Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
File: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft (raw, json)
Hash identifier: C5SRvMzasr6EJD+tX70TBCCj+OubRKrBJdWA5VR865g=
Subject key identifier: 95:E4:AC:0D:F8:14:B4:FA:8A:CE:27:AD:CE:5A:33:A4:E3:57:E8:FD
Authority key identifier: 40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
Certificate issuer: /CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Certificate serial: 0195903D4FB38EB729AF275E8EBEA8A74764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
Manifest number: 0D6F
Signing time: Thu 13 Mar 2025 16:01:31 +0000
Manifest this update: Thu 13 Mar 2025 16:01:31 +0000
Manifest next update: Fri 14 Mar 2025 16:01:31 +0000
Files and hashes: 1: 2NcvU0UpvnNamvYiw-Ck0PihIIs.roa (hash: tZbbyWjYNX8D1xoSb7TrcdUI4Ec9SAHjICqo4Qu+A30=)
2: 4Vo1LbgSg-781dFksjaURY1r5lM.roa (hash: cGkOqX+2Vt3J4A41hGsuYT10AGm/PDPU84x1eGxgeOc=)
3: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl (hash: y3E9iOpuFl6znk2/VXbsNtkiPKln7AI8f1KcBbaq5qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3d:4f:b3:8e:b7:29:af:27:5e:8e:be:a8:a7:47:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Validity
Not Before: Mar 13 16:01:31 2025 GMT
Not After : Mar 14 16:01:31 2025 GMT
Subject: CN=95e4ac0df814b4fa8ace27adce5a33a4e357e8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5b:0d:a4:17:8f:ba:8e:da:74:ef:d6:18:37:
82:ff:bc:3e:cf:61:aa:c7:a8:21:90:7f:7a:62:3f:
5b:b8:4f:ea:13:ab:be:00:97:a3:be:f3:36:09:56:
7e:c3:ad:76:a4:44:29:74:f4:8d:cc:90:b4:75:0c:
4c:22:8c:35:98:de:4f:9f:39:7f:be:3d:bf:db:f3:
c1:23:69:90:f0:b7:bf:a0:44:16:a9:b1:e1:58:c8:
30:20:93:c3:b7:32:37:06:34:51:21:28:28:f3:89:
e8:8e:c0:0d:89:e4:d1:20:c6:ed:a4:f1:3a:7d:19:
3a:99:41:69:be:19:ff:a5:b0:e8:d9:67:c4:66:f8:
8d:8b:aa:a0:87:3d:90:6a:09:27:74:cc:e6:34:66:
a3:de:f6:d1:99:a9:b5:16:86:bc:8f:a1:1c:10:ab:
0a:2e:37:c4:1a:34:61:8e:d2:50:bb:d6:67:f8:ce:
24:ef:23:74:d2:36:a7:6e:d8:ed:b5:d0:b4:02:3c:
3d:66:d1:44:bd:d9:ed:60:37:5c:c9:b5:be:87:95:
50:06:54:a6:41:39:d4:c5:08:7a:d0:cc:68:d9:fe:
c2:8b:f9:ef:8e:a1:cf:b1:d9:ff:2d:95:04:e3:7a:
b2:67:3c:23:6e:52:f0:ce:c8:32:61:8f:36:a5:80:
f0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E4:AC:0D:F8:14:B4:FA:8A:CE:27:AD:CE:5A:33:A4:E3:57:E8:FD
X509v3 Authority Key Identifier:
keyid:40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:88:57:a2:bc:6b:3f:bc:8c:68:2c:0c:26:ad:b5:3f:d0:cd:
ac:e7:de:6a:d2:3b:53:df:47:2e:a0:0a:b4:4f:9c:18:c6:29:
8d:59:cd:99:3a:56:df:d1:60:09:9e:86:b8:94:7b:90:75:3c:
9a:ff:d9:67:98:88:76:67:65:d1:f1:f1:10:4b:b8:dc:74:ca:
7a:e5:93:82:2d:6d:98:47:21:2f:dc:0e:4d:f1:8e:f5:c7:d9:
33:15:ea:94:15:ad:1e:fa:ae:c6:3b:45:09:5e:5e:6b:65:ec:
8f:d6:3d:c6:b9:8e:a9:fd:f5:e7:7f:c7:67:2f:d4:ca:86:9a:
cb:a4:9b:d1:5f:2c:8a:13:1b:16:c6:1c:aa:44:6f:c3:d1:d5:
dc:5f:cd:24:d1:02:23:9b:f1:55:d9:40:5d:62:be:4a:20:49:
c9:3d:70:f8:e3:51:a8:39:95:3f:9a:60:cd:e4:b1:e3:62:cf:
2e:67:fe:3a:79:4e:c5:11:86:7f:fb:f5:3e:13:4f:c9:02:dc:
ee:1f:7d:02:95:55:4f:b3:3c:78:7e:02:ab:5c:b2:fb:b9:03:
89:ad:c8:91:88:01:5c:7f:02:69:9e:dd:b4:99:ca:ab:09:74:
21:24:e3:3f:44:31:c6:8a:cc:c7:a8:54:6b:1a:03:70:64:6e:
be:d4:cb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:48:02 2025 by rpki-client