Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
File: qzCSHSjHjt6BhC9xLmz3K95aYIA.mft (raw, json)
Hash identifier: d6d1SJrnshLFpipemSPa8329PkNJiQkVU9qOvp0cHYI=
Subject key identifier: 29:67:B6:C0:35:60:88:77:AD:B8:E5:F9:15:3B:84:BC:10:82:04:78
Authority key identifier: AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
Certificate issuer: /CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Certificate serial: 0196A19B31A0CA031A29D6583B9B7AC8B5B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
Manifest number: 0FEB
Signing time: Mon 05 May 2025 18:00:24 +0000
Manifest this update: Mon 05 May 2025 18:00:24 +0000
Manifest next update: Tue 06 May 2025 18:00:24 +0000
Files and hashes: 1: WRJMUYeRixw27CAPxZImqPYkDlU.roa (hash: i28cVSRe5f6zxa7/1YaErFOEzE3A0YFcGcdJGku5uCs=)
2: jGJqFQVdzPNIuq__x_RJveRfPgI.roa (hash: l/kSncaCyGC+QqprUZGRI2OdInXO3OkPgy+W2EUBUIg=)
3: qzCSHSjHjt6BhC9xLmz3K95aYIA.crl (hash: MkeIwLVZFxkybaFf+kXI5O8V2LG8zfgLqK4gVx/IfIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:9b:31:a0:ca:03:1a:29:d6:58:3b:9b:7a:c8:b5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Validity
Not Before: May 5 18:00:24 2025 GMT
Not After : May 6 18:00:24 2025 GMT
Subject: CN=2967b6c035608877adb8e5f9153b84bc10820478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e0:f4:ae:d6:37:d7:a8:45:bf:8a:12:62:22:
3c:f2:d1:52:fe:be:c7:91:c5:09:58:12:18:be:46:
8b:c4:3d:48:9e:c5:22:9c:e8:66:2f:ff:db:f4:3e:
86:45:1d:e7:cf:e2:8e:11:b3:08:d9:e8:48:31:12:
16:ac:d4:9f:26:d7:df:33:cd:10:cb:f6:3a:12:84:
f0:0a:25:46:bb:60:fb:d5:5e:45:1e:64:de:97:01:
0d:fe:80:e5:a6:e2:4f:60:6f:d4:21:eb:64:56:10:
5f:21:87:96:9d:30:04:fa:30:21:f9:37:65:3c:f2:
9b:f3:29:d1:64:48:70:4f:7c:88:de:49:5e:fa:94:
64:2d:32:09:14:0a:7a:28:48:e4:4e:94:63:d0:5c:
8a:d1:cc:cf:c1:cb:d7:72:c8:03:e8:51:7b:a9:e0:
fa:08:6c:61:54:49:17:67:d4:85:29:6d:cf:37:ed:
07:d1:67:50:ed:a4:98:5d:8d:91:a0:86:3f:00:a5:
e6:97:cd:61:23:44:3f:bc:34:59:b2:fb:e7:2e:45:
84:36:2d:b2:04:91:94:43:2f:75:83:fb:1e:0e:95:
44:b0:5d:c1:2e:b4:ae:9a:6e:3d:ad:8f:0f:4d:a2:
bf:48:a9:d9:fe:0e:f6:35:b9:32:0a:81:ff:59:52:
f8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:67:B6:C0:35:60:88:77:AD:B8:E5:F9:15:3B:84:BC:10:82:04:78
X509v3 Authority Key Identifier:
keyid:AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:75:8e:d8:e1:4e:5e:11:d9:64:af:ad:2e:f2:03:f0:6e:99:
75:b4:f2:c8:3a:36:5a:d2:c4:07:c6:11:13:b1:55:f3:32:3a:
4f:da:fd:4e:98:5b:f2:c0:68:41:af:db:e1:82:4b:37:40:d6:
51:f3:3c:f0:45:94:f2:87:83:ab:2f:93:3b:57:b1:4a:f9:c8:
ce:fe:bf:1a:7a:7e:a4:8e:cb:5b:9b:15:e3:cb:70:2b:e3:98:
2e:30:ec:79:c4:ae:f6:af:10:29:8b:95:e2:a5:47:d0:8e:02:
8d:6b:52:08:d0:e9:4c:b9:1d:c8:34:78:c6:aa:a3:20:cd:da:
d0:e8:76:fa:cc:17:0b:e8:b6:84:db:ab:61:66:be:f6:87:85:
a2:5a:f7:e6:d7:82:63:53:c2:42:f7:1f:48:02:fc:7a:78:6d:
08:47:05:39:6e:5f:09:e7:4b:36:ac:d7:93:1e:87:11:70:2b:
87:9e:4e:30:43:2f:b5:ca:ce:10:a6:72:ad:85:32:83:59:b2:
b1:b3:e7:e0:0f:ba:21:56:26:78:b5:79:ac:04:60:4b:e2:b0:
51:c2:74:8a:0e:0c:dd:be:d7:07:63:4e:5e:06:9e:1e:83:6b:
10:75:25:fa:3e:3d:ba:f8:f4:3a:3d:eb:64:7c:8e:b6:9b:23:
64:dc:ab:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:34:52 2025 by rpki-client