Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
File: QbpsBQULUMcLmjXTQjC3rDCdTZo.mft (raw, json)
Hash identifier: FUw8+joo+K+Z+NVnd5qJ94KGH5M99WKEL/+6yopwvzY=
Subject key identifier: 61:EB:0A:FA:97:B3:41:CC:4F:38:9C:36:6F:7F:65:92:20:A5:99:B1
Authority key identifier: 41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
Certificate issuer: /CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Certificate serial: 0196BAED50C24C47053616E1F1024B9AA7D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
Manifest number: 021F
Signing time: Sat 10 May 2025 16:00:36 +0000
Manifest this update: Sat 10 May 2025 16:00:36 +0000
Manifest next update: Sun 11 May 2025 16:00:36 +0000
Files and hashes: 1: QbpsBQULUMcLmjXTQjC3rDCdTZo.crl (hash: AJJ0Ga5h607pBom11zz8epUhcHJV3X5FpnWdyfwCC7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 16:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:50:c2:4c:47:05:36:16:e1:f1:02:4b:9a:a7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Validity
Not Before: May 10 16:00:36 2025 GMT
Not After : May 11 16:00:36 2025 GMT
Subject: CN=61eb0afa97b341cc4f389c366f7f659220a599b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:45:39:4d:3d:79:a3:7e:b7:c8:42:d6:e6:4a:
07:d5:4f:d3:c8:8a:93:ae:f8:aa:67:04:76:23:40:
b9:13:f7:36:09:07:9c:8f:19:9f:15:9c:6d:61:36:
1a:91:05:03:ab:1b:a3:e5:c1:37:af:23:b2:25:9a:
18:c1:78:e7:d8:1a:1c:28:54:3f:a4:4b:78:1c:3a:
af:06:ba:ee:cb:ed:17:b9:6c:8e:26:d7:94:89:25:
7a:95:02:16:09:9d:18:24:14:05:08:6a:87:4c:04:
7f:e5:6b:63:af:11:7b:d7:79:2a:3f:e7:4d:3f:17:
3b:c3:d7:67:8d:5b:44:c6:5d:9f:c9:de:0e:a9:48:
55:16:c8:07:bd:a9:a3:7d:13:08:fc:e2:b0:5a:8d:
81:73:b4:78:b6:20:2f:69:1b:1d:07:f8:7d:ae:72:
3c:0d:5a:67:51:97:00:ea:77:ae:f7:9a:5c:44:ad:
a5:45:42:b6:4e:4d:32:83:1a:fa:56:c7:76:98:f8:
a5:bd:66:ed:16:4e:2c:66:c5:79:f1:dd:a4:ad:54:
aa:4f:80:ed:b4:b4:78:c1:32:fe:a5:a0:f8:5e:81:
2b:39:68:09:31:1c:c9:a0:88:03:b5:fe:08:c0:29:
23:85:80:3f:23:4f:99:e1:28:10:ed:48:3e:58:2e:
e0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EB:0A:FA:97:B3:41:CC:4F:38:9C:36:6F:7F:65:92:20:A5:99:B1
X509v3 Authority Key Identifier:
keyid:41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:6b:31:25:e7:79:63:36:9c:d9:ee:6f:83:b4:f0:d2:31:19:
b9:a1:04:b6:ce:69:18:22:30:82:76:4e:93:d6:0c:7e:47:d6:
2a:9f:63:8e:28:9a:19:fd:0e:b0:07:48:9b:9c:fd:9b:53:16:
a0:21:4e:a0:6e:e3:b6:6e:e7:f1:be:57:ef:00:0c:62:37:4e:
22:28:9e:08:34:36:38:0e:d1:f5:38:46:52:33:7e:af:80:85:
21:6c:98:8b:2e:16:92:9e:98:24:cf:59:23:1c:b6:66:a3:fd:
c5:8d:c7:47:9a:40:6d:f6:01:99:f1:1c:ff:6e:96:4d:ea:91:
71:73:5b:90:25:71:9d:9e:0d:ca:7a:9f:db:72:6a:eb:51:04:
40:62:ba:8b:a9:19:da:b0:fa:42:d4:5f:af:16:f0:e1:40:18:
3a:40:a5:8d:c5:58:b3:65:72:c5:75:aa:2c:2f:b6:c8:de:31:
ad:65:03:3a:b5:2b:7f:ec:4d:35:ea:5d:96:85:93:81:cd:74:
dc:a0:61:7b:ba:5e:e7:ca:62:2c:9b:ce:a0:33:b8:f2:5a:12:
e0:60:76:4b:cc:ad:03:a4:12:eb:d1:28:3e:f1:8f:c3:9d:4a:
12:78:9c:ed:36:58:24:b2:50:25:ba:6a:c4:6c:80:66:97:42:
2b:db:49:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:24:07 2025 by rpki-client