Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft
File: qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft (raw, json)
Hash identifier: Jy7ERY8EwGLor8dfU8lavTQ2dbMMdMS6RMxKKnTPtW8=
Subject key identifier: 00:61:65:6E:A1:A4:A0:18:D5:D7:41:FA:61:7C:45:F0:2E:28:89:90
Authority key identifier: AB:34:4B:32:F5:8B:56:4C:89:7A:1F:FA:69:67:08:91:98:F2:C8:22
Certificate issuer: /CN=ab344b32f58b564c897a1ffa6967089198f2c822
Certificate serial: 0196C1CB34A9CB005C7BDB78520BC56F0995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft
Manifest number: 0322
Signing time: Mon 12 May 2025 00:00:42 +0000
Manifest this update: Mon 12 May 2025 00:00:42 +0000
Manifest next update: Tue 13 May 2025 00:00:42 +0000
Files and hashes: 1: gS2YYEML9M4UNWK3VVDTZTM54bA.roa (hash: mr7+UlZRci6ZTeqcdGCeGzmY9P3YX+uy/+4p1bdlnM4=)
2: qzRLMvWLVkyJeh_6aWcIkZjyyCI.crl (hash: jq+4/xTUaD5tuY5SWmkKYjH/ueGw+gz7mBQiqfXjJWI=)
3: tSdceX3_WKYPOSqNpQt9_4TBFn8.roa (hash: zZjSigYgJ8knWkj4u0ar/HI7QTSKBL8PUuzQf8DJQWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:34:a9:cb:00:5c:7b:db:78:52:0b:c5:6f:09:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab344b32f58b564c897a1ffa6967089198f2c822
Validity
Not Before: May 12 00:00:42 2025 GMT
Not After : May 13 00:00:42 2025 GMT
Subject: CN=0061656ea1a4a018d5d741fa617c45f02e288990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:77:6e:b0:e6:e7:6f:68:bd:4a:f7:44:49:4c:
a1:77:99:31:44:63:89:24:7b:ef:4e:7e:df:5d:e9:
95:00:42:bc:ac:a7:b8:35:08:7b:b4:a4:64:95:33:
b9:7a:37:2a:7c:c5:b1:56:c6:98:78:1e:e3:cb:d4:
4f:d1:d0:59:ec:df:f8:ac:f7:3a:63:2c:4b:70:cc:
45:97:d1:52:72:bf:95:a3:38:aa:a6:7e:f7:58:ef:
d4:14:12:24:fe:a2:ae:72:78:75:2d:b3:68:d1:b5:
ad:d1:7a:22:5f:1b:01:50:32:a8:d2:83:c8:2e:11:
47:66:d6:17:7d:3c:62:51:37:0a:88:fd:00:dd:ea:
93:2f:91:bf:bc:4c:8f:fb:09:cd:9f:2c:28:94:d3:
19:f2:7b:6c:77:46:2c:83:7f:d3:2e:30:26:bd:7a:
c8:dd:5c:40:98:ff:b3:df:1d:da:61:bf:e3:32:2b:
1c:af:3b:eb:5d:9d:b1:8b:1b:4f:f1:1f:34:c2:c5:
ba:f1:cc:ca:ca:83:28:d3:39:94:93:0f:4a:35:f4:
2e:21:56:32:a1:08:34:4d:77:76:d0:f9:81:10:f5:
95:a5:1c:d4:d3:63:44:ae:96:11:b3:af:bf:53:0a:
79:ee:22:62:88:a4:78:48:31:c4:57:99:a5:c4:cc:
30:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:61:65:6E:A1:A4:A0:18:D5:D7:41:FA:61:7C:45:F0:2E:28:89:90
X509v3 Authority Key Identifier:
keyid:AB:34:4B:32:F5:8B:56:4C:89:7A:1F:FA:69:67:08:91:98:F2:C8:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b9:2e:10:7d:5f:5e:41:b8:44:df:a6:2a:62:e2:f0:07:38:
09:94:1e:b0:c1:f7:5d:cc:8b:25:73:1e:d0:3a:9b:d2:4b:ae:
38:c3:b3:7e:c4:73:92:0b:4e:3e:59:23:3d:52:80:61:9f:9b:
ec:d8:6e:b5:a1:75:74:60:4f:73:bb:d2:b2:67:98:c9:87:19:
05:de:81:df:d7:4b:03:35:81:36:e0:a3:78:aa:0f:5f:8e:c0:
df:ce:17:86:e9:4f:a5:3f:bc:73:c9:99:e9:d4:31:07:09:1c:
75:33:1b:a1:c2:59:bb:05:cc:98:40:9b:32:aa:7e:f2:3d:d2:
10:3b:bd:bd:5f:52:b9:43:82:ea:c1:b0:1f:90:bf:1c:fa:8f:
25:20:1c:f1:cb:b4:e5:19:5f:da:a9:ed:7d:2f:a3:e3:06:01:
8f:01:9a:b8:29:97:07:12:5e:d0:a4:04:9e:f6:69:3c:59:e0:
e4:fe:27:8a:9d:29:ff:7c:b4:f7:3a:7e:09:d4:21:cf:5f:fd:
a0:d8:1f:34:c6:3e:f1:c4:42:3f:77:d2:7e:22:62:32:c6:c0:
c9:3f:53:11:35:80:5f:43:e4:df:86:6c:ad:7f:8a:53:05:cf:
b9:be:ee:34:b7:1a:ff:18:da:ae:a7:2e:d2:af:70:1b:5b:db:
5c:a6:fd:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:56:55 2025 by rpki-client