Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
File: QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft (raw, json)
Hash identifier: iTzD0aaByAFENV7VkVQaTr/yomAxCWmpq6z2Zx9oPTc=
Subject key identifier: 2C:38:F0:0B:E9:B3:F8:D8:CB:40:AD:FF:53:47:3A:71:D3:B7:8B:42
Authority key identifier: 43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1
Certificate issuer: /CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
Certificate serial: 01958C29420F7403EE1A1ED0F5F8C97FF102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
Manifest number: 1496
Signing time: Wed 12 Mar 2025 21:01:08 +0000
Manifest this update: Wed 12 Mar 2025 21:01:08 +0000
Manifest next update: Thu 13 Mar 2025 21:01:08 +0000
Files and hashes: 1: 1OkV1FOSt0CIRzcv_xhQZDIhaCY.roa (hash: 0nS1ugbBt4Oiv/4rCAPHlWm5w4EZo3UZ1Why6gpAxu4=)
2: KmelkdSsmbJtVWU94thK7d4v5RE.roa (hash: oIEVJa5VewYKMBXTZDUCkwziB09TzVnzHNBtgzRneDA=)
3: QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl (hash: 1kVmZfI8krw5vS02EFxfJm6FwPnFwPAeEzXOUU+MTfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:42:0f:74:03:ee:1a:1e:d0:f5:f8:c9:7f:f1:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
Validity
Not Before: Mar 12 21:01:08 2025 GMT
Not After : Mar 13 21:01:08 2025 GMT
Subject: CN=2c38f00be9b3f8d8cb40adff53473a71d3b78b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:53:45:cb:90:4e:f2:7c:86:81:16:ab:88:4c:
23:94:15:b1:ab:a7:62:32:94:59:ac:02:59:a5:10:
36:38:55:ac:9f:cd:b8:eb:99:3c:3d:a8:46:d9:82:
d7:12:e6:be:e8:e6:3a:ad:c4:be:7b:84:ce:e8:3a:
51:5a:19:70:78:f6:1e:ad:12:f5:0c:7d:d5:66:ec:
9f:35:ea:90:8e:77:59:75:3f:b9:00:16:46:da:02:
4c:f9:4b:60:48:04:f3:f7:e0:32:0c:45:b0:88:ba:
8c:21:94:21:71:9a:a2:d9:b2:00:e6:34:87:6b:8b:
4b:9d:c1:9c:2d:fc:30:55:aa:6d:61:ad:54:db:ec:
ed:52:7a:d6:64:13:e4:23:60:c7:24:88:f5:2b:ab:
f0:c0:09:e0:b1:3c:ab:89:1f:24:b4:fb:bf:76:f1:
bc:b5:00:94:e2:bf:f8:5c:13:07:3d:98:8d:d5:49:
c0:d2:fa:71:e2:65:d9:e3:2f:d8:95:7a:c7:90:9f:
7f:64:1c:f4:2b:24:4f:19:86:3b:32:46:90:c9:38:
c5:b7:15:16:07:b5:2b:9e:20:e0:34:48:3b:ed:1d:
e5:6c:26:37:95:1e:34:a0:cb:94:d8:1a:a5:24:44:
45:a9:9e:34:bb:01:42:cd:f8:70:56:d9:52:b9:73:
a4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:38:F0:0B:E9:B3:F8:D8:CB:40:AD:FF:53:47:3A:71:D3:B7:8B:42
X509v3 Authority Key Identifier:
keyid:43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:8b:da:7c:4b:db:f2:db:86:7f:9a:d5:f4:29:cb:b2:b8:3e:
57:fe:ad:75:7c:30:08:0e:fc:9b:08:3e:af:a0:bd:b1:14:6a:
93:d2:c4:91:25:14:df:4f:b5:cf:3c:86:94:49:0b:b8:a4:79:
68:63:c9:08:5d:92:5b:d4:57:83:d2:9f:58:d9:fe:99:2d:f8:
28:29:9e:03:8b:80:31:23:c1:ce:05:01:ef:a2:b2:11:2c:92:
14:4f:60:4f:d1:20:0d:4a:41:88:b0:ab:9e:56:35:ab:81:3c:
29:af:b9:6b:48:3b:6f:9c:89:cd:a2:c9:89:6f:70:22:a9:c4:
b3:17:30:9d:d5:81:c8:e4:fe:bd:54:e4:a0:b2:ee:e7:17:80:
dc:84:77:86:ad:a0:49:1e:a5:02:28:0e:d0:a7:9d:5f:e1:ab:
46:f0:00:3a:ea:37:6e:6c:b5:ec:f7:33:4d:69:c0:d5:55:5c:
dc:28:85:f1:eb:86:2c:1f:2d:82:7a:ee:58:fe:3d:fc:79:42:
7d:f1:b8:8e:fd:21:2d:ed:00:dc:bd:32:6d:4d:9f:ce:e7:7f:
4d:ea:12:58:5a:80:53:dd:c8:01:04:96:00:fb:a2:2d:15:6a:
95:0f:36:0b:2c:6a:a6:15:94:2c:e3:cb:b6:55:15:8a:65:43:
52:ab:8b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:55 2025 by rpki-client