Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
File: QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft (raw, json)
Hash identifier: YsKxHU/rJ4/GzaCB0ukiwt0dOvRmXMycBnCNVre/eHA=
Subject key identifier: 8B:2A:5D:AB:A0:20:99:9B:C8:E2:4A:67:9A:9A:DD:91:4E:DD:11:03
Authority key identifier: 42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3
Certificate issuer: /CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
Certificate serial: 01958B16B12198085D46B39830BB1C4494D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
Manifest number: 07B5
Signing time: Wed 12 Mar 2025 16:01:14 +0000
Manifest this update: Wed 12 Mar 2025 16:01:14 +0000
Manifest next update: Thu 13 Mar 2025 16:01:14 +0000
Files and hashes: 1: QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl (hash: 38gwlvP7rOUmorG69Vtkqo+XipZ2SAunns/KXKcJDMs=)
2: _1j-vq_YcHaEMFMbb53TSNwHgps.roa (hash: FFNOOLLPGSug4NyRBtLQbxLYgOZN6JLp0mqYGuu/rHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 16:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:16:b1:21:98:08:5d:46:b3:98:30:bb:1c:44:94:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
Validity
Not Before: Mar 12 16:01:14 2025 GMT
Not After : Mar 13 16:01:14 2025 GMT
Subject: CN=8b2a5daba020999bc8e24a679a9add914edd1103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e8:99:67:ab:b8:d0:c7:ce:42:4b:51:5c:58:
80:1d:8c:2b:34:18:47:f0:2f:2b:2b:eb:fc:a7:7a:
ca:a9:fb:4b:78:65:6f:28:d9:f9:53:79:31:f6:e4:
72:a8:ea:5a:ed:b7:cf:52:95:a9:a5:f4:c9:2c:0f:
48:3d:34:7a:91:6c:66:cd:21:a4:da:c3:21:4a:0c:
88:f7:32:18:a2:7b:5b:06:c9:50:39:a0:34:65:5f:
bb:a6:7d:43:0c:49:aa:a0:35:10:02:9a:d0:c2:82:
31:30:60:47:7f:2a:16:69:46:7e:34:4f:6c:65:2c:
f3:5e:29:cf:c4:fe:86:16:54:93:8f:d8:21:65:a8:
02:d7:26:02:e8:90:f9:71:35:f5:3d:61:68:ca:93:
62:63:62:bb:35:5c:d0:7a:fd:5a:fa:0e:d7:00:8b:
9d:42:8f:60:c7:17:4a:af:54:b4:90:8e:99:4c:b6:
ea:eb:d2:c0:eb:29:d2:49:ca:e2:a6:c8:3c:3c:12:
d2:bb:5e:c0:9a:88:76:86:7a:b3:bf:34:80:32:5a:
5b:04:44:a8:91:cd:5d:88:51:8e:c9:a3:7d:97:b7:
ac:b5:96:c3:80:87:d6:5d:95:8c:56:9e:9b:ca:69:
39:5d:78:fa:99:f7:2b:92:dd:ec:00:d5:ac:74:7c:
ce:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2A:5D:AB:A0:20:99:9B:C8:E2:4A:67:9A:9A:DD:91:4E:DD:11:03
X509v3 Authority Key Identifier:
keyid:42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:09:85:53:44:38:76:fd:cc:d8:31:3c:7c:8d:86:84:ab:f6:
12:31:f6:d0:cf:47:9a:52:46:e5:d1:18:1f:d1:a5:e2:10:cf:
a3:59:90:44:8e:d4:95:e9:c2:78:f2:39:21:5d:0b:6d:ad:6c:
a3:d1:48:f0:44:54:45:a1:38:44:bb:5b:86:de:8f:60:7f:2a:
e7:8b:ac:53:dd:b4:d4:ab:03:53:01:5b:90:21:09:6d:65:87:
23:39:76:d0:8c:f5:5c:95:7c:48:de:48:01:dd:13:0c:56:65:
70:4f:0a:8a:ae:61:4d:22:78:90:56:1e:d1:9f:1c:86:4e:71:
5a:c6:85:0e:de:c0:b6:ba:9f:ee:44:51:f6:24:ba:4d:ce:57:
e0:e9:06:44:1a:82:45:f2:11:48:63:73:22:cc:eb:44:18:2e:
e2:a3:53:fa:c8:e6:77:9d:af:68:4a:41:25:89:33:e7:39:cd:
4a:34:f3:c0:09:bc:a8:07:fc:3c:ff:2f:a0:d9:4f:42:af:1a:
18:8e:ef:fb:37:14:a3:39:1d:e5:cb:e7:db:23:25:9f:71:77:
0c:72:20:fc:f6:1f:9c:62:46:11:68:89:b8:21:3e:5f:03:3d:
bb:52:19:33:de:e3:10:51:b7:8e:f0:79:1c:60:c6:dd:ca:97:
d5:aa:82:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:19 2025 by rpki-client