Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
File: QclkksAECK1U1zDA62KeOgtQ2A8.mft (raw, json)
Hash identifier: IbQLe/iuq+A5pLLLASl6zFV9f4N+acluau7lbgGahME=
Subject key identifier: BA:72:55:BC:01:9A:B2:68:77:61:47:F5:2A:05:58:71:DF:01:C2:E6
Authority key identifier: 41:C9:64:92:C0:04:08:AD:54:D7:30:C0:EB:62:9E:3A:0B:50:D8:0F
Certificate issuer: /CN=41c96492c00408ad54d730c0eb629e3a0b50d80f
Certificate serial: 01964F358E1945FAEA4594A59E08A5D8BD2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
Manifest number: 0185
Signing time: Sat 19 Apr 2025 18:00:31 +0000
Manifest this update: Sat 19 Apr 2025 18:00:31 +0000
Manifest next update: Sun 20 Apr 2025 18:00:31 +0000
Files and hashes: 1: EpeCh_PHvVwvR1jtfMGPQVrMsrQ.roa (hash: XKVWPCeZYhwf3z1v0hUSbNv7x/hm4cVMh5YcJnXqtvg=)
2: QclkksAECK1U1zDA62KeOgtQ2A8.crl (hash: p0VrJj8n7JHfbujiGSG3hfIBYM5iMsFPGvx2s3RpWs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:8e:19:45:fa:ea:45:94:a5:9e:08:a5:d8:bd:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c96492c00408ad54d730c0eb629e3a0b50d80f
Validity
Not Before: Apr 19 18:00:31 2025 GMT
Not After : Apr 20 18:00:31 2025 GMT
Subject: CN=ba7255bc019ab268776147f52a055871df01c2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a4:84:f6:47:e9:a1:e4:d2:f8:2e:c1:3b:e3:
bc:87:ea:89:11:c1:df:94:19:c7:f6:55:14:05:af:
81:1c:0a:1a:75:ba:84:b9:04:6b:5f:7f:0a:8e:a9:
cb:5e:84:ca:ef:f4:b4:32:16:ee:8c:8c:1f:aa:7f:
44:5d:1d:fb:38:c7:9c:8c:b4:06:e5:70:8f:0f:14:
f2:88:a2:5d:f5:b9:63:50:8d:46:d3:f8:6c:54:49:
0b:69:9d:40:4c:56:e3:e9:bc:fd:d8:f3:18:fa:57:
3d:0f:38:21:25:05:2a:24:06:9c:0e:3a:da:94:8f:
b6:86:5d:72:7a:12:f8:bb:18:f5:9f:d8:68:ea:e6:
ea:20:2b:13:94:82:42:ca:a2:80:39:44:59:ec:d6:
89:f9:05:3d:2c:af:1c:b8:12:74:6c:56:f1:94:a3:
c9:86:32:ed:52:8c:6c:65:fa:fb:10:db:5d:b0:d6:
eb:18:52:77:02:e0:a8:e2:83:45:be:e3:a1:25:15:
36:c7:7e:f4:ba:95:a4:65:be:26:15:24:88:c9:e9:
2d:82:77:3e:2e:29:4d:92:55:65:06:b4:14:63:f0:
d8:f3:87:59:9f:fd:67:20:bb:a6:d3:a1:d8:2f:a3:
0e:17:19:11:be:15:e2:56:c9:9c:97:dd:64:7a:13:
2a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:72:55:BC:01:9A:B2:68:77:61:47:F5:2A:05:58:71:DF:01:C2:E6
X509v3 Authority Key Identifier:
keyid:41:C9:64:92:C0:04:08:AD:54:D7:30:C0:EB:62:9E:3A:0B:50:D8:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:3d:23:c5:2a:97:94:e9:da:35:e1:3a:22:4e:ef:4a:84:6a:
b4:58:0a:81:5d:29:31:04:0d:f9:2f:58:16:20:6d:11:fc:a1:
39:a7:81:73:d4:a9:a0:ec:23:26:a3:50:8a:1f:cd:9e:92:45:
68:9f:34:66:26:28:1e:bd:08:35:b8:96:f4:0c:aa:e9:cb:e5:
6c:fc:0e:33:52:1e:0d:15:25:46:5b:3c:ce:1a:77:9d:fa:01:
ef:1f:90:9a:c7:39:a8:58:03:d0:4e:1f:f7:f6:d6:a4:43:df:
6c:bf:b7:95:50:7a:31:ee:10:28:fb:ee:2c:7a:11:46:8a:7f:
04:2a:7c:c1:f5:0b:63:12:d4:61:7b:82:60:7f:03:b7:15:8b:
e8:8b:2c:40:a0:c8:91:63:7b:75:0d:b4:88:c0:c8:f1:0f:9a:
5e:63:6a:22:95:f5:41:82:e1:51:ef:4b:7b:77:da:1c:28:4a:
7c:9f:70:e7:bc:e7:3c:53:f7:b3:2c:bc:5e:84:69:9b:5c:a9:
c3:65:46:be:5f:fb:bd:3e:9b:a8:a7:49:6d:3d:e4:6c:6a:4e:
43:ba:a9:e5:8a:fc:e1:ac:71:a2:d3:73:ac:20:4b:ba:4c:b6:
75:73:2a:a7:b3:c2:31:72:99:5e:d2:1f:b5:d1:e9:24:59:e7:
77:4c:9d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:05:12 2025 by rpki-client