Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
File: qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft (raw, json)
Hash identifier: tPg1W7cVJ/tf/dVvrgg+HesfnZHEb0HKRtSqHAuV1io=
Subject key identifier: 37:4A:45:5D:73:EC:CD:5B:17:FC:62:1F:B5:D4:80:B4:79:94:2A:B2
Authority key identifier: A8:45:70:85:4F:E8:86:B9:4A:E6:25:36:3C:62:5D:DA:60:BB:3E:FC
Certificate issuer: /CN=a84570854fe886b94ae625363c625dda60bb3efc
Certificate serial: 0196B1453F561FD5484C25D28D9A6AC42370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
Manifest number: 14C0
Signing time: Thu 08 May 2025 19:00:27 +0000
Manifest this update: Thu 08 May 2025 19:00:27 +0000
Manifest next update: Fri 09 May 2025 19:00:27 +0000
Files and hashes: 1: jdn52CanAogysSSsHvxl8oKYqEU.roa (hash: nA6uVwF0uVARnhrLjCGdNBrWcovmnCAcVghKvtj+qwk=)
2: qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl (hash: XJo8WbIBjsJH0etiq5SrJvgrgJibjhC+sjMsn59T+uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:45:3f:56:1f:d5:48:4c:25:d2:8d:9a:6a:c4:23:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84570854fe886b94ae625363c625dda60bb3efc
Validity
Not Before: May 8 19:00:27 2025 GMT
Not After : May 9 19:00:27 2025 GMT
Subject: CN=374a455d73eccd5b17fc621fb5d480b479942ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a6:ec:84:ca:ee:dd:23:bb:d7:c7:35:ac:05:
db:ea:50:53:f3:4f:66:c3:88:63:47:a5:a0:f8:a5:
65:ff:0a:86:d5:16:88:b7:8d:3a:a6:f5:0d:2d:86:
7b:3e:b6:1b:d5:04:36:f1:79:cd:83:80:89:5e:1e:
8f:42:69:a4:9a:e8:2f:cb:fc:36:41:f6:24:49:04:
01:e9:ab:4b:ee:2b:b7:10:de:59:95:ff:eb:59:0a:
dc:d6:4a:df:c6:1f:5c:bf:23:b9:7c:1a:ee:f1:e2:
f5:53:11:1f:79:ee:9b:9c:80:41:6a:fe:4a:89:cc:
7f:b3:d1:a9:c7:fe:c4:be:c5:e4:49:f2:af:b8:7d:
8b:e8:89:b3:6a:29:d1:b0:47:a8:85:f5:61:60:00:
ef:a4:61:e2:b9:16:ec:61:1e:13:78:61:3d:3e:4a:
35:d2:7d:b7:ad:97:aa:1e:b8:fa:0e:ed:5d:1f:6d:
87:e7:03:fd:65:c3:5f:a8:48:6c:e8:40:11:b6:f6:
1d:08:fc:2c:16:6f:31:62:3e:ab:98:e3:80:d5:9c:
39:bc:97:61:fc:d5:47:60:49:39:a7:57:cd:47:4c:
ab:98:43:44:07:72:11:25:7e:c2:a5:86:62:00:05:
ec:74:dd:da:98:ff:5b:13:90:ea:a7:9e:6b:c3:19:
6d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4A:45:5D:73:EC:CD:5B:17:FC:62:1F:B5:D4:80:B4:79:94:2A:B2
X509v3 Authority Key Identifier:
keyid:A8:45:70:85:4F:E8:86:B9:4A:E6:25:36:3C:62:5D:DA:60:BB:3E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:af:30:e2:6c:fe:21:e7:6c:a5:2b:04:a7:18:0e:c9:74:c4:
90:3c:63:73:97:41:99:d6:c5:3d:66:72:0a:0d:e8:49:f3:31:
8a:ea:76:34:de:3a:87:bd:8d:19:fc:4a:59:e7:cc:1b:0e:ff:
2d:e6:01:1c:29:2b:b4:8b:b2:4e:48:b2:04:b8:f6:80:29:ed:
2b:a2:01:48:be:9a:ad:d7:07:5c:31:91:6e:b0:79:35:b6:84:
9e:7e:aa:c0:56:06:00:73:11:b1:48:14:53:d6:07:82:b9:cd:
8d:e4:08:ab:8e:66:30:16:99:79:9c:20:52:b6:88:b1:b8:28:
4f:2f:9a:39:c3:2d:4c:f8:9d:9a:3f:bc:f5:f1:bc:8c:d2:fe:
dd:30:1d:98:e9:86:d0:f5:c6:8c:45:21:75:ae:74:a7:ab:c1:
d9:60:a7:cc:f7:a9:aa:5d:05:43:20:66:37:d2:36:20:f3:45:
60:5f:75:43:df:74:11:e5:d6:14:8f:0a:e1:f5:b6:16:d7:e6:
b1:0f:ae:73:fe:36:92:78:f4:75:89:05:42:a9:f1:c9:80:e8:
a7:a2:fc:83:80:8f:c6:9f:83:b9:38:c7:53:1b:78:6e:c9:cd:
17:f7:e2:4a:2b:67:cb:2e:22:d3:32:d6:0f:7f:2c:5f:91:1c:
9b:c1:13:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 03:01:19 2025 by rpki-client