Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
File: qBfHRT83fpy2-uXIk8Bno-HTUUU.mft (raw, json)
Hash identifier: H25nqq1FgOuDblVWGDtH4+qL0xH8xcdJZLbGib3OOZg=
Subject key identifier: 23:DF:3C:9B:AD:5D:CB:51:CF:6A:4E:D4:03:E3:74:B8:24:F9:D3:B8
Authority key identifier: A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
Certificate issuer: /CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Certificate serial: 0196A088C3A75FEA72F62AA3E8DE00BF49F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
Manifest number: 0D46
Signing time: Mon 05 May 2025 13:00:39 +0000
Manifest this update: Mon 05 May 2025 13:00:39 +0000
Manifest next update: Tue 06 May 2025 13:00:39 +0000
Files and hashes: 1: VyO46YpT23BvljW9CwqKp8OCvAA.roa (hash: iOrTV9PCcKDnK4SEk9hES8b1JaLYOrEkHnO7HcHHTeE=)
2: qBfHRT83fpy2-uXIk8Bno-HTUUU.crl (hash: KaB9CwlYiictvxDtEB/W4ppQoJvBtKrGNThlkEiCZ0M=)
3: zyla5TQUsQzSUxLneRGH2oWP4QY.roa (hash: Nh/0bB0eQrdPHOZC7+V6EmhOBm+BxF8VlJbCNYPi958=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:88:c3:a7:5f:ea:72:f6:2a:a3:e8:de:00:bf:49:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Validity
Not Before: May 5 13:00:39 2025 GMT
Not After : May 6 13:00:39 2025 GMT
Subject: CN=23df3c9bad5dcb51cf6a4ed403e374b824f9d3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a6:e6:d4:a5:0f:f6:fe:e1:14:b6:a2:15:aa:
4f:50:69:d2:ab:7a:f4:c8:11:eb:87:5a:2c:ed:84:
a3:42:ee:00:eb:21:eb:16:65:ab:ef:9f:5e:54:eb:
f0:a6:16:62:b7:45:91:78:d8:f9:14:40:c7:73:2b:
27:d8:75:5e:33:d0:76:0c:06:66:9e:5b:a1:4f:13:
ca:46:0e:83:10:59:24:5a:b9:20:e4:9b:f2:8e:08:
41:dc:48:d4:2d:ea:ef:2d:e1:fd:8d:54:c2:0d:07:
a4:e4:7f:ae:36:00:03:ca:25:0b:f2:f4:1e:d0:d0:
8b:9e:76:69:e7:7d:7c:c8:81:13:d5:f6:cb:9f:a3:
dc:fb:3d:de:4c:a1:6e:46:97:0f:19:a0:11:88:c4:
58:59:17:eb:2a:68:d0:f0:5b:28:9f:c5:d1:da:b2:
32:fd:f4:df:f0:b7:08:c5:7c:a0:06:38:8a:17:87:
69:16:d8:2a:dc:94:a9:11:19:ce:ec:2b:f9:f7:44:
72:0f:22:56:6b:13:9a:cb:0e:14:81:83:e7:58:f3:
37:e8:47:48:33:ee:51:7b:64:dd:bd:1a:59:99:1f:
c3:42:0e:79:9e:b2:2b:04:4a:b0:c2:da:f0:d8:bb:
e3:b0:4e:bc:8d:89:c2:66:66:fa:28:ff:fd:91:21:
cf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DF:3C:9B:AD:5D:CB:51:CF:6A:4E:D4:03:E3:74:B8:24:F9:D3:B8
X509v3 Authority Key Identifier:
keyid:A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:fd:8e:e1:a8:fc:49:a1:ea:fb:3a:f3:dd:6f:16:16:03:cf:
20:11:70:92:cc:63:a3:c2:28:2f:c3:c8:10:2d:10:52:8e:fc:
a2:95:ea:5c:1f:aa:de:17:43:7b:2a:21:0c:06:89:0b:cb:d3:
15:1c:1b:db:d4:ea:f4:2c:ac:db:a7:18:62:03:9b:58:c3:85:
62:b0:5d:51:e4:6e:7e:c6:02:5d:0d:15:90:67:20:cf:c6:73:
3e:ec:ea:67:f8:26:6b:df:b6:6f:f4:c2:ae:37:86:d6:32:a5:
88:d2:cb:05:90:39:0d:65:a4:15:f7:1d:6f:5a:ef:61:95:f2:
a2:2e:0e:b1:f3:c9:09:d7:4b:3c:dd:d1:a1:ca:55:79:e0:6a:
9c:f3:d4:15:cb:a8:b4:5b:5e:74:a3:13:f0:67:97:2c:16:38:
0c:22:6f:69:ad:86:8a:ca:44:57:73:d5:4e:81:a7:39:92:7a:
8e:da:ed:b7:f3:02:75:69:a9:85:f3:b1:1e:59:d4:da:06:0a:
a7:97:48:4e:43:df:ed:95:b0:c0:0b:79:98:e4:1a:2d:2c:f4:
d9:bd:0e:cd:e1:4f:1a:4f:88:d3:a2:78:2e:76:99:42:84:70:
cc:53:59:37:e4:d8:72:28:95:08:0b:14:51:f7:61:d2:5a:1f:
10:29:77:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:17:06 2025 by rpki-client