Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
File: qqxhl3mf1otuW74LV-ZS_YDdNiE.mft (raw, json)
Hash identifier: TIqE1HW51juvkjXIzKsu9aUAYxWyPE7RZny5qsOOyd0=
Subject key identifier: 76:A7:99:DD:EC:F8:1E:A1:FB:26:94:EF:56:16:74:BB:0C:3D:7B:1D
Authority key identifier: AA:AC:61:97:79:9F:D6:8B:6E:5B:BE:0B:57:E6:52:FD:80:DD:36:21
Certificate issuer: /CN=aaac6197799fd68b6e5bbe0b57e652fd80dd3621
Certificate serial: 0196CACDECCB59875553A7B6CB873CE5BC14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
Manifest number: 0128
Signing time: Tue 13 May 2025 18:00:15 +0000
Manifest this update: Tue 13 May 2025 18:00:15 +0000
Manifest next update: Wed 14 May 2025 18:00:15 +0000
Files and hashes: 1: HW--gyFyIjJfbbNnSxJATPWJGEI.roa (hash: shKJNjvcZlh2Drp2JswFM6L89Fwml75F7pDB0H15/3Q=)
2: qqxhl3mf1otuW74LV-ZS_YDdNiE.crl (hash: ELu3RIn/aUVXY1+7exyBEOyRF1HHB+cSiKxiMOu73sY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:cd:ec:cb:59:87:55:53:a7:b6:cb:87:3c:e5:bc:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaac6197799fd68b6e5bbe0b57e652fd80dd3621
Validity
Not Before: May 13 18:00:15 2025 GMT
Not After : May 14 18:00:15 2025 GMT
Subject: CN=76a799ddecf81ea1fb2694ef561674bb0c3d7b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6c:0b:4c:a8:35:fc:fb:6a:5c:b0:85:d6:89:
67:5a:69:ae:c3:3c:62:85:5b:27:d8:94:92:88:ba:
85:a0:12:c2:e7:e6:f5:82:48:8b:a6:ec:77:9b:34:
f7:5e:7e:6f:07:2a:f0:2e:e2:c6:d5:5b:1f:1c:97:
b5:23:d6:65:e1:f5:a9:53:13:bc:82:45:a3:fb:61:
96:38:6c:c0:f0:ae:ca:17:f9:79:43:46:40:8a:30:
90:5b:a8:e1:5c:77:c3:ef:18:be:68:1b:f2:7e:0a:
2b:1b:1d:59:1e:a1:c2:d7:6d:86:c2:24:d4:3d:11:
2a:3c:9e:3a:9e:4e:4c:ff:e9:af:a7:21:9e:75:84:
4a:e4:d2:2f:93:f8:cf:c4:9b:2d:fe:fc:82:7c:df:
97:ce:28:f9:14:cd:0b:b5:bd:60:be:2d:7f:11:14:
52:07:b1:0f:20:f4:42:ee:f0:c7:eb:a0:26:a0:90:
f3:6a:6e:ac:d7:e5:a6:30:c4:94:05:eb:9c:1e:1a:
12:2e:3f:ad:40:4d:6e:81:df:fe:58:78:c2:f0:cd:
5c:e7:de:88:a4:ef:10:dd:04:b6:ed:c4:eb:78:16:
d8:a8:d1:7c:3c:db:5e:8e:37:a7:3f:45:3e:0a:61:
33:aa:92:36:94:0f:ed:c8:d2:99:b0:cb:23:3e:4d:
07:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A7:99:DD:EC:F8:1E:A1:FB:26:94:EF:56:16:74:BB:0C:3D:7B:1D
X509v3 Authority Key Identifier:
keyid:AA:AC:61:97:79:9F:D6:8B:6E:5B:BE:0B:57:E6:52:FD:80:DD:36:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f5:69:85:51:c2:e2:e9:e1:40:f4:28:0f:99:bc:e0:21:0a:
a6:be:e5:ec:84:aa:cd:95:05:8a:13:82:5d:4f:aa:49:35:c1:
bb:ba:ad:81:e1:a2:ee:53:ac:88:50:04:3f:61:dd:eb:15:73:
4f:bc:6e:c1:82:32:1f:3d:91:d1:fc:89:0f:78:00:b7:61:e1:
ab:82:2d:4d:59:8a:ce:c0:a3:eb:30:1a:11:78:8e:e5:b3:36:
48:84:81:9f:f2:4c:c8:b8:90:cb:7f:c7:3f:df:51:fe:62:95:
25:61:e3:b3:1b:1f:b0:2d:b7:4b:b5:a8:db:39:b7:1f:df:6f:
f8:36:0f:43:22:da:84:ca:ff:a1:36:7a:e3:6f:2f:ed:3e:54:
32:c9:76:23:08:29:f2:53:02:70:6c:ab:33:ec:cf:94:39:36:
0b:a6:83:49:6f:4a:67:dc:a1:cf:25:9e:d5:bc:55:7f:80:21:
2c:06:77:c3:5b:1e:6b:22:5e:13:47:3a:3a:87:b9:03:1d:76:
02:95:6a:6e:f3:2c:5e:ec:50:52:16:77:17:93:11:2f:e5:2b:
d8:32:03:2c:f5:e3:88:f5:1b:b5:57:08:5b:1d:b3:62:41:15:
b7:ca:51:4c:7e:f6:79:ab:2e:2c:8b:6f:af:7d:ee:04:2e:98:
99:e9:d3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:26:35 2025 by rpki-client