Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
File: rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft (raw, json)
Hash identifier: GZ95rWZAroJSd5j4YZ0MgW7hkzS3f5ylvkuDAYHHC/I=
Subject key identifier: 69:49:C7:A8:16:5D:87:A9:C1:70:7D:F6:7C:BA:D1:9E:55:16:BC:39
Authority key identifier: AD:0D:C1:08:B6:0F:47:B0:D9:77:28:08:E5:FC:C3:81:EA:A8:1C:78
Certificate issuer: /CN=ad0dc108b60f47b0d9772808e5fcc381eaa81c78
Certificate serial: 0196CCF3962FFE11D435FA178A43DC2A5D7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
Manifest number: 094A
Signing time: Wed 14 May 2025 04:00:37 +0000
Manifest this update: Wed 14 May 2025 04:00:37 +0000
Manifest next update: Thu 15 May 2025 04:00:37 +0000
Files and hashes: 1: OUGzudtTbJQVw_1mFk8aHx4RCVE.roa (hash: pnWv/Z4SyVfyPYv0oxknc3DOerNA4xLQHYB0+b/8kWY=)
2: rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl (hash: H56z2t11vO+reYcKEc5y0FvEUXRTSYYl5iTNTMYWCM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:f3:96:2f:fe:11:d4:35:fa:17:8a:43:dc:2a:5d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0dc108b60f47b0d9772808e5fcc381eaa81c78
Validity
Not Before: May 14 04:00:37 2025 GMT
Not After : May 15 04:00:37 2025 GMT
Subject: CN=6949c7a8165d87a9c1707df67cbad19e5516bc39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8b:35:2b:7f:1c:c0:d1:ff:b5:ce:da:dc:9f:
ad:1d:d8:11:ec:54:3c:43:c2:63:d4:27:88:54:75:
56:61:ea:70:5a:13:60:7b:83:29:56:56:e3:22:84:
1e:18:79:e3:57:26:7e:58:6d:27:d1:91:c1:20:46:
c2:cb:64:ca:45:34:4c:c7:83:dc:54:58:3a:78:71:
60:3e:3b:6c:4b:e3:1f:3c:c3:30:e8:e5:45:5c:4c:
37:99:79:94:f3:5e:4a:6f:4a:31:50:7a:53:7e:57:
3f:de:12:8e:e9:a1:1a:8b:fe:cb:2a:73:ad:01:ea:
62:55:0b:9d:b1:4e:1e:37:09:ed:b7:76:a9:a1:f7:
eb:4a:54:84:cc:58:00:bd:c1:ed:37:6a:e9:64:da:
7f:24:e4:b7:af:57:f2:3c:bf:82:8b:92:5c:1b:be:
52:bc:fe:1d:e6:96:93:83:de:18:a5:9e:fe:ad:24:
4a:32:62:67:03:7f:95:6f:af:71:1b:4a:73:5d:7a:
e2:a1:87:ee:79:4e:77:e8:c2:33:5b:1c:82:f6:cc:
8b:50:d7:21:30:97:f1:61:5e:5b:e5:cd:36:12:db:
65:a3:7a:ff:d4:d3:4c:f8:a7:f7:d0:f9:5a:8c:34:
9e:a0:8b:c9:18:58:95:2f:bf:9f:2c:e4:8f:cc:89:
fb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:49:C7:A8:16:5D:87:A9:C1:70:7D:F6:7C:BA:D1:9E:55:16:BC:39
X509v3 Authority Key Identifier:
keyid:AD:0D:C1:08:B6:0F:47:B0:D9:77:28:08:E5:FC:C3:81:EA:A8:1C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:09:3a:ea:67:9d:a4:40:4c:9b:f9:ae:4b:03:74:c0:b2:8b:
d6:a6:e4:fd:eb:86:00:18:db:0e:97:77:b1:89:a2:d7:c0:93:
1a:ad:ea:24:5a:47:03:63:6b:5a:8e:28:b3:b0:34:16:cd:ac:
26:22:d2:67:b5:50:cb:12:6f:7b:a3:02:0a:44:77:c5:e4:e2:
b2:9d:d1:b5:60:d4:c9:08:fb:8e:9a:88:b1:37:59:50:87:09:
d6:d3:ea:64:7a:9b:43:96:bd:96:10:f9:ff:ec:65:3d:a3:81:
39:fc:24:bc:a4:1c:40:06:95:18:4e:91:b3:0a:5d:15:83:8d:
2f:e4:5b:85:24:fb:04:3f:54:e1:02:f1:78:71:e4:21:88:6d:
b0:f3:26:2f:a6:75:46:bb:fb:3d:01:79:ec:f9:3c:09:3c:95:
d2:79:83:4f:0c:ca:4b:5c:26:f2:24:9d:28:b2:70:95:2f:3a:
06:96:be:f6:d6:f8:f0:e2:eb:69:c0:06:60:89:7b:72:68:a2:
6e:34:3f:06:f0:0b:7c:8e:09:04:fc:94:e0:6e:88:45:98:09:
29:c8:30:ed:d7:eb:fb:ba:52:4f:42:01:48:65:5d:b3:9c:85:
1c:40:da:23:82:34:b6:8c:a2:af:30:71:2e:c9:80:7c:1f:69:
da:b4:eb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 10:36:20 2025 by rpki-client