Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
File: QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft (raw, json)
Hash identifier: SSbTNM1RT4i1dEudHLv1L0JuTeOGbWikxX+7GU2CnW4=
Subject key identifier: D5:B8:30:4E:11:97:0F:04:05:0E:21:34:72:16:1C:AB:B7:46:F0:54
Authority key identifier: 42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
Certificate issuer: /CN=42004477243ca20b95dc8efe07337639806f6075
Certificate serial: 01969FE3C062F0439D58FC9F9BF0539497CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
Manifest number: 1472
Signing time: Mon 05 May 2025 10:00:25 +0000
Manifest this update: Mon 05 May 2025 10:00:25 +0000
Manifest next update: Tue 06 May 2025 10:00:25 +0000
Files and hashes: 1: OEwb1lDHunikfNaNODhoAnbiQCo.roa (hash: wWLLrhKTcf6mPU2Bqqwm1puc/7JHEkcQ5M3ZaPHxpgg=)
2: QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl (hash: iyQbmQfjIx2PfXFllp0rhxlRkt0peiXDqu5BbPvA6dY=)
3: vn8Vk2vP0QzgnWs8YePhZCt8-Lc.roa (hash: NAYB0xo+Xhi57/QawXnfFqpG2CzRv0IH2N4vezreDYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e3:c0:62:f0:43:9d:58:fc:9f:9b:f0:53:94:97:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42004477243ca20b95dc8efe07337639806f6075
Validity
Not Before: May 5 10:00:25 2025 GMT
Not After : May 6 10:00:25 2025 GMT
Subject: CN=d5b8304e11970f04050e213472161cabb746f054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7e:75:76:c2:96:af:e8:18:18:96:8f:b7:1e:
84:84:ee:f5:49:10:44:fe:db:33:39:31:a3:09:b1:
5a:4d:2c:34:d0:69:d4:33:4d:1b:56:82:e1:74:99:
cc:4a:3a:ed:f4:b4:9b:60:7c:5c:ca:92:d9:07:b1:
91:9f:fd:2e:e1:7d:dd:5d:59:0b:5f:41:37:e9:38:
84:55:9e:ed:09:2d:d4:9a:ef:c5:46:15:db:79:68:
a1:0d:9a:07:a0:c3:77:53:ba:e3:8a:e0:de:a8:5a:
95:96:7e:3e:bd:ce:be:bf:bd:65:5c:7c:b3:ff:cc:
a7:f4:f3:ba:43:82:6f:71:3e:dd:e2:87:3b:c0:a5:
f4:dc:61:3f:6a:66:26:36:d3:86:7d:86:94:5f:34:
bb:3e:3d:0b:3d:71:1d:35:dc:b8:cf:af:02:1f:07:
98:6b:2d:02:03:36:7f:11:0e:5b:0a:4b:ef:26:b5:
13:32:07:a1:a5:3c:0b:47:51:9e:25:75:ce:3a:d6:
b9:ac:d3:48:a4:0a:26:ff:9e:7f:1e:59:e3:79:18:
da:1a:77:df:26:97:8c:f9:49:96:4d:95:1d:d4:71:
ff:12:fe:e5:e0:c6:f7:bc:03:7f:1b:65:69:f2:9f:
b8:4e:1b:4d:10:7a:80:f4:bf:c2:98:26:08:8a:fd:
b4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B8:30:4E:11:97:0F:04:05:0E:21:34:72:16:1C:AB:B7:46:F0:54
X509v3 Authority Key Identifier:
keyid:42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:23:36:be:18:54:ac:a8:9a:47:7b:aa:b9:ab:ca:25:9c:70:
51:dc:bb:1d:05:80:21:d2:7e:f1:5e:05:bd:1e:db:e5:8e:bb:
a2:2b:78:40:6f:b2:39:b5:41:83:62:f0:08:8f:23:80:92:62:
65:0e:8b:55:a6:ff:1b:fd:d0:57:55:7f:37:62:b4:0e:a0:6b:
c5:02:c1:5e:33:4c:44:62:9a:b3:2c:b8:25:6e:1d:05:24:f7:
9e:42:03:3f:11:0a:7b:fa:e2:67:a5:1c:ae:dd:9d:a1:de:3c:
c1:c6:7d:7f:8d:ab:57:8f:8c:1d:d2:26:1c:b4:79:7b:42:57:
87:49:63:2a:88:17:bc:32:ce:51:2d:39:3f:3e:81:17:96:a9:
f2:cd:b3:a9:70:37:cc:c7:61:95:a7:d5:78:6f:90:4f:c1:c3:
c7:46:99:11:a2:53:ad:84:4d:75:d2:c3:f1:53:01:97:90:88:
bd:85:2c:9b:ac:f8:1f:6d:58:83:9e:4c:e8:32:d3:eb:a2:22:
b3:68:51:1a:ee:ed:ef:44:e5:25:62:1d:36:5f:c1:13:91:93:
70:d8:98:a0:75:c4:f8:5a:7e:98:9b:eb:e3:e7:d0:ab:18:9f:
e0:19:ac:67:cd:9e:e7:a0:f6:4e:e4:d2:d5:31:04:4d:4f:ce:
cf:09:b7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:59:35 2025 by rpki-client