Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
File: QdD5FclU2DtKG_GEz7wTjEftpR4.mft (raw, json)
Hash identifier: vqhyNQ6uJDFFnUEtekhyCAebGLj2wnWgh7UK0bBOMRE=
Subject key identifier: E0:8E:3D:AD:53:B0:5D:01:45:39:6F:14:AF:AD:EC:F1:CA:4B:6E:17
Authority key identifier: 41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E
Certificate issuer: /CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e
Certificate serial: 0196C6F19F7C122C85537431F66E07B646B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
Manifest number: 11CB
Signing time: Tue 13 May 2025 00:00:45 +0000
Manifest this update: Tue 13 May 2025 00:00:45 +0000
Manifest next update: Wed 14 May 2025 00:00:45 +0000
Files and hashes: 1: QdD5FclU2DtKG_GEz7wTjEftpR4.crl (hash: g5iap19gLVDVqQy014aVgVyYo9AyCJUl3O66csfZnTo=)
2: f6uKeUIzMA-uVptKc1ueYhFBFxM.roa (hash: yRxjbOfn/yIPjsEZSwuKIczmA3RcTEjtjojH+74JQXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:f1:9f:7c:12:2c:85:53:74:31:f6:6e:07:b6:46:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e
Validity
Not Before: May 13 00:00:45 2025 GMT
Not After : May 14 00:00:45 2025 GMT
Subject: CN=e08e3dad53b05d0145396f14afadecf1ca4b6e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e7:b2:4f:69:ba:e9:5a:83:84:b4:8a:06:b1:
10:52:82:f8:55:70:b0:44:09:2f:90:83:fe:d7:38:
d8:87:62:62:6f:ee:33:d7:8b:62:ee:45:fc:cf:ee:
e2:f0:26:91:1a:61:9c:06:da:ad:ca:2e:d8:31:0a:
50:b5:6d:50:6a:81:6d:b2:d2:98:15:2d:72:e6:d6:
19:bd:25:a5:1a:f9:17:5c:49:1b:b6:9b:c0:da:10:
1b:4c:2d:1b:fc:7a:56:a3:61:90:6f:7e:cb:ae:fa:
ca:cf:d4:73:54:5f:4b:45:4b:7f:b7:7a:ce:62:a2:
ff:ef:d7:e4:92:8c:ff:70:53:f5:36:70:67:de:6d:
69:80:db:7a:d9:c3:6f:9c:e4:b9:c1:1f:35:aa:d1:
57:90:60:89:04:b5:96:94:34:96:36:7c:bb:13:b2:
e0:ea:23:e0:26:bd:6f:21:8d:b6:cf:48:02:97:8e:
eb:08:71:7c:37:50:92:08:ff:4e:a5:c7:e6:9f:62:
ec:70:c7:99:1c:ae:a4:cd:8a:63:c7:64:fe:1b:db:
73:5e:e8:00:27:86:a1:87:f4:95:f0:e7:2a:70:cd:
a9:b9:07:98:87:b0:ad:fb:2b:ee:10:4e:fd:71:bc:
77:4f:6d:71:b3:77:36:24:85:8b:21:f8:16:1c:57:
6d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8E:3D:AD:53:B0:5D:01:45:39:6F:14:AF:AD:EC:F1:CA:4B:6E:17
X509v3 Authority Key Identifier:
keyid:41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:38:b4:2c:53:a1:56:24:ba:60:ae:15:f5:7b:9a:eb:5f:62:
f7:25:35:39:b3:a3:c3:e9:30:91:35:53:00:af:f2:03:f0:51:
03:91:1f:6f:6a:f7:0b:32:6f:37:2a:1d:66:ab:5d:9f:f3:27:
0e:80:3c:96:95:1f:84:d0:e6:89:1a:3c:37:b3:6d:72:0c:ea:
6e:8e:4e:18:8e:0d:b1:f5:a3:e8:9f:84:1c:60:0d:c6:5b:7a:
cf:66:7b:23:9a:dc:0f:03:98:43:f9:d1:6a:eb:cc:25:5c:b6:
42:ff:b6:4f:db:32:6b:20:fe:c3:a2:0a:06:3e:21:86:50:3f:
f9:5c:aa:1c:d8:df:77:88:68:1b:e7:51:bc:66:26:f9:f3:de:
b3:44:42:54:61:1e:cd:ed:17:67:f5:82:78:fb:ac:3c:a9:71:
46:32:f9:c9:11:a6:d2:f1:5f:a4:86:5a:c5:7b:5c:59:b1:fc:
5c:f4:67:d4:9b:8a:9c:dc:e3:14:ab:7e:a5:08:ae:40:42:af:
28:a3:6f:a8:43:2b:4d:41:4e:5a:9a:ae:d3:44:27:bc:38:af:
18:15:d8:a2:c2:00:cf:47:94:d6:34:97:bf:5e:be:7d:fd:7e:
07:da:44:5d:ea:6b:91:65:e8:4f:44:09:32:b4:70:39:23:d5:
28:de:fd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:41:43 2025 by rpki-client