Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
File: cqPGykNevb-W__pMXZjkYAgo9xI.mft (raw, json)
Hash identifier: odrMgSJ9z9gY97mgCYvpYcmb+EuYhCeaQ113uUBFEH8=
Subject key identifier: B9:09:86:9C:5E:11:1A:C9:97:E3:B3:15:A0:90:58:75:80:1B:4D:73
Authority key identifier: 72:A3:C6:CA:43:5E:BD:BF:96:FF:FA:4C:5D:98:E4:60:08:28:F7:12
Certificate issuer: /CN=72a3c6ca435ebdbf96fffa4c5d98e4600828f712
Certificate serial: 0196C0B88A662B2B3BBCFBBF9BB653F53180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
Manifest number: 1078
Signing time: Sun 11 May 2025 19:00:41 +0000
Manifest this update: Sun 11 May 2025 19:00:41 +0000
Manifest next update: Mon 12 May 2025 19:00:41 +0000
Files and hashes: 1: QyiciSZUfA8bsg20fCYi0TNFfDg.roa (hash: nzxPGRU8Smq/P38KhFAc/j16WQcASyHCTt9cYC5aCls=)
2: cqPGykNevb-W__pMXZjkYAgo9xI.crl (hash: IHDhnUcZZu/0cvFKGMbYKa0S00nDQyzJ1oE5F1ak9Tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:8a:66:2b:2b:3b:bc:fb:bf:9b:b6:53:f5:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72a3c6ca435ebdbf96fffa4c5d98e4600828f712
Validity
Not Before: May 11 19:00:41 2025 GMT
Not After : May 12 19:00:41 2025 GMT
Subject: CN=b909869c5e111ac997e3b315a0905875801b4d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d7:84:0a:7a:0f:73:0d:54:e2:86:0a:47:13:
8e:4b:2f:af:2e:11:ef:07:80:d8:d6:a6:db:bc:22:
f3:7e:ff:18:a5:be:53:8b:b4:7d:dd:07:1a:69:70:
a8:5b:30:04:86:9f:f7:f5:ca:2c:d6:e4:cd:e6:a6:
9e:57:e4:b6:c1:02:94:11:bf:c0:6c:e8:c7:37:22:
34:c6:22:01:6e:a8:0d:c5:31:8a:00:dc:ee:cb:bf:
26:2a:6c:d5:9a:57:30:50:97:55:ae:cd:3a:34:88:
10:85:c9:9c:e1:e0:07:07:f9:9c:5c:5e:a4:e2:6b:
18:da:8f:c9:29:32:2d:d4:5d:bf:5f:f9:e1:bd:08:
1a:da:5d:2d:c7:46:1c:36:e4:d4:c5:63:65:9e:d0:
fb:43:2f:94:6c:58:6e:8a:c2:3a:47:0d:4c:38:85:
10:d0:7d:1e:33:8b:fa:92:5b:60:ae:94:9e:6b:31:
c0:8d:37:7d:cb:5b:a4:87:6e:d9:6d:49:ef:6c:e0:
f6:74:d8:87:01:d8:e9:7c:d0:b1:3b:b5:30:6f:ef:
11:12:c3:3d:40:38:50:83:3d:ba:f6:21:15:b1:3b:
84:51:73:bb:cc:23:12:2c:6f:1d:f3:45:fb:cb:21:
94:d7:dd:3e:90:98:ab:ba:21:b3:de:7e:0f:00:6f:
14:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:09:86:9C:5E:11:1A:C9:97:E3:B3:15:A0:90:58:75:80:1B:4D:73
X509v3 Authority Key Identifier:
keyid:72:A3:C6:CA:43:5E:BD:BF:96:FF:FA:4C:5D:98:E4:60:08:28:F7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:57:b4:2d:ed:fa:a2:e4:56:86:18:af:6f:9f:9e:c1:e6:12:
0e:52:7b:b6:02:9c:dc:a7:b7:30:64:85:f9:01:72:ea:0f:13:
cc:0e:bd:cf:5c:be:34:2f:40:2b:33:be:68:dd:9d:42:a6:f1:
64:31:e8:e9:92:5f:0d:a5:66:79:67:3f:8e:dd:2a:b9:5d:fa:
29:21:2b:69:02:1f:ee:21:e5:e2:b6:fd:d3:e0:e1:37:f8:30:
78:d3:65:d1:ad:11:09:48:b6:20:cd:b4:d8:12:22:4d:39:8f:
06:53:f8:0e:2a:e6:04:8b:ab:67:00:7a:50:c8:ef:b9:8f:9e:
55:0b:44:f8:f7:db:11:ee:cd:4c:5a:0e:12:da:ed:44:26:16:
a7:32:3f:8d:7e:76:bc:2b:9d:3f:4f:a6:51:a4:f5:89:7e:08:
74:7c:a1:44:27:57:1a:12:3c:53:cb:fd:92:09:ab:37:17:d0:
2f:0c:9c:dd:f2:af:4b:94:ff:1c:20:f6:52:1f:b1:9e:37:fd:
1f:c2:26:b2:8b:f2:66:f0:b4:fa:af:47:12:3e:3d:e1:65:0d:
d3:f1:5e:9c:1a:68:d0:7d:c3:4c:6a:da:79:48:18:51:f1:b3:
7e:19:6a:25:09:84:6b:ad:75:3e:61:fd:b6:0a:d7:7f:b1:1a:
8e:cd:e9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:47:38 2025 by rpki-client