:10:0b:
f8:2c:85:f2:e8:16:b8:4d:2c:d0:5b:f5:ac:3f:50:
58:76:0c:08:38:01:b9:4d:35:36:79:5e:de:48:ef:
a8:d5:a3:06:e1:46:32:71:d4:5a:62:48:03:d1:49:
db:d4:fd:19:ae:73:2a:d5:c2:9c:78:41:04:02:e8:
32:6d:2d:52:59:57:3b:c3:1a:90:b2:6d:02:6c:00:
f8:d4:86:6b:a1:9f:fd:c2:91:cf:4f:e6:51:43:49:
63:84:3e:d2:4d:3c:b6:80:e0:36:a5:76:aa:cc:86:
82:00:21:61:f6:ec:4e:86:26:66:86:a8:cf:fb:c0:
f4:53:5a:95:79:fd:77:13:27:3c:e8:91:dd:42:7b:
c7:1d:98:51:37:f7:02:59:00:76:e2:7e:43:da:a6:
83:64:e5:a3:0c:1a:46:21:b2:13:10:60:96:14:d7:
86:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:77:D6:CA:A9:F3:5B:15:F8:7F:F7:B6:75:87:F2:4A:27:F6:63:26
X509v3 Authority Key Identifier:
keyid:40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:8e:d0:a4:91:9e:8c:aa:a2:d3:91:de:b2:ca:d8:f9:ef:9d:
86:64:18:81:f2:50:bc:54:70:0e:23:42:f0:20:d0:b2:b1:58:
10:2b:f1:53:b2:42:ad:b6:1d:4c:6d:2c:62:de:17:4e:77:ab:
53:28:02:5f:59:ca:cd:74:e2:c9:62:dc:59:ae:29:20:f9:9e:
c4:ad:9a:66:d7:2d:ef:e3:7f:f0:8f:c8:1a:e1:9f:b7:96:e4:
0b:c7:4f:5c:f7:7f:46:44:7f:28:d2:f3:b4:b3:37:d9:df:9c:
88:16:69:ab:0f:6a:d7:bb:8c:98:d9:d5:7c:02:b7:09:3b:c5:
41:11:ed:8d:ef:d0:22:e3:7c:c9:68:9e:5f:7b:4a:c4:99:0d:
3a:6f:cf:6b:e4:f6:37:55:e4:e1:b0:b9:6a:b3:5e:4e:94:de:
fb:15:ca:c9:30:bc:ba:c3:10:6c:67:d4:eb:8b:bd:1e:74:87:
df:ef:72:5a:8b:54:a3:b7:de:2b:7c:b1:83:10:f3:5b:e8:23:
f2:a9:75:58:74:35:bf:db:38:00:7e:a4:58:97:44:c6:7d:3a:
85:61:a6:e9:15:1b:21:2c:08:b0:97:d5:46:25:05:44:16:f6:
04:7c:14:1c:61:06:c0:cb:dd:55:1e:82:c9:07:c7:df:c4:16:
d0:26:a2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 21:06:31 2025 by rpki-client