Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
File: QvUa6vd0tjOkf5YKcImxWzWxpMs.mft (raw, json)
Hash identifier: meLg3oAYsEGrQAedM57q9BAuNh/qQTZDytn5uxwXeEI=
Subject key identifier: B1:C5:0C:0A:04:4B:31:AA:95:5C:11:64:94:C4:1F:31:3D:50:52:D8
Authority key identifier: 42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
Certificate issuer: /CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Certificate serial: 01969F0899E0F876155153472A9690F6F4A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
Manifest number: 05EA
Signing time: Mon 05 May 2025 06:01:03 +0000
Manifest this update: Mon 05 May 2025 06:01:03 +0000
Manifest next update: Tue 06 May 2025 06:01:03 +0000
Files and hashes: 1: QvUa6vd0tjOkf5YKcImxWzWxpMs.crl (hash: OhE5L0kYK2Jusei7GqZMURJDcKb65P5ftN3u2IrcufU=)
2: t9VupHYPOlXRe5J5x5F4CIePTBk.roa (hash: Fm6IUpzI362dwSd1jnTljFQdqkkno6k0hmV6iA3oMoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:99:e0:f8:76:15:51:53:47:2a:96:90:f6:f4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Validity
Not Before: May 5 06:01:03 2025 GMT
Not After : May 6 06:01:03 2025 GMT
Subject: CN=b1c50c0a044b31aa955c116494c41f313d5052d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:04:88:7e:64:9e:89:3a:c8:71:1b:b6:2a:4d:
6b:97:6c:55:85:6d:bb:02:8d:d0:ca:af:e7:3f:d2:
f4:b8:c0:a9:89:9f:2f:9a:71:c2:ea:1a:b4:79:90:
22:84:ef:c1:2c:5a:a1:9b:1b:3b:6e:fb:c3:c8:4e:
71:d5:57:3e:6b:50:e1:95:0a:c8:08:1d:50:6a:2b:
32:63:fb:9e:01:70:76:66:00:41:e1:c5:9b:ea:d0:
d0:55:b7:d3:99:79:21:c7:83:15:70:98:bf:2d:a3:
9b:96:48:e9:37:18:71:69:f0:9e:40:cb:50:c7:47:
d4:06:5f:5e:38:21:2a:16:e2:c2:b6:a7:dc:4d:0e:
02:4f:71:89:48:f2:c1:bc:78:16:4d:2b:e9:01:6f:
40:ac:22:64:ee:d6:f9:36:b8:f4:14:bb:53:7b:c9:
a6:92:6a:50:4f:88:2d:62:7c:05:07:94:9a:bc:8d:
02:1b:ac:c7:7d:1c:5e:5e:51:13:f5:fd:e2:e7:58:
25:aa:1d:f4:6d:4c:2d:5b:c3:1d:ff:78:c0:d6:21:
99:f7:6f:32:e3:6f:09:9f:dd:4c:8e:3b:57:a2:c3:
3b:ea:6a:0f:67:12:48:90:7f:29:9b:bd:a1:33:f0:
35:31:4a:22:ea:bb:50:46:ac:94:ef:ec:35:b7:3a:
94:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C5:0C:0A:04:4B:31:AA:95:5C:11:64:94:C4:1F:31:3D:50:52:D8
X509v3 Authority Key Identifier:
keyid:42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:80:ba:a4:35:05:ee:ad:cd:c7:3f:fe:60:75:15:29:af:cc:
a5:6a:d5:35:27:2f:93:04:a4:fb:c7:19:f1:bb:df:38:2d:0c:
5a:53:fc:96:eb:54:d5:29:86:95:e0:ce:bc:61:c7:cb:c6:d1:
dd:c3:06:50:e4:93:68:5e:11:d7:3c:ce:8a:4d:44:8e:37:0a:
39:6f:0e:87:70:95:03:20:de:15:48:ab:1c:1f:01:28:5d:bf:
00:5f:31:a3:e2:3e:a2:9f:53:5b:db:e7:64:c7:fb:06:c5:43:
e5:5a:9f:a8:8a:a9:2a:3f:dc:29:68:60:34:b1:8a:9d:73:d3:
54:b8:56:fe:cb:7e:30:f5:e4:41:6b:87:e8:67:66:a6:87:b1:
e6:f6:e1:5a:85:ca:eb:bd:0a:9c:2c:ff:40:19:f7:53:29:02:
dc:ee:d4:1e:27:36:0d:ff:e6:19:a4:9b:db:ae:ac:06:17:c0:
92:c4:de:7a:3b:6f:7c:12:f8:8d:0c:8a:4d:48:a3:16:38:6a:
a1:42:f7:0d:0b:85:f3:d4:2a:29:61:e1:6d:8e:ae:78:0c:93:
44:54:9f:88:ec:8c:64:02:65:6a:7d:8e:36:4a:ff:2c:62:49:
11:f8:ad:41:b5:1b:d5:e8:0d:78:8e:9e:53:9c:f6:25:21:ac:
96:7c:8f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:43:33 2025 by rpki-client