Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
File: QSHH-wQVOCnZahwDjw33FNpZVAQ.mft (raw, json)
Hash identifier: ut4YQkCOyoIunurLYycS+bZOxPCWy5n9pQWook3lIyM=
Subject key identifier: D9:84:85:AB:2C:DB:0E:B7:1B:69:3E:DB:43:15:53:E6:BD:16:D8:63
Authority key identifier: 41:21:C7:FB:04:15:38:29:D9:6A:1C:03:8F:0D:F7:14:DA:59:54:04
Certificate issuer: /CN=4121c7fb04153829d96a1c038f0df714da595404
Certificate serial: 019656139E4D446D930B31DE28B78074CAC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
Manifest number: 1396
Signing time: Mon 21 Apr 2025 02:00:48 +0000
Manifest this update: Mon 21 Apr 2025 02:00:48 +0000
Manifest next update: Tue 22 Apr 2025 02:00:48 +0000
Files and hashes: 1: QSHH-wQVOCnZahwDjw33FNpZVAQ.crl (hash: sbDVeWl6SUrb5dz1PK5z99VEEKIOHy/xAAR9vjt6dsU=)
2: mjDoFz4eHyi_j3f9O8pUYP3JsY0.roa (hash: 2+YlsZR42nnbb9KjpTYXIUqIvFdsI2xFIsW6avZLprs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:9e:4d:44:6d:93:0b:31:de:28:b7:80:74:ca:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4121c7fb04153829d96a1c038f0df714da595404
Validity
Not Before: Apr 21 02:00:48 2025 GMT
Not After : Apr 22 02:00:48 2025 GMT
Subject: CN=d98485ab2cdb0eb71b693edb431553e6bd16d863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a4:59:fa:79:1b:20:8f:0a:52:dd:3d:3f:f4:
12:8f:b1:30:04:48:f0:b0:e5:cb:9b:e1:c0:f7:d6:
aa:d2:d6:0a:76:fe:0d:5b:b9:b6:f8:1e:92:14:d8:
4c:c4:0f:b8:90:8a:2d:c4:52:d3:d3:53:56:81:bf:
b6:cc:b6:ad:7e:80:48:ea:6d:fc:8d:93:ef:68:2a:
97:e8:71:ac:5a:52:b8:fd:b2:22:58:57:47:44:70:
33:36:41:75:37:3e:ea:fd:1c:55:b7:ea:75:1e:2a:
09:87:16:d3:1c:f1:cf:84:6f:7f:f9:18:d8:95:4d:
1b:33:59:10:b9:80:d3:4f:b1:69:dc:4e:c6:6b:0a:
d9:7c:ba:12:a1:73:25:6b:96:99:9a:b5:51:43:b6:
7c:b0:9e:72:76:af:c3:15:34:94:02:b1:35:27:94:
99:88:7f:54:60:69:8e:d6:3a:85:75:db:fe:d9:93:
ad:88:5d:15:2d:8f:c9:ec:fa:c9:27:24:df:c6:9d:
6b:e0:9c:07:cf:dc:d9:1e:04:1e:5f:f5:1f:db:db:
43:57:d0:bb:9b:a8:81:5d:50:ed:af:63:f7:b3:cc:
25:1c:8b:75:01:87:51:60:4f:84:89:cb:20:82:1e:
5b:86:93:f8:4e:3f:29:97:dd:d9:63:0e:a1:b0:b6:
97:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:84:85:AB:2C:DB:0E:B7:1B:69:3E:DB:43:15:53:E6:BD:16:D8:63
X509v3 Authority Key Identifier:
keyid:41:21:C7:FB:04:15:38:29:D9:6A:1C:03:8F:0D:F7:14:DA:59:54:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:82:6f:64:f4:aa:08:9b:e7:95:d6:09:02:37:f3:1d:fe:c7:
99:ab:b9:a7:da:cb:cd:c5:4a:94:e6:b8:73:bf:b8:ac:65:ba:
c8:ab:99:11:a8:6b:a9:e1:a0:21:0f:42:20:4a:7c:81:07:1f:
79:4b:03:ea:c5:92:fc:83:bb:43:dd:93:7b:cf:43:5a:8c:5b:
4f:42:b0:26:d7:52:e1:1b:fe:f1:60:51:40:cc:d5:8c:fa:fd:
eb:82:2f:cb:60:2d:ea:5c:c1:f4:9e:81:de:74:c6:ed:45:0f:
f2:b0:ea:bf:33:2a:08:bc:49:2d:b0:1f:76:f0:e5:32:bc:26:
a9:8e:16:4e:7b:d4:fc:13:61:1c:8c:a3:fb:89:52:2f:3d:b3:
f6:ed:0f:37:2a:38:74:56:4c:60:79:ef:71:a7:dc:3a:12:5f:
65:17:f7:c5:7a:ac:5b:4f:db:a6:6d:63:53:c6:9a:ed:11:82:
0d:53:72:92:6d:5e:fc:c9:e5:2e:d0:5c:16:18:18:a7:33:07:
fc:2e:fb:8b:ef:76:61:29:63:8a:ca:27:4f:f6:cd:8e:26:3b:
ae:16:aa:4b:04:23:17:17:f9:d6:bf:a8:99:9d:fc:65:99:eb:
c3:eb:27:08:07:f0:66:bc:74:85:99:d5:95:a6:48:b2:09:17:
05:2c:57:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:48:30 2025 by rpki-client