Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
File: QSrIOifKhyPGGxRGw-Z4EQxlBok.mft (raw, json)
Hash identifier: OvQGhhn+BuHc83DcNjfUzmWm1sIMWfmNsJj2q811IJM=
Subject key identifier: 56:84:D0:1C:45:75:01:BA:4B:50:80:22:80:32:E7:D4:D5:2D:4E:6A
Authority key identifier: 41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
Certificate issuer: /CN=412ac83a27ca8723c61b1446c3e678110c650689
Certificate serial: 0196CB734BC56D87D5199F7AF41E48A212D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
Manifest number: 153F
Signing time: Tue 13 May 2025 21:00:52 +0000
Manifest this update: Tue 13 May 2025 21:00:52 +0000
Manifest next update: Wed 14 May 2025 21:00:52 +0000
Files and hashes: 1: BriG5n_d334rZ6dRB6OmkxalNXQ.roa (hash: gR3OKMrFwiMtW4+rQqu+QkKInRaAYo99fA48hRcfRho=)
2: QSrIOifKhyPGGxRGw-Z4EQxlBok.crl (hash: fnJoTWFv1EJZ36iKlwUZ8pOdaudtxfgmkhOEzq2Dwes=)
3: fFU1nOvAp1rSs4Piya9lGEHH2qQ.roa (hash: 2ngeI6kdV66tUb5OqMLCCP5yBBWk//A11XWcWwTz/1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:73:4b:c5:6d:87:d5:19:9f:7a:f4:1e:48:a2:12:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412ac83a27ca8723c61b1446c3e678110c650689
Validity
Not Before: May 13 21:00:52 2025 GMT
Not After : May 14 21:00:52 2025 GMT
Subject: CN=5684d01c457501ba4b5080228032e7d4d52d4e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:55:67:c3:16:9d:99:bc:3f:e2:4b:cc:e2:bb:
d8:38:41:a1:86:30:99:4c:17:43:cd:1f:d8:0a:88:
08:e6:5a:25:28:78:12:01:db:88:b1:41:f8:15:5c:
b2:8e:71:d0:1b:4f:e8:87:c5:ae:dd:dc:2a:3c:c5:
74:49:b5:1f:3e:12:13:37:0c:d5:78:f2:97:f5:89:
88:de:35:27:cc:cb:ee:8d:78:56:87:f7:52:22:f7:
67:b5:5b:99:81:8c:d1:c1:49:ed:6f:59:5e:f3:1d:
30:c0:89:db:29:3d:64:cb:0e:ca:5c:7d:12:cc:dc:
1f:c8:24:de:22:47:ea:15:a3:79:b1:ad:77:e5:f5:
c4:84:39:cf:ce:46:e2:3b:08:8a:9c:ee:e6:84:5f:
ce:d2:60:75:b6:ed:14:69:39:3c:b3:7f:30:9a:3a:
91:e1:9d:1a:1e:f4:3c:10:4c:e4:36:94:30:14:22:
ba:3f:b3:3e:39:48:03:44:26:c1:bb:b7:71:b8:4c:
cf:91:c4:e4:36:4e:7c:27:62:e1:52:5f:7d:c5:64:
73:60:ac:5c:cc:dc:4a:4a:46:fa:40:ff:98:55:fd:
c2:ad:15:ea:ef:b7:71:aa:54:a9:f4:24:53:50:6f:
e5:27:66:1c:95:26:32:c6:aa:38:b5:92:a4:55:55:
c8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:84:D0:1C:45:75:01:BA:4B:50:80:22:80:32:E7:D4:D5:2D:4E:6A
X509v3 Authority Key Identifier:
keyid:41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:64:fc:77:38:26:d8:1b:2e:81:4c:9e:8b:1c:41:71:e3:c0:
ee:08:52:52:12:e6:07:ab:63:32:06:34:14:c4:8c:b7:40:4f:
13:45:04:df:b7:20:91:44:c5:a3:cd:d5:74:fe:c5:4b:df:fa:
c3:9b:ac:cb:5c:b5:d4:38:b4:b2:33:f3:9b:bf:dd:c3:d3:e4:
5f:2a:82:57:41:6b:b8:20:ad:e6:7e:c5:40:2e:f9:0a:bd:cf:
fd:0d:71:a2:2b:59:9f:a6:9b:b2:5d:40:ba:1b:ce:b7:69:87:
14:33:5a:49:d4:ea:cf:14:2e:de:a2:81:eb:36:b3:5d:5c:89:
ae:a6:b5:03:1b:24:a2:4d:a8:b2:a2:57:fa:a6:69:27:83:9d:
04:72:02:5f:29:13:88:13:c5:11:b5:b0:04:a2:9e:f7:12:23:
34:b1:7e:fa:75:ab:9b:09:37:4a:ec:33:eb:3a:ad:39:35:e5:
ad:2c:86:63:65:91:f3:de:a3:55:9a:23:75:3d:2d:f6:8c:42:
15:9d:4f:a6:36:e8:76:6f:12:2a:a5:9d:db:4a:f6:9f:b2:15:
67:3f:74:55:1a:7b:85:79:57:f0:db:b2:26:57:01:88:a5:57:
c8:cd:28:59:7a:bd:f7:b0:44:f6:a5:05:cf:3f:ef:33:7c:79:
15:a9:b7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:28:36 2025 by rpki-client