Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
File: QiYpIEOCMfMh47gQEIiyD5DAjUY.mft (raw, json)
Hash identifier: 0SRX3+SL/NFTlayM7msBGUo6/37rotwo+jlC8Y617FU=
Subject key identifier: A8:92:8D:9C:17:46:04:57:29:95:58:DB:EE:B6:BD:49:E1:80:09:B8
Authority key identifier: 42:26:29:20:43:82:31:F3:21:E3:B8:10:10:88:B2:0F:90:C0:8D:46
Certificate issuer: /CN=42262920438231f321e3b8101088b20f90c08d46
Certificate serial: 0196D1074A0851778F2932A4691C081A0260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiYpIEOCMfMh47gQEIiyD5DAjUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
Manifest number: 04A0
Signing time: Wed 14 May 2025 23:00:37 +0000
Manifest this update: Wed 14 May 2025 23:00:37 +0000
Manifest next update: Thu 15 May 2025 23:00:37 +0000
Files and hashes: 1: QiYpIEOCMfMh47gQEIiyD5DAjUY.crl (hash: xAuOmBbeoLuVJgdQE7Dx5Mt+hw3cVrKDLwmZapuKTQQ=)
2: vzK0GcfKIhsh5S1UL0NdOS-MO04.roa (hash: tbZrlZm8dX+O2bKlUBHktkojMJRjyTWeZk1UwYb3Lj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiYpIEOCMfMh47gQEIiyD5DAjUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 17:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:07:4a:08:51:77:8f:29:32:a4:69:1c:08:1a:02:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42262920438231f321e3b8101088b20f90c08d46
Validity
Not Before: May 14 23:00:37 2025 GMT
Not After : May 15 23:00:37 2025 GMT
Subject: CN=a8928d9c17460457299558dbeeb6bd49e18009b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:28:ca:58:26:4d:97:19:ab:2b:c4:ad:f2:93:
4e:77:1d:cd:f5:9d:41:99:6d:92:b8:ae:84:78:ce:
46:7d:ec:cf:ed:59:6b:54:74:55:8a:93:33:9a:43:
55:d6:54:7f:0a:e9:ad:f0:8f:74:3d:86:40:ea:e0:
81:66:f3:ac:23:9a:05:25:63:ed:34:25:36:a3:79:
b5:ea:cb:39:1a:af:c0:8e:70:a1:c7:df:62:6c:db:
39:ce:fa:c1:06:f0:f6:8e:f9:e8:45:95:4d:81:a6:
69:14:b1:5c:ac:6d:5e:c0:8e:c1:23:44:02:b4:c6:
55:2c:24:ac:90:9d:1f:51:c8:f0:01:9f:96:fb:b1:
57:f5:09:15:a9:00:f3:d9:c5:30:56:0e:29:4f:66:
77:bb:e5:35:c4:d2:60:72:7f:92:5f:7a:7b:6b:57:
4a:14:23:78:58:87:61:ed:7b:79:11:5b:d2:a1:e8:
11:80:90:2b:39:48:bc:ad:90:55:11:06:c8:08:2c:
32:96:25:d3:86:b8:87:0e:1d:49:93:2f:74:d2:bb:
82:e0:05:a5:98:3a:46:4a:f6:86:a5:f7:4f:2c:32:
3d:13:ec:ab:10:35:24:12:83:77:3c:9a:20:67:06:
92:9e:0e:74:22:c8:dd:7c:49:8b:56:1f:41:cc:a3:
b5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:92:8D:9C:17:46:04:57:29:95:58:DB:EE:B6:BD:49:E1:80:09:B8
X509v3 Authority Key Identifier:
keyid:42:26:29:20:43:82:31:F3:21:E3:B8:10:10:88:B2:0F:90:C0:8D:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiYpIEOCMfMh47gQEIiyD5DAjUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:52:d8:14:39:98:91:6d:dc:5c:23:0a:13:76:bd:61:79:8c:
65:88:53:2f:62:94:50:e6:46:7d:29:db:2b:47:9c:32:4f:e8:
64:ea:40:e0:5d:85:36:7d:3f:28:0d:0c:f0:4f:0d:50:89:5a:
4b:3d:d9:22:6d:2b:a6:21:59:88:e3:83:e0:33:a9:68:6f:f8:
fd:34:f5:7f:68:e3:89:4b:a0:76:38:5a:9c:91:b4:75:27:62:
8a:33:06:76:13:3e:63:c2:b4:7f:1f:12:6f:3d:74:aa:de:07:
dd:65:a3:26:22:2e:a0:66:2e:77:e7:87:fe:6e:3f:0e:ce:75:
75:4b:ae:58:ed:08:0e:83:95:84:11:40:33:85:b6:06:e5:33:
06:a4:ad:29:9e:b8:8c:b0:70:2d:5f:06:6b:a6:9e:ff:09:aa:
01:4d:cb:ce:d8:8a:22:4e:3b:d8:65:8d:46:50:12:66:d4:3b:
4f:a6:fb:d1:1d:0c:79:9f:b8:b8:4d:21:84:51:4f:9b:fd:e9:
d8:ce:22:08:59:c3:26:45:7f:3b:6e:5a:54:57:60:5d:c5:74:
36:6d:bc:36:e6:c3:a0:51:79:bb:79:6f:31:54:e0:42:c1:e4:
c6:30:b8:1c:d6:bb:ff:1f:2a:a3:d4:2c:e9:1c:3a:84:12:e1:
11:7f:f8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:39:45 2025 by rpki-client