Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
File: Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft (raw, json)
Hash identifier: amQwvLINFh/xQmuxx5C3Bz22cLUHmDi4zVByood3XrY=
Subject key identifier: BA:7C:B2:E1:7C:E6:53:20:87:96:93:36:48:45:2F:D1:6B:73:31:CA
Authority key identifier: 43:0E:09:49:DF:59:30:F6:B7:9E:FC:BD:9C:BA:17:4C:A2:13:F5:69
Certificate issuer: /CN=430e0949df5930f6b79efcbd9cba174ca213f569
Certificate serial: 0196A01A84D1DCB1AB1F1C4FF5FF5A706283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
Manifest number: 14B8
Signing time: Mon 05 May 2025 11:00:14 +0000
Manifest this update: Mon 05 May 2025 11:00:14 +0000
Manifest next update: Tue 06 May 2025 11:00:14 +0000
Files and hashes: 1: B2zXHYwEq1mSDhRzWM21ZLKQRZ0.roa (hash: P+0tfOZ2RaLt/nUPuFjZ/CAtJcAtybwXEXHcIsSIUm4=)
2: Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl (hash: P6OKt7sBLhmQpe+L8H9jb1mX7+XPTIQ4c204XEftmFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:1a:84:d1:dc:b1:ab:1f:1c:4f:f5:ff:5a:70:62:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430e0949df5930f6b79efcbd9cba174ca213f569
Validity
Not Before: May 5 11:00:14 2025 GMT
Not After : May 6 11:00:14 2025 GMT
Subject: CN=ba7cb2e17ce653208796933648452fd16b7331ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:a9:0b:d2:2a:f6:67:26:e7:e5:3a:c4:95:
62:b9:0f:3c:95:40:dd:62:d0:c0:4c:d9:f3:60:0b:
60:05:a5:99:fc:e5:f0:9d:3f:68:49:54:c4:2c:28:
1e:03:ea:25:f6:77:c8:c3:70:65:64:80:af:c9:81:
f6:42:5e:59:4a:b9:1f:7d:62:22:d2:f7:f2:5f:b5:
84:c3:0f:8a:57:38:a9:00:ef:a8:80:88:32:18:2a:
6c:7a:bc:54:a4:26:8b:02:2d:65:bd:ea:01:c1:a0:
8e:39:ae:38:2d:f5:5c:8e:f7:00:47:57:17:a6:65:
fb:7f:d5:f6:9b:67:08:b5:5c:13:12:e3:56:94:e0:
aa:7a:c0:27:29:c2:b3:b2:dc:33:cf:ec:66:3b:30:
82:ba:29:c8:8e:cc:1e:a0:c7:78:3d:5e:e5:c0:32:
42:94:f0:2b:e0:99:04:df:48:16:4f:80:ad:52:f0:
e7:4b:a6:d7:52:52:63:6f:92:a2:85:58:df:5b:f8:
6b:fe:e7:fb:75:4e:24:8e:55:1f:84:51:99:ac:82:
5b:c1:d5:1d:6a:f0:38:cc:e9:20:12:45:45:bd:34:
1d:fd:1b:c8:a0:a7:8e:5e:6c:7e:b1:1b:46:08:11:
cb:f9:0b:db:b6:95:d8:ee:46:12:93:99:4f:f4:ba:
a5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7C:B2:E1:7C:E6:53:20:87:96:93:36:48:45:2F:D1:6B:73:31:CA
X509v3 Authority Key Identifier:
keyid:43:0E:09:49:DF:59:30:F6:B7:9E:FC:BD:9C:BA:17:4C:A2:13:F5:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e0:6a:e5:97:df:4b:95:b6:ac:4f:7c:bd:2d:0b:0e:0b:3e:
ec:7c:36:f6:60:7f:43:8a:0b:1a:2b:06:81:e3:50:10:26:09:
4f:0e:f5:25:82:06:6c:9c:ff:9d:e0:02:98:ab:c3:79:3e:d7:
6c:c7:cb:90:57:f1:0f:95:5c:21:15:38:41:aa:7f:1c:37:2d:
0d:78:c9:59:df:bc:b0:dd:d2:14:cb:c6:f2:9f:7c:98:b2:68:
6d:09:8a:32:84:b1:46:ad:a9:a7:e7:22:97:95:93:a9:12:9c:
dc:96:53:9c:f8:ca:a5:80:33:32:ff:00:3f:0c:ba:03:b9:3a:
01:09:77:95:fd:b9:a3:45:dd:bd:0a:26:fa:31:73:5b:73:6a:
3f:69:2a:e2:0a:a7:d4:4a:ce:8f:ba:07:18:81:72:82:e0:92:
a6:15:ae:6f:d8:0e:95:fc:24:6a:a4:7a:dd:23:d0:d6:56:2a:
95:4d:b7:c5:32:00:63:09:79:a3:50:ad:45:8a:20:a0:b2:b9:
7e:77:99:aa:77:37:21:d2:b8:7b:3e:73:46:f6:5e:28:b5:0b:
6f:71:c4:81:4e:8c:0e:b7:30:6a:02:16:1f:0a:34:68:57:91:
77:3f:b9:b8:d6:9c:d9:2d:b2:19:b0:83:81:c1:af:20:fc:b2:
b7:9e:d0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:04:32 2025 by rpki-client