Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
File: qSskQKfHot_PLkIW2oo73mi5uJg.mft (raw, json)
Hash identifier: PchrPvuhTQLF+xJx7XtFQwL6Rn+KKL3JnObw6KM1zlY=
Subject key identifier: A9:36:1A:81:52:8E:6C:C4:5D:2B:8B:3C:CF:33:A9:56:DB:13:55:AF
Authority key identifier: A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98
Certificate issuer: /CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
Certificate serial: 0196B710AE2E5E89EF5C69D3E82DB6F8B1A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
Manifest number: 14C4
Signing time: Fri 09 May 2025 22:00:45 +0000
Manifest this update: Fri 09 May 2025 22:00:45 +0000
Manifest next update: Sat 10 May 2025 22:00:45 +0000
Files and hashes: 1: _n0xC-sidbdSFPfTnRV-lr4kGic.roa (hash: ++bpQemmXYA46AzwIRn3gko69y6uULCJsSLSxSSwsGM=)
2: qSskQKfHot_PLkIW2oo73mi5uJg.crl (hash: 2qrKpfOsFGrk0TM7KHXeOKKxCb+S5VOsp8XtgbKSE14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:10:ae:2e:5e:89:ef:5c:69:d3:e8:2d:b6:f8:b1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
Validity
Not Before: May 9 22:00:45 2025 GMT
Not After : May 10 22:00:45 2025 GMT
Subject: CN=a9361a81528e6cc45d2b8b3ccf33a956db1355af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:30:ec:ef:3e:3f:70:22:1a:c8:86:33:72:91:
1e:11:da:0b:d3:51:ce:91:95:7b:58:cf:23:77:ae:
b1:ab:77:75:9b:b9:80:85:8d:0d:27:56:3e:26:8a:
a3:e2:d3:58:ca:e3:da:c6:ff:14:06:63:41:64:f8:
18:ae:70:07:a8:9b:62:8e:35:42:28:b5:f4:40:49:
b7:54:de:ce:ec:d1:b9:e2:d7:a6:df:48:85:69:9b:
73:a4:94:c8:2b:b8:99:b6:0d:f5:36:0d:7e:27:ff:
68:02:24:99:80:4c:ec:62:d6:8c:b8:c7:e0:50:77:
aa:a6:66:44:d8:ad:5a:2b:ec:66:9d:d1:b2:44:e4:
66:a0:1f:7e:1d:fa:4f:1b:53:41:83:94:0b:d4:d3:
88:f4:21:97:68:38:a2:a4:d1:06:ee:a5:30:64:c9:
ca:8f:e6:0f:69:86:1b:58:6a:38:bb:c5:94:50:8f:
93:89:54:03:1e:ab:5a:18:7a:6b:a3:62:77:64:96:
59:56:41:8d:b8:88:3d:5c:da:22:18:a6:2b:e9:30:
ff:8b:8c:00:b9:26:f2:76:47:02:40:22:d5:d2:89:
fa:4d:c2:de:89:14:6b:01:5c:98:81:b4:b4:14:5d:
3f:73:0b:74:a2:2d:a6:10:cd:09:dc:43:38:cd:a6:
e2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:36:1A:81:52:8E:6C:C4:5D:2B:8B:3C:CF:33:A9:56:DB:13:55:AF
X509v3 Authority Key Identifier:
keyid:A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:32:95:b6:d9:c1:38:12:90:f8:5f:09:82:9a:f0:6c:95:66:
c3:a1:57:9a:8d:52:d2:f6:8b:36:07:b0:d3:de:0f:f5:f6:2b:
8e:06:9a:56:4f:54:eb:51:69:13:6f:26:7e:32:9e:0e:cb:64:
06:c1:84:2d:02:af:d7:6d:b8:06:07:c2:fa:87:36:f9:f1:ff:
dc:d1:f8:01:f2:26:a6:6b:cc:54:ff:f3:c7:bf:1a:ce:c4:5b:
b4:9a:37:0c:46:f2:f1:f7:cc:62:0b:b6:2d:f8:c4:5b:6f:fc:
21:4e:21:be:9e:11:bb:25:86:aa:1b:84:fb:df:31:c9:65:21:
8d:24:9d:6b:3e:9e:59:1a:d1:f6:bd:09:a0:d2:64:ca:4d:7b:
39:96:eb:42:37:39:d9:40:2b:17:32:51:01:cf:b7:5a:34:3b:
ad:10:20:bd:54:fd:77:90:d8:ac:45:90:64:88:2d:ac:50:cb:
56:7d:67:43:5f:02:ec:e9:28:26:ea:51:f0:b0:59:16:34:52:
d5:39:61:eb:24:c7:a4:9c:f3:2c:53:83:19:50:1a:a0:93:7d:
ad:18:e9:8d:3a:98:71:31:98:4d:bb:62:64:51:ea:bc:29:54:
13:46:09:2d:38:7f:73:89:a1:6f:60:26:37:81:14:4a:c4:c6:
80:76:e3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:55:45 2025 by rpki-client