Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
File: Qfg9IXNOBVXHoTxIVhygt3V6ago.mft (raw, json)
Hash identifier: 96e0IqGGjipwfYX69AfVidRFhEZ4h2tN4IPHk58X5S4=
Subject key identifier: 3F:AF:01:0A:E5:EC:E3:CF:0F:3E:B7:74:5B:94:C4:75:4B:79:D9:3F
Authority key identifier: 41:F8:3D:21:73:4E:05:55:C7:A1:3C:48:56:1C:A0:B7:75:7A:6A:0A
Certificate issuer: /CN=41f83d21734e0555c7a13c48561ca0b7757a6a0a
Certificate serial: 0196AC56092B666386073FDEB691D7B271EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
Manifest number: 152B
Signing time: Wed 07 May 2025 20:00:41 +0000
Manifest this update: Wed 07 May 2025 20:00:41 +0000
Manifest next update: Thu 08 May 2025 20:00:41 +0000
Files and hashes: 1: Qfg9IXNOBVXHoTxIVhygt3V6ago.crl (hash: inJktDHMMwNSD+16NqZ/ofL/RxJW/vaNzdJ1ey5+S/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:56:09:2b:66:63:86:07:3f:de:b6:91:d7:b2:71:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f83d21734e0555c7a13c48561ca0b7757a6a0a
Validity
Not Before: May 7 20:00:41 2025 GMT
Not After : May 8 20:00:41 2025 GMT
Subject: CN=3faf010ae5ece3cf0f3eb7745b94c4754b79d93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d4:e0:5f:08:65:9b:44:82:27:38:b6:91:59:
27:66:78:11:56:d8:2c:81:40:c5:32:8b:9c:be:7b:
66:64:12:97:d6:61:76:31:4d:8c:49:b8:4f:b9:4c:
0f:ad:90:d2:28:19:45:be:3c:23:38:e3:a0:31:31:
81:ab:e2:51:24:61:91:a9:f7:d8:f0:d7:1b:39:a7:
5d:17:b1:58:49:fb:c4:0e:a5:39:29:d1:57:24:7d:
9e:e8:6a:d6:07:71:be:0a:1c:14:29:9a:11:f5:63:
18:1d:d4:7d:12:d8:a5:2e:f3:bf:3b:95:3d:ed:c5:
d6:3c:cf:81:d6:7a:48:4d:cd:d9:18:6f:5a:2a:02:
e5:78:47:c9:58:3a:52:85:81:20:8a:7a:30:d8:d0:
f0:7d:29:75:e4:ed:01:28:ea:87:8f:10:f4:cd:85:
26:69:a9:78:18:8b:9a:8c:e2:dc:54:ea:f1:bc:a4:
a9:14:e5:ef:25:e2:6f:0b:b8:29:a8:37:5b:95:2f:
bc:33:02:be:36:4d:b3:5d:f6:46:a0:a1:b2:92:0d:
3d:4c:97:70:b2:fd:27:fd:3c:e5:48:c7:c0:df:e8:
91:63:09:b7:02:96:a6:c6:1f:bf:09:1b:5e:3e:3b:
ef:ab:69:bf:30:d9:b7:1d:b7:82:c3:5c:ee:6b:e5:
14:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AF:01:0A:E5:EC:E3:CF:0F:3E:B7:74:5B:94:C4:75:4B:79:D9:3F
X509v3 Authority Key Identifier:
keyid:41:F8:3D:21:73:4E:05:55:C7:A1:3C:48:56:1C:A0:B7:75:7A:6A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:77:f9:23:e4:e1:63:78:c2:04:49:44:b4:aa:d6:0b:05:79:
c6:5f:4e:d8:b0:54:c1:f7:18:60:79:7b:c7:33:d4:45:c1:09:
ec:64:1b:e0:9a:6c:a5:6c:f8:29:c9:43:98:f6:70:55:61:7a:
e0:6d:f7:c9:2b:bf:1a:0c:fc:3b:75:be:75:f9:15:7b:67:29:
ae:76:40:27:05:2a:be:55:a9:0f:b1:0c:93:8d:9c:05:5d:cd:
e1:2a:6f:97:16:c9:6d:5f:16:af:be:87:9e:5e:5a:a3:c7:25:
93:29:42:07:b5:f9:67:91:66:0a:10:cf:78:d9:a6:c6:e0:50:
d6:2e:44:46:ff:48:0d:b6:0f:e0:c2:9e:a8:53:65:51:bd:20:
eb:61:1e:72:42:5c:2a:f0:e1:33:82:3e:fa:68:d6:83:69:ac:
b7:4a:a5:7e:6b:1b:70:54:65:94:1c:43:3f:49:7a:12:50:12:
b8:79:09:be:46:0b:ac:2d:bf:95:f7:63:60:b0:13:10:d8:71:
80:be:38:21:2a:d1:2f:b5:43:5d:aa:56:88:4a:ea:6d:92:a9:
45:2c:85:6c:1d:81:19:8d:f6:fe:3d:47:5b:0b:c9:da:5e:53:
6b:3b:f1:40:ee:fa:ca:75:64:91:0d:ab:4d:10:d2:44:c2:e5:
50:dd:1e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 02:41:51 2025 by rpki-client