Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
File: BQseOMcEvQjjudF_WQNnsdHwPEo.mft (raw, json)
Hash identifier: 7rxq5Y5V0O0fyuNMpLCMIEA1Ly7GlYLYO4quAEVwGc8=
Subject key identifier: 43:1E:07:FA:E5:EC:23:53:A8:A3:86:C4:DE:EF:DA:3F:2C:07:04:71
Authority key identifier: 05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A
Certificate issuer: /CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
Certificate serial: 0196A80AF280E684481F0B1F824DF8ADC77D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
Manifest number: 1161
Signing time: Wed 07 May 2025 00:00:11 +0000
Manifest this update: Wed 07 May 2025 00:00:11 +0000
Manifest next update: Thu 08 May 2025 00:00:11 +0000
Files and hashes: 1: 5S92E_dEmNTTwfkm2rsCO6-zdvo.roa (hash: gLy7LOPageczNSXewMrkGlzpLLm8xvxYhJmy6XmoxNw=)
2: BQseOMcEvQjjudF_WQNnsdHwPEo.crl (hash: +cEqCp9UJhgNRdrfQswA6ESBInMgIsyZiRSbA4/kmEE=)
3: VPRSbhpUWHK9LNCRTJlj7w99FR8.roa (hash: iyRxgtVq0GVpiBHIkamYcHY6gGzLkU1W/+EnFJzw2iI=)
4: ojWxc2TzI-h3TIYvKtx_PWX6d0c.roa (hash: SsT/N9GUX/6L4Mk+Xa88PVIrMr8IoUKh8+VOw3Xptus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:0a:f2:80:e6:84:48:1f:0b:1f:82:4d:f8:ad:c7:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
Validity
Not Before: May 7 00:00:11 2025 GMT
Not After : May 8 00:00:11 2025 GMT
Subject: CN=431e07fae5ec2353a8a386c4deefda3f2c070471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6e:69:da:8c:11:bc:17:b2:e5:12:18:a5:f6:
d5:fe:04:38:43:74:5f:06:3b:c5:18:0e:e6:be:b3:
ba:f9:87:35:2e:f4:ce:c8:75:c2:2a:48:2e:22:ce:
4e:b7:f1:a1:e8:2e:93:b5:2f:d1:23:f3:54:17:6c:
07:db:24:b8:4c:bd:5c:98:cd:dc:9d:d8:d8:84:bd:
52:5c:cf:46:a9:e8:65:68:fa:03:a3:72:83:35:43:
cf:ab:0a:d2:83:a9:51:1e:cb:fa:8a:ff:4c:00:3c:
27:7b:cb:88:e2:3b:60:de:d5:06:4c:f1:c1:20:d9:
48:99:4c:fe:95:0f:5d:31:8b:bc:af:2e:d7:9b:18:
d6:80:44:b4:6d:38:d4:52:cf:88:90:56:d8:2e:0d:
98:46:31:67:38:24:08:a5:d5:a1:6e:41:89:15:8c:
50:79:f4:ce:2a:1d:70:ad:e8:be:0d:13:aa:48:54:
2a:30:67:fb:44:94:d9:c7:5b:28:51:58:11:99:5f:
10:eb:50:65:01:6e:45:ba:91:cd:72:68:6d:11:fd:
ce:09:64:ba:14:67:5e:29:bd:60:bf:47:8a:18:2d:
52:18:d2:d5:49:16:52:b3:eb:72:b7:af:04:0a:95:
d5:d3:b3:74:11:0b:63:84:26:9b:71:d7:fa:5b:46:
05:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1E:07:FA:E5:EC:23:53:A8:A3:86:C4:DE:EF:DA:3F:2C:07:04:71
X509v3 Authority Key Identifier:
keyid:05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d7:2a:a4:bd:96:23:de:97:ac:2d:eb:93:c9:6b:23:ef:0f:
3a:25:e8:6d:9d:ea:fd:55:a5:65:b6:96:70:52:99:28:74:4f:
63:14:43:fe:38:27:d5:03:c7:46:31:75:ec:07:5a:fc:74:ab:
8e:06:d0:82:cf:72:46:21:cf:24:d9:0e:ad:94:d9:f4:6f:45:
7e:38:12:f9:ea:b3:7f:5b:17:7e:47:5e:14:a1:55:26:fa:77:
5d:6a:c6:fb:d3:23:5b:f1:98:79:48:e8:26:56:d3:bd:45:b9:
82:b3:b3:b3:9e:9e:8c:fa:b9:3f:de:cf:e6:e9:88:8d:a4:44:
e3:52:37:f1:00:ab:86:3b:d7:a6:85:f4:a3:90:0c:f3:07:96:
74:bb:2f:c2:a8:db:39:c4:90:42:2d:05:a4:a0:3e:bf:65:f1:
03:1c:8c:65:2c:96:83:9f:07:d2:18:61:2f:4a:dc:a4:12:a3:
ad:04:2e:27:3b:63:00:26:d5:32:e1:68:45:9d:a3:10:f7:c9:
dc:db:76:84:b8:94:c8:55:06:2d:c4:78:00:83:0e:80:8a:f1:
5e:59:a1:3a:41:d0:54:91:75:9f:f8:9f:8f:75:16:77:b8:0d:
19:ca:5c:a5:74:37:90:48:72:17:40:8e:86:94:9c:31:55:e9:
81:4b:48:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 07:45:06 2025 by rpki-client