Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
File: QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft (raw, json)
Hash identifier: lDdkvjKoW+nPecXB6KU9OT7qterNZVLxUcB4nHh0o8w=
Subject key identifier: D9:9E:41:00:5F:5B:6F:1F:63:B7:B5:E0:44:BA:CD:CB:D5:D2:E4:C3
Authority key identifier: 41:03:29:20:68:EA:3F:B8:5B:C5:89:53:79:E2:0E:DB:D0:BC:65:06
Certificate issuer: /CN=4103292068ea3fb85bc5895379e20edbd0bc6506
Certificate serial: 019652DB35CA03DEFFD30253F1C25716E84D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
Manifest number: 11A9
Signing time: Sun 20 Apr 2025 11:00:19 +0000
Manifest this update: Sun 20 Apr 2025 11:00:19 +0000
Manifest next update: Mon 21 Apr 2025 11:00:19 +0000
Files and hashes: 1: QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl (hash: xkm7c2hF/I3ePifq7zhLrT+mMMmQCAKxS2+iqnonJOQ=)
2: ukNphFAe4cX3Zc-R26t80LykhN4.roa (hash: xXUTisVftHwOaoab4KLxi4q4wlsyXqJydXF1SwvOD0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 11:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:35:ca:03:de:ff:d3:02:53:f1:c2:57:16:e8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4103292068ea3fb85bc5895379e20edbd0bc6506
Validity
Not Before: Apr 20 11:00:19 2025 GMT
Not After : Apr 21 11:00:19 2025 GMT
Subject: CN=d99e41005f5b6f1f63b7b5e044bacdcbd5d2e4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d9:77:49:9f:9d:d2:0b:26:5d:a5:9f:ea:00:
0d:b8:a7:95:ef:ff:f3:36:0e:e0:a4:ec:08:32:aa:
00:f0:7d:6c:35:d4:5c:53:62:fd:01:cb:a9:46:92:
8b:ca:4d:fd:eb:f1:58:ca:0a:ea:54:c6:92:85:39:
4b:5a:af:d8:c6:ec:31:c5:cf:7b:c1:b5:c6:aa:bd:
32:33:4d:11:e8:bd:e5:c0:56:60:10:f6:04:db:db:
00:0e:ea:75:a0:1d:5d:01:03:a9:8e:41:3f:79:3d:
d0:e5:78:71:37:73:5a:08:3d:75:7b:c0:5f:af:7a:
c7:c8:68:37:fe:ca:d8:1f:08:19:ba:62:9a:72:9b:
17:b1:c8:36:ff:90:3f:62:26:f3:10:1d:97:9e:53:
74:9e:7e:0e:8d:2b:9c:62:eb:31:f9:4b:54:6c:e1:
bb:63:1e:4a:7e:84:78:2c:6d:0a:da:b7:7f:c3:09:
84:3b:34:35:30:80:61:84:26:0b:e8:ce:f5:ce:72:
e0:03:8a:1d:5f:c8:17:c8:10:35:60:fb:b0:d3:54:
4d:5e:4d:4e:90:df:44:eb:a7:a7:3f:2c:fc:f8:e5:
92:2d:5b:56:06:fa:f0:c8:02:b1:c6:33:aa:2d:86:
43:ca:df:7a:01:f7:77:76:46:84:06:51:62:f5:b1:
81:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9E:41:00:5F:5B:6F:1F:63:B7:B5:E0:44:BA:CD:CB:D5:D2:E4:C3
X509v3 Authority Key Identifier:
keyid:41:03:29:20:68:EA:3F:B8:5B:C5:89:53:79:E2:0E:DB:D0:BC:65:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:98:07:a9:83:01:90:13:f9:db:30:63:e2:01:c0:71:b0:80:
3e:13:04:ba:a0:eb:c4:fe:03:10:da:cc:25:bc:cf:17:92:db:
e8:a2:10:42:35:49:3d:bb:d6:53:9a:3b:65:48:b1:ce:26:98:
07:5c:c1:3a:93:a1:fd:f9:75:c9:cd:81:ef:e0:e8:b4:85:5a:
42:a7:4b:97:31:fe:2d:43:34:36:ca:85:b7:4a:84:22:5b:33:
12:19:95:c2:60:4d:d4:60:2f:5f:57:27:85:52:81:c8:96:d5:
18:01:4d:96:52:02:24:2b:94:2b:80:c5:68:04:86:b3:ef:32:
11:28:c5:b8:d1:4e:69:fb:63:77:48:5e:b6:1f:06:fd:bc:37:
36:ce:f9:2c:99:47:57:f6:77:59:f3:41:f4:9f:c6:61:19:03:
3b:a1:fb:9b:37:ab:32:05:94:1e:a2:c1:44:1a:1a:ac:ca:94:
e0:ac:7c:5b:af:a4:99:85:51:62:bf:1b:5f:2c:76:82:ae:60:
b1:0e:f8:5a:1b:99:1b:53:6e:2b:7f:7f:89:c1:3a:e5:2c:ce:
9a:cc:17:5b:95:d3:52:81:05:a0:6f:28:52:2c:a2:b8:96:12:
ee:a3:1c:a8:71:a8:71:1a:22:2c:9b:66:45:36:d7:a7:9e:e5:
28:d5:3f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:55:21 2025 by rpki-client