Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
File: QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft (raw, json)
Hash identifier: dTQl8xRIzgzRjSK1yTYZ71KFdwLpujiI8IKQhkURUZI=
Subject key identifier: 07:FA:0C:41:3C:62:C3:D7:80:2E:BD:16:B3:5A:BE:FA:8D:01:AF:0E
Authority key identifier: 42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4
Certificate issuer: /CN=42b4c79a22a3fe987ef31908cd44ff81e9b1acf4
Certificate serial: 0196BE5C59A2ECF1F45E271A6A078FF63F58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 08:00:45 +0000
Manifest this update: Sun 11 May 2025 08:00:45 +0000
Manifest next update: Mon 12 May 2025 08:00:45 +0000
Files and hashes: 1: QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl (hash: kEoXpMUGFSfz3DaXjlWz8X6rovxqcMO9CuPV3RQUB4c=)
2: YAyk3zFlveiyrktJmuMDObuicGM.roa (hash: X7im5gEfQxzJ+2uFiNxaGzJ0zO2RD2TZsOAKFKiJMJs=)
3: umFBgs224fvHmv7UVIkmk-cu2a0.roa (hash: LWAYsABtQECbCV3sDGlu7B0OwEh6Yr4LZp65O/U8FCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:59:a2:ec:f1:f4:5e:27:1a:6a:07:8f:f6:3f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42b4c79a22a3fe987ef31908cd44ff81e9b1acf4
Validity
Not Before: May 11 08:00:45 2025 GMT
Not After : May 12 08:00:45 2025 GMT
Subject: CN=07fa0c413c62c3d7802ebd16b35abefa8d01af0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:da:36:c0:96:75:bd:04:aa:55:c6:60:b5:08:
6a:d9:a1:56:3f:10:eb:2d:cd:c0:27:5a:47:1c:70:
91:6a:4a:cf:82:11:0f:04:ba:42:31:3d:bb:ad:f4:
87:3b:57:46:02:38:06:12:83:8b:29:e2:6a:da:5b:
af:7e:dd:b4:90:19:46:3a:9c:20:10:8e:c6:a1:bd:
8c:80:db:21:22:82:4d:10:9e:e0:42:e5:bd:ef:b4:
76:3d:9c:ac:9c:62:74:75:90:de:6c:ed:27:5f:3d:
73:6c:9c:d6:fb:0c:5c:6d:4c:64:06:06:2b:28:d1:
95:6f:2b:b0:0d:dd:9d:21:21:19:01:ca:e0:ad:ff:
c5:d8:1a:49:67:66:a1:b1:5d:9e:82:ae:1a:90:a1:
ea:14:2d:4d:7a:a3:8e:43:dc:9c:6a:99:2c:02:66:
35:65:4b:ba:bf:3e:4b:14:b0:28:55:c3:2c:a1:f0:
cf:5a:1f:aa:2e:cf:3b:a4:76:1a:78:25:4c:74:a6:
fe:d9:15:79:34:67:35:ff:eb:45:56:2f:6a:d8:6d:
26:e9:57:17:c6:a0:7e:e3:8f:cb:2f:1c:7c:8c:c2:
f8:e1:26:f7:03:42:c1:be:d1:7a:1a:f5:6f:48:89:
97:48:d7:d4:fd:df:2c:09:8e:87:77:27:ea:45:f2:
2e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FA:0C:41:3C:62:C3:D7:80:2E:BD:16:B3:5A:BE:FA:8D:01:AF:0E
X509v3 Authority Key Identifier:
keyid:42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c7:98:0c:75:ce:3d:28:2c:51:10:f9:74:d8:4c:2a:e4:37:
bf:d6:73:b6:c9:90:8c:de:a9:57:22:f0:c5:f7:6e:f1:3b:bd:
5e:b3:9e:d6:2f:e2:a2:0f:58:5d:9d:97:1d:73:89:53:5d:0f:
2d:da:8b:04:63:aa:99:b2:21:2f:7d:06:ef:00:66:29:a8:68:
70:0b:e0:99:d8:3f:52:c2:c0:53:6f:7f:dd:28:5a:04:d6:12:
1b:44:34:da:99:57:63:5f:80:11:d7:45:84:51:a9:a9:2e:8d:
fb:75:9e:a0:91:1d:a5:9a:4e:0e:13:b0:11:3e:27:10:13:5c:
0b:1a:ca:7c:35:7d:c5:61:46:16:6a:ac:a7:8b:8d:90:59:3b:
38:1f:2e:5a:2b:74:c1:25:86:a7:2e:97:d8:ba:2e:0b:80:0f:
c7:cd:4b:97:d4:40:95:9c:df:4d:f1:8e:57:60:d0:1b:e5:98:
e9:84:6a:d8:2f:32:81:82:37:ab:4e:eb:1b:3d:ef:5e:11:55:
e7:c1:68:1f:91:2a:05:d9:4c:d0:63:a2:5f:a3:8a:45:11:a4:
f9:fd:03:97:d4:fb:14:8d:05:af:05:e2:3c:dc:77:12:d1:de:
09:93:50:f4:53:19:d1:69:87:2e:24:1b:11:f9:7c:dd:b8:be:
a1:7b:3d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:48:48 2025 by rpki-client