Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
File: QGqSJQwoWA8q1MwcNXsColp5DPc.mft (raw, json)
Hash identifier: l2EUKbAGy1M0fCaEgt3JIchNGxyOv+Q5Bn9UmLt9SYk=
Subject key identifier: DB:72:56:49:19:99:EE:35:EC:46:16:24:87:53:3F:0E:98:90:8A:20
Authority key identifier: 40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
Certificate issuer: /CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Certificate serial: 01962B2A4F8EAEAED897DBEF30E6EA50180A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
Manifest number: 14EA
Signing time: Sat 12 Apr 2025 18:01:55 +0000
Manifest this update: Sat 12 Apr 2025 18:01:55 +0000
Manifest next update: Sun 13 Apr 2025 18:01:55 +0000
Files and hashes: 1: QGqSJQwoWA8q1MwcNXsColp5DPc.crl (hash: kX7h8RobWfJ5XJ7JvP6Wu/Fx8os9+Xk5EFu3CdN2VpE=)
2: osrkqaQb3qx2EG4vPDrSx-jUbRs.roa (hash: 60lpTHLn4dLpnmjc421kdUFig6Uy9lDHTrD8OxkZHo4=)
3: xkbe7-bpi_soiL6y9FjVY-pZjq4.roa (hash: DD/O2GJZO7TOSqwXXJo222/YwW4YcV/75ci14nBdOpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:2a:4f:8e:ae:ae:d8:97:db:ef:30:e6:ea:50:18:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Validity
Not Before: Apr 12 18:01:55 2025 GMT
Not After : Apr 13 18:01:55 2025 GMT
Subject: CN=db7256491999ee35ec46162487533f0e98908a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b2:17:f0:5d:db:1d:3f:61:d9:c3:d0:e6:3b:
2b:42:f9:7a:04:fd:8f:79:05:17:84:42:ea:4f:04:
79:8d:6b:44:04:ec:01:df:4c:3a:ec:d0:a4:20:ea:
d4:70:57:de:88:9e:fc:29:dd:a4:3a:a2:69:1f:6b:
8a:07:88:89:1f:dc:9a:a2:83:01:1e:2f:0a:0e:e7:
26:30:09:55:0f:c2:7f:d8:ed:3f:24:a5:20:a4:71:
4c:18:37:85:75:4b:87:50:6c:72:11:54:a2:f9:ed:
35:70:68:9e:01:58:d4:aa:5f:3c:8a:37:a8:f0:98:
54:bc:d3:60:03:d5:b9:c5:e1:35:2b:2c:08:c8:1a:
8f:7e:e8:98:45:32:4e:92:0d:f6:7b:2a:12:86:36:
5d:09:b0:db:10:b2:c8:ce:fb:03:92:e8:4a:3a:c0:
b0:65:20:51:b7:e6:8a:3c:76:1d:89:25:96:e8:8a:
29:f6:09:69:87:b8:3b:45:e4:91:a9:22:5b:ce:bd:
8a:1a:87:5a:a6:5e:39:e4:e2:08:6e:78:3f:25:60:
e0:c1:4d:1f:00:9f:82:64:bc:4f:bb:78:cf:c5:d9:
fc:6f:95:18:e3:70:a6:00:41:c0:73:29:47:d9:7f:
66:81:29:c0:d5:ee:84:f1:2a:80:c9:23:b1:fe:85:
26:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:72:56:49:19:99:EE:35:EC:46:16:24:87:53:3F:0E:98:90:8A:20
X509v3 Authority Key Identifier:
keyid:40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c9:38:a8:80:0c:4e:bb:72:08:93:12:7d:bc:0e:1e:56:ed:
1f:f3:72:ad:46:84:1d:14:e5:7a:16:2f:8e:8f:04:52:37:8a:
dd:a3:e1:0f:fa:87:a3:e5:42:b1:3a:d2:d2:0c:21:a1:af:f9:
7b:9f:64:14:4d:b9:49:e9:94:79:34:c0:51:2a:a7:ca:5e:91:
20:b6:95:87:83:84:55:84:33:59:34:f4:d4:ee:b2:54:67:38:
d9:d3:08:4e:a1:d0:86:0b:26:19:4e:a8:ee:07:41:dc:55:39:
a0:3f:ee:c8:1b:78:b2:76:b4:10:63:9d:24:99:23:50:9b:51:
ad:5d:c6:91:16:1d:6d:4e:88:a0:3e:98:21:0c:6f:c4:48:46:
30:e1:b3:4e:86:a0:80:52:82:d3:75:95:fc:12:e0:69:de:1f:
79:0e:d3:cd:62:44:0f:d3:e3:8a:0a:ee:44:22:8e:da:e5:f5:
6e:ca:1f:2a:af:97:68:9d:84:3d:13:22:9e:83:66:13:d0:3b:
6f:dd:55:97:27:9f:9a:1e:0f:27:2f:a9:86:d5:a2:a4:c7:76:
1a:6e:6d:91:7a:a6:90:5a:97:fb:de:a9:b2:43:9e:7f:ec:65:
18:4d:52:f8:de:41:03:f9:c0:48:e2:98:ba:7a:d1:34:95:99:
4d:a3:ac:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:39:59 2025 by rpki-client