Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
File: qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft (raw, json)
Hash identifier: 3S8VCsObTC/tKaj87k6sD4hSGRoJlCJvmouV21/C1qI=
Subject key identifier: 0F:2C:64:A1:F4:50:4C:15:54:22:47:FF:67:F6:92:0B:C4:21:50:41
Authority key identifier: AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
Certificate issuer: /CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Certificate serial: 0196C6BA9909E7F3A9412BF0485AB29F60FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 23:00:39 +0000
Manifest this update: Mon 12 May 2025 23:00:39 +0000
Manifest next update: Tue 13 May 2025 23:00:39 +0000
Files and hashes: 1: 6IkTOlXjuiMiUAcYz6JmNLyjzkI.roa (hash: lvYkGWBMeYPfRVhHecKPB+lCXAgyiJ169VcA0wekGsU=)
2: e4TuQp4c2N02mdWdlxAx2GM5rFg.roa (hash: TkgW2WEclpl44YPmskP1q4vEinXMPrmbVI0ndJ9d/ec=)
3: qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl (hash: 7roakkvOwa+QCxluBPzECdlipo6noPECYk4J5lkT8HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:ba:99:09:e7:f3:a9:41:2b:f0:48:5a:b2:9f:60:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Validity
Not Before: May 12 23:00:39 2025 GMT
Not After : May 13 23:00:39 2025 GMT
Subject: CN=0f2c64a1f4504c15542247ff67f6920bc4215041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b8:08:56:4d:ba:10:bb:14:31:2d:62:d7:d6:
0e:17:8e:ad:e1:07:82:a9:15:1a:9f:67:11:39:5f:
b6:26:81:5d:ec:38:ee:d8:64:47:eb:87:b9:35:41:
6d:fe:23:46:cd:c4:38:a7:82:65:71:18:c2:60:31:
5a:5d:9c:c7:b3:d4:35:c3:cc:63:65:93:37:8d:ff:
4c:da:ed:6f:4a:74:1a:1f:41:19:5b:ce:c5:fa:ac:
a1:22:59:3f:de:e2:13:8c:7a:fe:a8:1e:9c:14:c1:
22:bc:7e:d9:95:59:fc:7e:a5:54:3d:37:8f:21:f6:
b8:7d:42:2a:49:21:5a:f2:71:b3:9e:53:ff:77:2b:
65:45:94:f3:a7:76:42:c4:e9:76:fb:99:9f:18:57:
68:f1:cb:76:16:96:fa:88:1b:47:f9:c0:f5:04:8c:
3e:96:7f:5b:6e:d9:e2:7b:1e:ae:d4:1a:f2:b7:98:
78:20:68:63:c3:a2:15:81:f4:4c:6a:e2:35:d2:5e:
93:ef:dc:2d:8e:04:e3:52:9d:ae:a2:80:7c:99:84:
54:de:e4:5a:c3:1f:09:2a:6a:aa:5f:c8:8d:47:92:
6d:bd:44:0d:17:6d:ce:73:b3:8e:02:ae:3f:89:a0:
9d:7b:63:6f:e5:f1:74:a4:8f:05:bf:b4:3e:4e:6c:
6c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2C:64:A1:F4:50:4C:15:54:22:47:FF:67:F6:92:0B:C4:21:50:41
X509v3 Authority Key Identifier:
keyid:AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:56:ce:c3:a5:ad:78:4d:8e:84:51:df:bd:af:2b:43:88:15:
2e:97:57:24:2f:85:fa:1a:ad:7f:3a:61:54:39:d1:49:b8:c8:
d2:6a:74:ff:08:fb:be:2b:07:ff:4a:ee:d9:83:5d:ca:b0:24:
65:3c:89:7e:bb:42:d0:e3:12:93:46:eb:ea:fb:7a:ec:fc:a6:
32:5b:b5:b3:20:75:32:d0:ed:e5:0a:10:db:f7:f6:cb:08:48:
ca:02:ec:82:31:cd:4b:16:95:04:fc:56:20:63:8d:6d:22:4a:
8d:3a:2c:73:1e:9c:e8:13:2b:f6:5f:79:95:5a:38:f6:9e:58:
d8:2e:6c:d7:4d:ba:0e:07:93:af:19:d2:56:54:1d:f4:87:30:
f4:c9:f0:6e:5c:4a:54:6d:0a:3f:b1:a7:c7:f1:ac:94:e7:57:
22:84:2a:4d:7b:a2:7b:0b:f6:b9:f6:63:42:b4:fc:9b:63:7e:
c7:f5:10:b0:ed:fe:ad:de:e4:d1:ab:21:e1:31:65:96:59:d1:
50:5b:86:4a:5e:6f:b7:41:2e:3c:80:79:6e:dc:f0:22:61:89:
75:6e:94:11:1f:0a:29:75:72:fd:04:f4:38:19:a2:23:40:18:
fd:04:65:33:3b:21:33:a3:fe:45:af:9c:08:d0:49:71:78:bf:
69:4d:92:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 03:26:30 2025 by rpki-client