Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
File: Q34DDURmGkwgHroD3kUrBLjn2eU.mft (raw, json)
Hash identifier: uu7iriJqpPSVM1k9qKn1iizJJlchXg+Zww2UXzpVHfM=
Subject key identifier: E7:ED:9F:B3:E8:58:CE:DC:14:ED:62:D1:8B:EB:1B:8E:83:82:EF:8E
Authority key identifier: 43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5
Certificate issuer: /CN=437e030d44661a4c201eba03de452b04b8e7d9e5
Certificate serial: 0196CA97546AF7631CE01465AEF8BB2443FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
Manifest number: 1480
Signing time: Tue 13 May 2025 17:00:37 +0000
Manifest this update: Tue 13 May 2025 17:00:37 +0000
Manifest next update: Wed 14 May 2025 17:00:37 +0000
Files and hashes: 1: Q34DDURmGkwgHroD3kUrBLjn2eU.crl (hash: gDOl+pSIt4TPEnnQrfhbwCLQDav/6sHH8+JEa//HhS8=)
2: aTnDDG7156iJH1B7VtXl45Lxz4c.roa (hash: uqmE7u3SyyyiP9Dvg82dGi927wLVOacs75i5/YZ4Qho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:97:54:6a:f7:63:1c:e0:14:65:ae:f8:bb:24:43:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437e030d44661a4c201eba03de452b04b8e7d9e5
Validity
Not Before: May 13 17:00:37 2025 GMT
Not After : May 14 17:00:37 2025 GMT
Subject: CN=e7ed9fb3e858cedc14ed62d18beb1b8e8382ef8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c7:d8:e2:ce:c2:8a:34:ca:e2:cd:32:1f:a5:
dc:9b:eb:c0:df:b8:1c:c4:85:48:50:10:3f:78:45:
a4:69:a5:f1:24:af:99:11:42:f2:a7:d1:1a:1c:1b:
e5:96:e9:e5:81:f6:a5:cd:e4:b2:07:0b:bd:cc:28:
4a:76:6b:c3:36:79:ea:8d:c7:70:72:1a:ee:2e:67:
4e:04:df:14:4f:fe:1b:73:09:1d:c1:88:9f:38:46:
a4:ac:3a:ac:16:3d:c0:62:72:80:96:68:c0:8f:42:
ea:e8:69:0e:ba:e5:93:21:46:52:b3:88:5b:28:3b:
6f:1c:39:0f:27:1e:73:ab:f0:52:80:79:65:8e:31:
ae:46:b2:6f:bb:ef:6e:ab:36:0b:a2:a3:cc:64:0e:
5d:a6:ac:2a:bb:5f:cf:4e:b7:98:64:b9:ed:e1:1f:
c6:3a:80:57:5f:fa:1f:b9:0f:dd:83:f7:86:5f:5d:
9a:34:fd:97:6e:c4:00:8f:87:a9:19:b8:e3:31:51:
35:f6:ea:f1:06:87:92:de:1c:d1:d9:3a:82:a3:10:
e0:10:a1:16:d2:83:76:73:47:25:db:79:b6:8a:33:
67:3f:93:f8:82:41:1a:7f:f3:67:e4:d8:9b:96:be:
14:84:84:c5:23:a9:87:12:94:78:8b:87:e4:bc:cf:
7e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:ED:9F:B3:E8:58:CE:DC:14:ED:62:D1:8B:EB:1B:8E:83:82:EF:8E
X509v3 Authority Key Identifier:
keyid:43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:63:9f:6e:16:d2:36:b0:46:7c:39:9c:c1:3a:1a:52:c9:1a:
d1:80:18:6b:ea:f9:dd:d5:f7:55:fc:d9:f4:86:c7:74:39:25:
aa:c3:e1:c5:4e:32:fb:d8:f9:f4:3f:43:c8:84:17:1d:c2:8c:
17:04:0e:6c:78:0e:75:a0:9d:b1:f5:23:97:f2:e2:83:da:69:
06:f6:3e:18:a9:4b:79:59:58:ed:91:89:4c:03:db:26:3a:70:
4c:d9:9a:70:c1:f5:99:b8:61:d6:e9:33:0b:e7:d7:35:29:5b:
04:80:21:3c:64:d1:64:fb:33:84:b3:97:76:82:9d:48:eb:2b:
3e:52:b4:56:33:f2:5d:04:62:42:eb:9d:76:2c:00:c7:2b:9c:
b3:94:05:1b:39:6d:c5:a6:87:06:3c:f0:f0:de:5c:93:70:85:
c4:c0:f9:b8:51:d5:80:b6:1f:f8:c9:7b:2b:32:ae:1b:4f:15:
f0:92:37:fa:67:8a:5c:55:e0:f6:f2:80:8c:f6:b9:41:88:2d:
3b:9c:38:83:e3:52:15:50:de:69:77:1f:29:ae:cc:00:21:22:
c0:ef:66:8a:0e:ee:d7:58:a2:34:29:f1:f8:94:88:d7:c2:8f:
a0:f5:6a:b3:8d:43:96:77:74:b0:90:44:09:e1:dc:c4:35:d5:
d5:8a:4b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:47:35 2025 by rpki-client