Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
File: QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft (raw, json)
Hash identifier: Y9MzD5lxrxSTqP/jCnVdDddI+amPnkwzI1oi74PX95w=
Subject key identifier: 50:0D:7D:DA:C3:98:9D:61:7C:17:50:C4:01:31:38:65:A6:89:B7:70
Authority key identifier: 40:C3:D3:7B:E4:35:A9:C3:3F:1C:63:E5:0D:0D:64:64:ED:16:10:04
Certificate issuer: /CN=40c3d37be435a9c33f1c63e50d0d6464ed161004
Certificate serial: 01960DFAF76773F03011821242AE2BB62432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
Manifest number: 1434
Signing time: Mon 07 Apr 2025 02:01:13 +0000
Manifest this update: Mon 07 Apr 2025 02:01:13 +0000
Manifest next update: Tue 08 Apr 2025 02:01:13 +0000
Files and hashes: 1: I3asWb0Ke_YTZ9x8-oMXPECbM9c.roa (hash: DFO6kXzPePgIeZm2V5GpwnQuioD5uOOrmUgP/RCLs14=)
2: QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl (hash: gNSnpNlP0u8qAjtGKmhUArjn6HlYzdkwuMbukMuMZt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0d:fa:f7:67:73:f0:30:11:82:12:42:ae:2b:b6:24:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40c3d37be435a9c33f1c63e50d0d6464ed161004
Validity
Not Before: Apr 7 02:01:13 2025 GMT
Not After : Apr 8 02:01:13 2025 GMT
Subject: CN=500d7ddac3989d617c1750c401313865a689b770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ac:22:5d:9f:c4:4d:3a:7f:25:26:8b:4f:ec:
3c:cc:0b:fb:17:47:19:43:f8:2a:ae:80:f0:f5:c5:
91:5d:07:03:bd:71:ae:89:42:71:de:eb:e3:d5:f4:
de:ce:89:78:b1:40:31:22:eb:80:19:f0:63:44:3e:
f9:b4:ae:81:1f:81:96:2c:3e:c6:e5:38:1d:28:0f:
ef:63:16:3a:2b:38:80:08:9d:32:ae:87:5d:b4:be:
78:b3:2b:7e:ef:56:81:da:45:00:b3:57:fb:85:d0:
cc:5d:90:99:4b:1e:c0:5a:63:fa:51:7d:de:88:96:
d5:7f:58:98:da:f8:e4:a3:53:f4:f4:10:0e:4e:29:
ab:4c:60:99:fa:de:ee:43:98:1c:de:99:e5:7e:a3:
21:36:84:6f:31:14:f5:4d:63:b7:a9:f8:c3:37:d3:
ed:d0:e3:94:d6:0e:a3:44:a1:e6:ba:a7:6c:b9:1a:
42:50:03:8e:ac:68:20:d0:2c:66:d9:ed:98:37:ea:
c5:47:6d:50:40:6f:a0:3f:0e:56:c2:35:59:5b:b4:
c5:b3:a8:5a:13:81:df:d6:4f:f5:e7:aa:3b:65:75:
a4:1e:56:ca:bf:e3:34:f4:16:42:6f:5b:dc:2f:70:
0c:95:e6:7a:31:0d:6d:8b:ac:a2:18:6c:cd:16:1d:
ec:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0D:7D:DA:C3:98:9D:61:7C:17:50:C4:01:31:38:65:A6:89:B7:70
X509v3 Authority Key Identifier:
keyid:40:C3:D3:7B:E4:35:A9:C3:3F:1C:63:E5:0D:0D:64:64:ED:16:10:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:12:0f:44:76:a9:36:d8:cb:30:39:ad:cf:55:b2:c7:4d:9c:
6b:2e:20:8f:a6:b1:63:56:52:83:a2:80:7d:9a:21:0b:3a:10:
b5:c4:ea:c9:97:fd:fc:7d:6c:de:99:8f:8a:4a:85:44:c2:07:
6f:f8:d9:35:06:fe:3b:31:40:cc:49:e3:2b:a2:38:a8:87:1d:
b7:b5:29:7e:27:1f:54:9f:75:d7:ae:02:45:18:90:5a:5c:47:
a0:47:42:25:1f:c5:12:92:47:d7:f2:1f:57:7e:03:2e:2b:d0:
27:a8:1c:ee:81:03:7c:1c:7e:f3:c9:4b:02:e7:77:cb:e9:10:
ea:f7:85:5f:83:f4:fd:be:0f:96:b0:2a:b1:d8:fc:4e:b1:3c:
d1:c0:b5:fa:67:66:e7:90:b6:c2:d4:94:02:cd:3b:9c:e2:5c:
38:eb:e1:5e:6b:1e:49:8c:f0:58:d7:32:9c:de:c6:a6:0f:4c:
d3:b1:ba:6e:28:a1:9c:d6:63:26:df:db:0b:5c:8b:dd:11:1c:
6e:ad:6d:33:09:44:ff:53:df:3a:1e:99:e3:63:51:86:27:b7:
64:7f:52:00:2e:59:47:fc:d5:1f:91:97:6e:ac:92:00:ba:95:
d4:76:45:26:80:c1:d8:de:89:a7:da:1e:2f:da:e0:76:56:4a:
4a:99:24:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:53:03 2025 by rpki-client