Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
File: QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft (raw, json)
Hash identifier: YTwnGeW+cpkilZlcv0/mmoSp1Zyim7/8wo1KvRcB8Qs=
Subject key identifier: BF:F1:ED:61:12:75:31:BA:75:A5:5B:D5:60:6F:68:2E:8E:D8:FD:A8
Authority key identifier: 41:9A:82:BE:1E:16:42:2F:9A:88:54:9A:F6:D5:42:48:1D:69:1A:C9
Certificate issuer: /CN=419a82be1e16422f9a88549af6d542481d691ac9
Certificate serial: 0196C126589018879BC109515D94E2F48A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
Manifest number: 042A
Signing time: Sun 11 May 2025 21:00:37 +0000
Manifest this update: Sun 11 May 2025 21:00:37 +0000
Manifest next update: Mon 12 May 2025 21:00:37 +0000
Files and hashes: 1: QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl (hash: 426wfqhvtWsy0CswsZ57iECIXK5dYEuMIFrFyCgwE7U=)
2: ixxoDXsLiKFHG8cJ3pni9CuIWeY.roa (hash: e7F9bx5lz4I+jxRKeA3TL2cV3HxTGyF8ndmJymIUkLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:26:58:90:18:87:9b:c1:09:51:5d:94:e2:f4:8a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419a82be1e16422f9a88549af6d542481d691ac9
Validity
Not Before: May 11 21:00:37 2025 GMT
Not After : May 12 21:00:37 2025 GMT
Subject: CN=bff1ed61127531ba75a55bd5606f682e8ed8fda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:11:b3:56:12:52:04:8f:34:e2:35:81:26:a1:
15:c0:15:fe:72:b9:da:91:38:ef:e6:c0:d8:1e:e0:
ec:93:78:9c:e1:ed:a5:dd:85:49:3b:85:bb:f9:4e:
11:10:41:d6:ce:19:85:64:cc:80:13:2f:12:b2:5f:
3f:32:79:07:c5:a1:b2:f5:e8:cd:e4:ab:7d:80:55:
df:5c:c2:73:00:a0:11:36:31:c4:7e:f5:d6:cb:d9:
2d:b5:32:a2:bb:b7:a3:ec:44:21:33:04:ef:a9:c8:
65:f0:fb:53:6f:48:8f:81:4e:9b:53:b3:01:03:f8:
33:f7:ce:f2:5d:fc:8e:73:23:c5:a9:c2:01:37:28:
e6:68:ac:3e:fb:a3:c1:d4:ec:de:92:d8:64:a8:42:
bc:09:27:fc:5f:b7:19:da:fa:c9:cd:87:e2:e5:82:
ab:ae:c4:92:ef:c4:3e:d4:3e:5d:01:e5:7c:94:d3:
1b:3a:30:03:30:48:27:eb:bd:80:38:e3:bd:18:56:
1c:6a:33:96:d3:70:31:1d:b3:18:2c:aa:8e:0f:32:
d2:4b:96:be:c0:e8:14:83:ae:37:d2:c7:9d:1f:a9:
d0:6e:65:35:ea:a2:9f:9e:9f:3f:87:70:a3:5d:fe:
b3:73:40:45:47:5b:18:8d:ac:81:7b:d9:2b:27:cb:
bd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F1:ED:61:12:75:31:BA:75:A5:5B:D5:60:6F:68:2E:8E:D8:FD:A8
X509v3 Authority Key Identifier:
keyid:41:9A:82:BE:1E:16:42:2F:9A:88:54:9A:F6:D5:42:48:1D:69:1A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:21:e4:4e:61:42:3e:35:76:35:e8:f8:b6:ac:13:a9:5a:41:
31:d1:30:37:1a:35:fb:71:02:35:02:21:eb:ed:0f:35:23:e0:
d3:33:b7:9e:7f:cd:9a:cb:94:06:8a:eb:a8:90:28:64:cf:32:
2f:0a:87:6d:e9:00:41:bf:ab:3b:d2:34:c2:2b:25:59:c0:e6:
a5:cf:f4:e0:be:d1:c6:16:49:28:f8:4a:1d:1a:90:a8:1a:d0:
74:b4:b8:c5:d0:7c:f5:33:4c:dc:46:4d:c3:8f:8d:ef:7d:b5:
f2:f8:d7:50:3d:ad:ad:e4:95:28:39:9c:c2:bc:b6:51:ae:ee:
ca:90:57:fd:c8:f7:b3:3e:6d:f7:48:13:b9:58:74:65:89:14:
9d:05:2f:ba:cb:cd:4c:ca:98:86:49:35:c6:d1:4e:84:75:73:
60:86:0e:bf:18:20:b2:70:9b:0d:6d:61:7c:d3:1f:c5:37:fb:
83:dd:d9:99:a5:b0:f8:bf:56:46:b4:28:27:88:82:40:67:7d:
36:6d:7d:57:2b:fa:d5:1f:87:42:00:27:94:79:71:92:32:f1:
cc:14:32:86:34:e4:34:f8:7b:da:27:ff:d5:42:2d:7c:ac:46:
24:63:07:8e:55:d8:91:ed:fc:cc:46:72:70:c9:04:64:5f:f1:
e4:05:e3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:12:13 2025 by rpki-client