Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
File: qQYfL0mm16-epna60D3xzi9QJg0.mft (raw, json)
Hash identifier: +86522Zz9FV7imiBaRKsjnkX8WB4dsuLqmI1pyXkGZg=
Subject key identifier: A6:81:C3:DF:16:25:8F:75:EC:FA:63:73:13:A1:33:E2:5F:44:BF:1E
Authority key identifier: A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
Certificate issuer: /CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Certificate serial: 0196C2A733B610CE71B8A1FCFF653D73FB3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
Manifest number: 0927
Signing time: Mon 12 May 2025 04:00:59 +0000
Manifest this update: Mon 12 May 2025 04:00:59 +0000
Manifest next update: Tue 13 May 2025 04:00:59 +0000
Files and hashes: 1: hILMU0qMjMm6bmWNobLKh35z6fg.roa (hash: tRLWcg9XAdmGTHy58HB7PkQi1r29x3Hn5q5I5oWT1hs=)
2: qQYfL0mm16-epna60D3xzi9QJg0.crl (hash: 3VXwwgHFhFBBNcPdcRjwatqEQJ8ogvNML+9iAGTcdJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a7:33:b6:10:ce:71:b8:a1:fc:ff:65:3d:73:fb:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Validity
Not Before: May 12 04:00:59 2025 GMT
Not After : May 13 04:00:59 2025 GMT
Subject: CN=a681c3df16258f75ecfa637313a133e25f44bf1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cf:fe:e5:08:6a:59:b3:e0:9c:05:a5:8c:6e:
2d:7b:a8:96:55:86:69:96:41:c7:8b:e2:c6:c7:c3:
c6:1a:53:b1:a8:ee:e6:4e:bb:5c:7b:be:8e:52:21:
56:ee:2e:9d:af:ac:3c:f7:45:ed:4e:6a:28:1c:6d:
d8:1e:32:5e:b6:b4:bf:48:62:31:b0:77:4b:f3:d2:
a8:ce:f7:23:6a:b5:4e:e1:8a:87:af:e5:df:b2:70:
04:94:f8:fc:c8:40:d2:79:f0:b5:03:2c:dc:a9:77:
e0:ad:79:6f:df:28:ff:bc:f8:f2:3e:c4:54:d2:03:
e3:06:25:72:22:78:84:50:4b:18:39:e4:a7:9a:6a:
90:31:b8:30:7a:96:f6:45:90:24:7e:9d:28:c3:d1:
35:8a:c3:56:ff:bb:90:1c:1f:06:b5:87:76:7e:fa:
84:18:40:81:1e:cf:53:fb:a1:81:4a:18:2c:06:b0:
99:96:f7:b3:b2:5d:2e:cd:f9:d6:a3:a0:a9:7c:5a:
93:22:ce:28:75:7b:b8:13:e4:ca:c1:b7:2d:0e:a2:
5f:3a:2a:88:11:22:5c:01:3b:83:0c:b8:91:9e:80:
f1:07:83:0e:53:fd:d3:07:35:1a:97:33:4e:87:81:
50:f0:61:b7:fb:c6:d2:01:4e:4d:5f:80:91:42:b0:
58:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:81:C3:DF:16:25:8F:75:EC:FA:63:73:13:A1:33:E2:5F:44:BF:1E
X509v3 Authority Key Identifier:
keyid:A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:6a:8d:62:71:da:3c:bd:ba:51:59:56:60:b7:c4:43:29:57:
59:08:5d:b4:86:12:03:fc:7e:7c:bb:17:81:71:8b:f8:46:0f:
92:42:21:ce:f3:ca:b9:7d:c2:25:88:6a:41:45:fa:7e:4d:1b:
d2:83:1a:be:1c:2c:34:4e:25:19:4f:b1:e1:d0:7f:52:e9:da:
e2:7a:e5:2c:39:f3:10:30:35:c4:45:67:f3:b8:d4:2f:34:4f:
6a:98:c2:49:f7:6f:fa:ee:53:fb:09:0b:48:f5:53:fa:7f:ac:
c0:96:f8:13:65:72:f9:82:3a:16:77:31:29:60:2f:82:98:7d:
dc:5a:14:be:45:32:6d:bf:a2:1a:77:c7:a7:8c:26:33:b9:24:
6f:1a:c0:2c:47:cd:d4:e5:26:5f:1e:d2:3d:be:48:72:12:fa:
35:df:46:5e:97:7d:b1:57:78:39:c7:37:e8:00:39:4a:06:ac:
b7:1a:f8:f9:a2:20:41:00:81:9b:ab:a6:b3:4e:99:5b:18:a0:
62:41:ee:f0:fb:99:ec:f9:c0:b7:40:cc:cc:a4:7a:66:6e:9e:
e2:cd:32:bc:a6:ec:89:47:c8:8b:a8:e3:aa:d4:b7:90:06:be:
d4:46:70:27:00:b4:87:05:3c:57:27:98:84:af:61:78:70:26:
1c:39:1b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:02:40 2025 by rpki-client