Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
File: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft (raw, json)
Hash identifier: rTDJLWXqcHpvUJ+n5cUe+wHdC6JKxDDjdStkJ8TLS88=
Subject key identifier: AF:CA:80:D8:90:26:DF:B6:30:5D:00:E8:74:CB:80:22:1D:02:DC:8C
Authority key identifier: 42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
Certificate issuer: /CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Certificate serial: 01969FE3D4A52F479115B32FD9F920602DC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 10:00:30 +0000
Manifest this update: Mon 05 May 2025 10:00:30 +0000
Manifest next update: Tue 06 May 2025 10:00:30 +0000
Files and hashes: 1: QTfS1SFb7VGTiGiN2dDueV3na8U.roa (hash: PLx/8DSVxOYWpxQe9zNuM4NTWNV61RdgV2qLjo81Rz8=)
2: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl (hash: XL01g5jpv3HZIjgkPxBRIrDdWsACGGph2+o4kwQAPJY=)
3: TeM9OzX8sQpqWpDItBlSbfU5TWA.roa (hash: GQ0DaMaVE4ZcrNCViKsSogvmznrtITdeEy+eY3JUQMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e3:d4:a5:2f:47:91:15:b3:2f:d9:f9:20:60:2d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Validity
Not Before: May 5 10:00:30 2025 GMT
Not After : May 6 10:00:30 2025 GMT
Subject: CN=afca80d89026dfb6305d00e874cb80221d02dc8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:95:63:06:2c:89:bc:28:50:06:91:f7:07:ac:
b1:ce:80:e2:5f:ad:0e:5a:ad:14:45:15:98:9c:90:
00:8d:f1:2a:dc:b8:87:23:6b:d1:fc:71:c1:57:9c:
94:fb:e6:5d:b6:df:77:2c:fa:b4:3c:26:79:1e:90:
cc:b1:6e:6a:b6:dc:18:c5:23:4a:37:ed:fe:10:31:
45:3e:8d:b2:06:4a:05:04:9d:98:df:62:2b:7a:0d:
9f:fc:86:90:1a:6e:ce:0a:c0:9b:2c:21:97:52:16:
29:39:a1:0b:54:76:bd:94:10:41:2d:6e:89:79:e8:
ae:70:1d:59:86:17:59:97:aa:3e:83:df:4c:62:8e:
0f:47:20:af:64:f7:d8:fd:25:c8:8c:ad:3d:a7:cd:
c6:42:0e:f4:2d:b4:20:e6:6a:d2:6b:18:a4:eb:45:
6b:58:bd:38:5d:c6:20:1d:ee:48:74:e5:84:e1:76:
45:32:fc:66:f1:9a:d1:37:11:ed:a6:50:ce:98:a0:
28:71:0e:55:49:9c:dc:86:ed:23:69:c2:0b:44:c9:
e3:24:85:56:c9:ff:8e:c5:e2:f2:23:dd:f6:b4:83:
f5:09:cb:9b:77:e1:32:f7:da:57:a1:45:0a:41:e9:
b9:13:41:08:18:a5:88:6b:b4:a8:44:cd:ba:ac:91:
fe:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CA:80:D8:90:26:DF:B6:30:5D:00:E8:74:CB:80:22:1D:02:DC:8C
X509v3 Authority Key Identifier:
keyid:42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:3c:27:6e:f0:aa:99:f3:4b:b9:00:f4:26:7d:d7:ea:11:1f:
7b:94:de:e6:2f:70:e2:af:c0:6a:99:30:91:b9:e4:ce:dd:bd:
cf:85:4c:57:eb:85:e1:bb:5f:fe:a0:7b:c4:b5:6f:1f:24:93:
05:64:d1:d1:73:0b:0c:6a:21:62:81:e7:d4:84:cd:8b:af:bb:
03:70:72:a4:25:9a:04:fd:e7:07:50:b7:e1:7d:dc:30:d5:6c:
ed:22:2c:45:f4:0e:bc:1f:c2:b2:3a:ad:9a:32:a8:95:6c:0f:
7c:22:bc:c5:89:e2:ca:46:87:3e:ea:6b:32:08:ac:e9:1b:1f:
92:b1:6a:ad:ae:f2:a6:e4:17:73:9a:86:d8:1f:01:36:8b:89:
8d:9f:4c:c3:6f:89:a8:f6:a5:aa:9d:ee:5a:e4:ea:b3:23:04:
24:28:fc:ea:45:31:85:72:ea:e6:cc:8f:06:1f:e3:90:6a:6a:
db:89:f5:7a:f1:de:e8:9c:f5:02:bc:d9:c6:61:f3:79:b4:f7:
00:8d:27:c5:61:07:fc:b2:72:00:ab:66:47:e6:b0:66:fa:0f:
8f:7f:ab:6e:2d:26:da:b7:4f:a8:24:11:f3:80:3a:25:d3:6b:
b5:4e:63:71:74:79:ba:7c:7e:e6:54:b8:99:51:f4:ff:d7:70:
24:a8:ab:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:16:29 2025 by rpki-client