
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
File: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft (raw, json)
Hash identifier: zksrYCbuEoBX9RnhPAGbDuZk/Q1QLU+0OoFChTotVMM=
Subject key identifier: 6A:E5:5F:DA:28:6A:6E:E4:F3:E9:8E:69:1A:6A:CD:81:01:3A:FE:73
Authority key identifier: 42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
Certificate issuer: /CN=4200982284a050d941dbebbd04b5d0c914f635b7
Certificate serial: 01963207AE149ED47E47D037C37794A35AF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
Manifest number: 02B6
Signing time: Mon 14 Apr 2025 02:01:26 +0000
Manifest this update: Mon 14 Apr 2025 02:01:26 +0000
Manifest next update: Tue 15 Apr 2025 02:01:26 +0000
Files and hashes: 1: 0moQdaHf0K44uNdLnoszN_NLZl4.roa (hash: zGziV3K+6liMksPEZN4lWjEoRYfjKPi10ixQL7nMxfI=)
2: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl (hash: RXdeWP4NCitkZm5TxHeIaFb+Nt1Cf3qb8Kfj/5/Xbs0=)
3: nz1XOf28Ogcs8fiWug2xbFcdTSI.roa (hash: ztlz9ATge0wUo5eGVXQllv/BlyjO+lbBdkDSEy3I//E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:32:07:ae:14:9e:d4:7e:47:d0:37:c3:77:94:a3:5a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4200982284a050d941dbebbd04b5d0c914f635b7
Validity
Not Before: Apr 14 02:01:26 2025 GMT
Not After : Apr 15 02:01:26 2025 GMT
Subject: CN=6ae55fda286a6ee4f3e98e691a6acd81013afe73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9c:3d:98:a2:11:4e:0a:ad:b9:da:c9:0f:0f:
d4:ea:0d:21:8e:69:7d:e0:68:ec:61:31:d1:58:35:
c4:25:b0:91:b4:99:4a:95:54:86:39:68:3d:56:6a:
75:71:c8:dc:0f:cf:6c:7e:8b:7a:0f:cf:20:88:9e:
d8:59:a6:d2:38:90:5c:e2:5e:85:a8:74:8b:63:de:
d9:eb:22:e3:7d:3c:14:92:8a:b4:4a:d0:57:84:81:
30:fc:c9:e5:2a:db:e6:eb:96:b2:0b:58:e7:03:f9:
eb:1f:ff:f2:76:2d:97:6a:5f:8f:1a:69:b1:63:b4:
f3:d2:5d:1a:53:d7:ba:f6:62:0a:f4:06:d3:63:b3:
d2:95:11:78:74:af:e0:61:da:71:55:46:f0:b6:dc:
69:b0:b0:48:ad:39:1a:77:91:07:7f:f3:70:31:8e:
97:f8:c2:cc:0f:8a:12:5c:b3:c0:27:b7:11:d1:a2:
7e:41:d9:2e:cf:6f:39:2a:02:cd:1b:f8:1b:07:96:
78:79:13:25:ea:34:f2:67:af:51:c0:4e:11:14:1f:
2a:ba:9a:60:42:e5:22:2a:9b:51:f0:a4:f0:f2:0a:
59:dc:4d:d3:45:42:91:4b:f0:f1:ad:08:7e:cc:f8:
b2:c3:70:f6:df:d5:87:73:40:66:ba:ad:c4:cc:90:
53:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E5:5F:DA:28:6A:6E:E4:F3:E9:8E:69:1A:6A:CD:81:01:3A:FE:73
X509v3 Authority Key Identifier:
keyid:42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e2:4b:3b:40:83:66:97:9a:88:6f:ec:fb:7e:9d:72:37:eb:
c8:0a:87:1f:a4:41:87:7c:8b:9c:bf:62:3a:94:50:19:36:58:
7e:59:fa:bc:5e:7b:25:26:7a:f1:61:b6:59:cd:29:c0:82:4a:
57:11:b1:f1:fb:d7:a7:94:99:88:57:e6:10:2f:f4:5a:72:09:
13:7a:ea:ac:b4:92:76:5b:78:34:59:ff:58:68:11:6e:dc:02:
08:6f:dc:d4:88:a6:6c:03:f9:46:af:3f:f0:b3:38:8e:92:d5:
97:a0:5d:00:e6:50:d7:ea:f6:3f:39:58:70:ca:5c:16:1b:0d:
f4:b4:ff:67:75:1f:ba:c9:af:c1:34:53:5b:71:a5:05:05:93:
a7:50:8d:25:93:e6:c9:b0:a5:12:cd:9d:5e:1a:ec:0e:e8:f8:
f5:c6:52:73:e4:9d:c5:82:86:e1:61:f6:f5:bb:1d:1e:37:47:
05:44:13:35:cc:5e:d2:a4:e9:ae:72:99:58:f4:f4:ef:ee:bd:
6e:73:28:07:28:90:b7:58:94:1a:9a:65:dd:44:2c:fe:e9:13:
be:5f:bf:8a:a8:e1:db:9f:48:f9:5d:3a:a8:a8:52:16:24:b4:
a0:b9:5f:12:d8:b5:ad:21:3b:16:10:6e:7f:0d:d9:98:ce:e8:
d5:13:1f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 10:32:47 2025 by rpki-client