Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.mft
File: QaCIiaXMcoT9MkqZK_qN59bCwYo.mft (raw, json)
Hash identifier: daw/9MX4kXByFkGPRdaqwPK0fu3bHnEu4/I6A+z/4SM=
Subject key identifier: 4E:9F:B2:0F:D8:30:09:02:E4:37:03:4F:08:87:32:DE:60:7F:FE:95
Authority key identifier: 41:A0:88:89:A5:CC:72:84:FD:32:4A:99:2B:FA:8D:E7:D6:C2:C1:8A
Certificate issuer: /CN=41a08889a5cc7284fd324a992bfa8de7d6c2c18a
Certificate serial: 0196A5411E47D8F173E31BC43EEBA242DE8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QaCIiaXMcoT9MkqZK_qN59bCwYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.mft
Manifest number: 0484
Signing time: Tue 06 May 2025 11:00:30 +0000
Manifest this update: Tue 06 May 2025 11:00:30 +0000
Manifest next update: Wed 07 May 2025 11:00:30 +0000
Files and hashes: 1: QaCIiaXMcoT9MkqZK_qN59bCwYo.crl (hash: igL/Zzd/rO+gWJ2bdFuktsf9PdnBFU88W7bX8Gzo2gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QaCIiaXMcoT9MkqZK_qN59bCwYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:41:1e:47:d8:f1:73:e3:1b:c4:3e:eb:a2:42:de:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41a08889a5cc7284fd324a992bfa8de7d6c2c18a
Validity
Not Before: May 6 11:00:30 2025 GMT
Not After : May 7 11:00:30 2025 GMT
Subject: CN=4e9fb20fd8300902e437034f088732de607ffe95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5d:07:7f:7c:b6:f8:d1:8e:16:fd:9f:ed:1d:
5b:bc:b1:93:a1:0f:4c:b6:1c:cb:5f:14:0d:88:8b:
ee:64:14:4b:4b:1b:b1:be:bf:7c:af:6c:a6:e2:e8:
3c:9a:3e:55:7e:f9:4a:b4:8a:a7:bc:47:81:dd:55:
8f:bb:32:35:41:e4:fd:d1:4d:45:32:a8:4d:ce:cd:
7b:75:30:a0:16:fa:78:c4:c8:17:c1:df:ef:c4:17:
38:11:ff:5c:e2:a5:76:8b:e9:4a:f6:5e:53:5f:01:
2d:3c:58:98:cf:f5:d8:a3:2f:71:b5:69:94:4f:3d:
fa:d9:e6:1c:16:bf:4c:1b:80:2d:db:2d:cb:07:75:
68:9b:c1:29:51:44:d2:6c:b9:78:75:12:8e:e1:57:
f2:bf:99:2a:55:b9:82:9f:1d:9e:2b:a4:d3:ff:02:
10:bc:d4:0f:0e:86:96:77:d8:24:ea:c7:ad:65:4e:
b7:94:71:18:09:4a:84:bd:44:f5:4c:0b:8c:77:8c:
5b:0e:de:30:ec:cc:03:e8:fd:37:7d:9d:e8:b5:57:
9c:91:e4:1f:32:9f:8d:3f:ed:a9:ec:e6:3f:58:eb:
a2:ac:2c:f2:05:4d:ae:3f:c6:19:d1:37:55:2d:a3:
73:15:48:12:df:a8:92:97:96:1c:8f:a1:22:33:53:
96:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9F:B2:0F:D8:30:09:02:E4:37:03:4F:08:87:32:DE:60:7F:FE:95
X509v3 Authority Key Identifier:
keyid:41:A0:88:89:A5:CC:72:84:FD:32:4A:99:2B:FA:8D:E7:D6:C2:C1:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QaCIiaXMcoT9MkqZK_qN59bCwYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:9e:9a:fb:b7:b4:70:ce:67:77:ee:84:88:98:74:94:fb:bf:
67:e8:42:0b:6f:0b:e7:00:ee:59:78:ca:9e:3b:1f:29:6a:e7:
14:b9:20:f0:8d:37:83:92:6a:68:bd:67:c1:63:69:37:27:6c:
03:fe:01:c1:26:b4:38:43:d5:86:f6:0b:26:ba:2f:73:3c:36:
41:ce:df:b2:8b:d0:35:07:c6:13:36:74:93:12:0f:0b:ce:69:
a4:e3:b4:fe:84:72:70:35:de:74:c0:33:61:4d:d1:c1:06:2c:
45:b8:65:65:d8:cd:70:f6:95:1b:3c:36:c0:b3:32:33:0a:91:
00:72:ef:a4:b1:99:a5:b5:6d:46:6e:67:b4:98:ff:7b:4f:06:
ff:c9:ea:6d:4e:fe:d5:f7:64:b1:88:34:7b:ee:47:a8:fc:51:
81:51:8c:da:24:75:22:59:42:af:96:11:7a:e1:d9:98:36:a6:
4d:81:74:6f:f3:f4:5a:5c:6e:3d:6c:7a:8f:70:ef:38:64:be:
8f:9a:7e:ee:b6:c8:bf:a6:c6:dd:66:f8:e6:56:81:27:f4:be:
8b:4a:6a:1b:2c:12:c3:61:7b:23:c8:88:c0:ec:b8:0e:e5:c7:
69:df:6d:1e:0b:56:a3:82:37:b0:47:95:3f:c6:15:df:a2:37:
4c:a0:43:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 21:33:19 2025 by rpki-client