Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
File: QNiN23rtct6j_41pztZTGlJ5Sqc.mft (raw, json)
Hash identifier: uRgXQ5OzuxrFpuwnK9gIhHfFBSYCA6ZVlyGfb+Js18c=
Subject key identifier: 54:18:54:7E:49:79:20:6E:85:62:2D:E4:5F:82:8D:23:C8:F1:14:69
Authority key identifier: 40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7
Certificate issuer: /CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7
Certificate serial: 0196586FB259BE74FE2947C7AB8149A78A92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
Manifest number: 10B6
Signing time: Mon 21 Apr 2025 13:00:36 +0000
Manifest this update: Mon 21 Apr 2025 13:00:36 +0000
Manifest next update: Tue 22 Apr 2025 13:00:36 +0000
Files and hashes: 1: NNmIvWC2aG45EdXCFQyfOgMs8UM.roa (hash: dgfGD7cFEmQYML/LCfaIOvrAjQWUEzucY+z8ExOp2jM=)
2: QNiN23rtct6j_41pztZTGlJ5Sqc.crl (hash: B2PysyNOo0FGQR1g49BnrigTDkzhFekcVnncYSP8LIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:b2:59:be:74:fe:29:47:c7:ab:81:49:a7:8a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7
Validity
Not Before: Apr 21 13:00:36 2025 GMT
Not After : Apr 22 13:00:36 2025 GMT
Subject: CN=5418547e4979206e85622de45f828d23c8f11469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:63:94:4f:d8:e4:92:31:c1:01:5c:fe:0e:46:
3b:8d:2e:c9:10:be:21:82:4f:fc:d2:07:c6:eb:a9:
8d:66:2a:6d:de:ba:bb:17:93:bc:b9:43:ed:36:54:
a1:07:aa:dd:80:fe:9f:ce:e7:05:b3:d2:cf:dd:e8:
12:4b:90:6b:a2:4d:2a:e6:80:5d:45:99:d3:19:98:
c3:41:35:35:17:64:3d:52:f6:a6:82:70:e2:e7:c0:
88:d1:3d:e2:cc:c9:46:da:61:d1:a4:22:a2:f1:06:
9b:b5:46:02:56:79:6b:74:a0:63:1c:3c:b9:01:04:
13:df:a9:2d:ff:86:32:b1:7a:5d:59:b8:74:7b:d3:
58:d5:19:c0:dd:2a:3b:f3:02:f6:5a:7f:42:ed:0d:
b6:24:05:82:3a:b4:bf:8f:e5:f4:ab:61:9b:c6:a2:
75:98:4a:35:c7:14:1f:dd:ef:48:3b:3c:21:63:4c:
a7:85:e1:c0:8d:41:bd:e9:8b:24:68:97:7c:b4:80:
32:a7:1c:5b:30:13:ca:cb:db:e4:11:47:fd:3a:aa:
f0:83:d6:f0:96:8a:1d:d5:13:62:d3:36:fa:bf:11:
27:ce:b6:b2:fb:33:d9:98:94:99:91:ce:86:15:46:
68:d0:d9:84:51:d4:0a:e3:7d:f8:a9:42:65:f1:2d:
7a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:18:54:7E:49:79:20:6E:85:62:2D:E4:5F:82:8D:23:C8:F1:14:69
X509v3 Authority Key Identifier:
keyid:40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1d:9b:ad:62:84:e6:94:94:29:63:1b:3b:dd:e3:01:88:f1:
c0:28:a1:91:4f:2c:88:64:07:e9:4b:f4:f0:6d:0d:f9:ba:ae:
c0:de:16:44:b4:97:a8:54:f0:53:9e:36:c4:fe:69:59:76:92:
a3:d0:0c:7f:9e:a4:66:22:6e:39:4b:7e:1d:2b:ed:18:60:8e:
cd:14:22:4c:dc:fd:30:f0:d0:71:c2:df:7a:c8:d9:d8:7d:2e:
5c:d7:8b:9d:ac:22:10:1e:1b:44:5a:ec:d8:c5:89:43:fa:8d:
94:00:9c:d1:84:2f:9b:f9:e3:7c:7a:4f:8d:6f:a7:41:0c:ba:
c8:07:ac:68:d1:74:a5:36:54:20:a8:60:92:c5:d9:d8:af:08:
d2:dd:12:ab:ed:df:f6:9b:de:f2:31:a4:ea:21:56:06:14:ec:
17:c5:9e:4b:32:02:85:bf:48:a4:93:b6:be:ef:74:ee:83:67:
14:27:4b:17:83:7e:5f:ec:ce:1a:7a:5f:2e:0c:5f:bc:31:a9:
8a:4b:83:a2:4e:a2:33:df:4a:d3:17:36:0f:ee:99:de:37:bc:
69:fa:8b:71:31:2c:cf:f9:33:9b:c2:00:37:96:bd:03:45:5a:
9f:9d:50:17:68:5b:53:81:c5:59:a2:68:0a:25:e4:af:51:0a:
ce:c2:f9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:16:18 2025 by rpki-client