Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
File: QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft (raw, json)
Hash identifier: FP4IDrAWMg1lI2lQcvKbmmlEkCkJO3tmThW9CZTnXSY=
Subject key identifier: E4:F0:D1:71:69:F8:6E:92:29:BA:DB:CF:95:32:E8:01:42:3F:F4:84
Authority key identifier: 42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
Certificate issuer: /CN=427a2670508b945123beecbf13145ffbd7bfcde4
Certificate serial: 0196A0BF7AEFE45CAFBF7B2EAC4D0995E634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
Manifest number: 0712
Signing time: Mon 05 May 2025 14:00:25 +0000
Manifest this update: Mon 05 May 2025 14:00:25 +0000
Manifest next update: Tue 06 May 2025 14:00:25 +0000
Files and hashes: 1: QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl (hash: F/tcaaaGFkKa1gzkcEBewNncCTmzbMLFmyJG6TMqMyI=)
2: bC15MrNbvaHvc_M6-zAakBbyrww.roa (hash: w8+yaL/cYfTmT9iePHgIvZ5N3rV9yU+eea+yLs6LsB4=)
3: ey2THT3vxYZt7oPHCFWCPLFWheU.roa (hash: 24QSz9cCbqNcvUaGh3j8TGkQz+MS9kGdeKEW+Heclys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:bf:7a:ef:e4:5c:af:bf:7b:2e:ac:4d:09:95:e6:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427a2670508b945123beecbf13145ffbd7bfcde4
Validity
Not Before: May 5 14:00:25 2025 GMT
Not After : May 6 14:00:25 2025 GMT
Subject: CN=e4f0d17169f86e9229badbcf9532e801423ff484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1a:38:74:43:b2:2b:c5:46:63:34:d7:55:4d:
32:cd:79:70:28:07:44:36:86:e9:22:e2:a5:9f:c5:
e6:6f:be:5b:7d:5e:a1:d6:e3:99:ab:2a:00:fe:53:
c3:10:71:cf:c5:d3:ee:a6:64:33:8e:32:9b:dc:1e:
92:a6:3f:fc:d6:e5:e1:a8:f5:5e:6b:40:7d:b6:79:
18:be:5b:59:af:dd:57:8f:1a:4a:81:6b:2f:24:78:
e9:b4:1d:57:dc:2c:19:31:b9:95:a7:d2:0d:45:eb:
4b:79:61:4e:38:d1:73:9b:fd:4c:ae:c6:4c:58:af:
18:b8:3f:0b:10:b8:71:f7:31:21:97:fe:7d:0a:5a:
90:27:74:33:68:09:d3:17:f9:53:76:47:0e:c0:9e:
6b:22:54:60:5d:30:ce:c7:4d:27:5a:e9:d9:1c:e3:
ea:5b:3f:36:05:67:2b:b7:88:31:54:6e:c2:d2:4e:
6e:dd:8d:7d:23:e0:13:54:d7:f6:d5:e6:9f:d9:0e:
9e:46:c6:12:a6:df:c9:65:6d:00:62:db:00:3f:dc:
b9:9c:07:c7:78:53:1d:d0:15:92:3a:90:50:05:96:
4a:ba:11:3a:1b:28:50:c3:d4:42:71:02:94:1e:d2:
19:25:60:49:b6:3f:f1:18:f3:a6:9c:6d:f4:bc:1a:
1e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F0:D1:71:69:F8:6E:92:29:BA:DB:CF:95:32:E8:01:42:3F:F4:84
X509v3 Authority Key Identifier:
keyid:42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:69:94:e7:50:78:c1:b4:3c:4e:8d:58:84:b3:c8:e8:21:08:
eb:68:92:da:1e:9a:60:8e:9b:f9:b9:01:09:e9:e2:bb:21:d5:
22:0b:9d:d8:c8:ac:1e:45:a5:7a:c6:05:54:9f:0f:ca:00:e7:
19:44:11:15:4f:5e:42:91:bf:b1:d9:2c:44:4d:95:b7:24:6a:
02:c3:d5:27:b2:a6:6c:d9:84:94:34:ff:61:23:a5:0a:ab:8b:
4d:b9:62:9c:b6:fe:1b:12:46:6d:5b:17:52:12:fa:45:56:5e:
7f:5e:09:c8:1e:65:26:c6:c1:5c:74:c8:2e:2c:4c:6b:9f:80:
25:21:11:36:17:74:2a:97:ea:69:ce:e8:1a:55:f2:3f:a4:7a:
e2:eb:e9:1a:e0:bf:15:bc:23:30:f0:62:0b:2d:68:80:d5:4a:
4d:96:86:1e:6f:2a:ee:3b:53:bb:68:04:9b:51:01:24:9e:ca:
29:18:ab:b1:ab:15:cd:a9:99:4a:a5:62:51:b4:3f:66:a5:78:
23:5b:2c:24:e8:88:22:89:ec:ce:d0:be:b9:0f:f9:24:20:b4:
de:f0:b4:d9:55:53:39:24:0e:9e:43:4c:cd:58:95:a4:31:9c:
3e:eb:5f:e7:e3:42:27:ad:ba:b3:8a:65:da:f2:19:c9:7b:22:
51:4b:ed:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:23:18 2025 by rpki-client