
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
File: qd_ImBI0BQeiouHnTRGCTe-BPzk.mft (raw, json)
Hash identifier: I2jeeXeK9PJq5y+cLlzhusGO7ZnoYsSkrtahrPWkX5M=
Subject key identifier: EA:77:6C:A4:7E:4C:7C:AF:98:08:53:26:A4:75:9A:AA:B1:31:04:29
Authority key identifier: A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39
Certificate issuer: /CN=a9dfc89812340507a2a2e1e74d11824def813f39
Certificate serial: 0196C1CB82CAEAF525C02B51FCBB8040B64F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
Manifest number: 14C9
Signing time: Mon 12 May 2025 00:01:02 +0000
Manifest this update: Mon 12 May 2025 00:01:02 +0000
Manifest next update: Tue 13 May 2025 00:01:02 +0000
Files and hashes: 1: qd_ImBI0BQeiouHnTRGCTe-BPzk.crl (hash: 1zQ7SGIpnfqvzkCMhGbTj5mIVk6CIQeo4yNPQR7KAGc=)
2: wn31uqf50k5LZthlgOfugKfLtQQ.roa (hash: uQ9o6KlMfbYE1Nkt8fbDl10YjNVh7yxdgG7JtO4ci4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:82:ca:ea:f5:25:c0:2b:51:fc:bb:80:40:b6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9dfc89812340507a2a2e1e74d11824def813f39
Validity
Not Before: May 12 00:01:02 2025 GMT
Not After : May 13 00:01:02 2025 GMT
Subject: CN=ea776ca47e4c7caf98085326a4759aaab1310429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4b:fb:09:4e:f3:1d:c2:1c:14:0d:0a:4a:8f:
86:b0:90:31:4d:e8:a1:db:73:46:de:e4:ef:a9:ef:
74:05:b7:e6:93:ea:b2:56:b1:21:62:86:4b:b5:d2:
79:72:18:0c:1e:88:11:81:11:d9:bb:94:e2:60:5e:
bf:39:99:af:55:f7:13:7c:fd:e8:28:8e:d8:19:37:
fd:8e:e9:2c:ff:34:16:2d:22:fb:fd:09:5e:7f:a4:
5a:57:c4:0c:d9:a2:98:4f:19:fc:75:85:9c:ad:74:
c0:cb:c8:37:9b:5b:f5:06:95:3d:60:cf:09:72:48:
76:47:f4:5e:ec:46:39:c1:49:9b:9d:34:28:9d:cd:
37:92:64:03:b5:a2:1c:7f:c9:4e:3b:27:af:52:1e:
36:36:40:41:46:4f:c7:4a:1a:16:eb:60:4c:47:08:
88:b2:fd:1c:0c:e8:f2:b9:28:1c:3d:80:b0:2e:b3:
dc:c8:d1:24:91:48:2d:7c:07:3c:f6:5f:0e:d4:d3:
ea:92:b1:14:56:09:af:91:d9:7a:37:6c:b0:ff:d4:
25:ec:1b:22:8c:5a:31:e2:dc:d0:e1:f3:f3:b2:d2:
de:a5:69:fe:3c:5b:73:94:4a:66:42:3c:91:28:8b:
f6:23:2d:97:b4:e9:e4:3b:85:da:2c:b3:35:fa:51:
bf:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:77:6C:A4:7E:4C:7C:AF:98:08:53:26:A4:75:9A:AA:B1:31:04:29
X509v3 Authority Key Identifier:
keyid:A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:6e:99:72:5f:1f:0e:fe:0b:db:f2:a9:e2:d4:5a:17:50:19:
f6:be:c4:73:13:de:ed:1f:00:aa:44:5a:6b:fa:c9:b3:fa:3a:
19:aa:8d:04:b5:c0:ed:95:12:de:70:9a:78:fd:dd:dc:92:b2:
ce:54:35:4d:e2:d1:bb:d3:c0:81:29:8d:c6:95:0e:46:c0:13:
5f:b2:b6:15:39:3e:4c:5d:9a:04:ff:70:16:88:cf:c8:b4:a8:
e4:dc:3d:bd:de:ef:d2:24:d5:44:98:38:8e:19:94:76:01:a8:
13:de:4d:8c:a5:a0:4e:75:0a:bc:13:5e:1c:77:34:31:0a:72:
31:23:2c:ae:53:7a:47:9e:72:89:fb:5b:53:1c:07:2a:8e:b4:
62:fc:ce:50:74:0f:c1:60:33:c9:d3:0d:72:06:43:a8:77:b7:
3d:da:98:db:7e:8b:3f:5c:a4:51:4e:4a:2d:19:06:6e:62:d1:
9f:cc:6f:b0:77:f7:c2:54:68:16:a7:78:a3:c1:a1:6d:21:85:
a6:52:75:e3:03:45:58:7c:c7:ff:3d:05:37:0f:24:1c:e6:66:
1a:6c:b2:da:59:ed:0c:93:bb:bd:75:0e:53:db:4b:df:aa:07:
ff:1f:62:09:9d:fa:14:0b:0d:83:85:6c:72:69:f1:a4:46:6b:
ca:6f:9f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:20:54 2025 by rpki-client