Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
File: q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft (raw, json)
Hash identifier: HjqCn0yebF7cB8c2Rujqlno5Ex+XDV5fw7yWaPpPNDI=
Subject key identifier: 4D:0C:7B:9D:AD:CA:39:44:0E:49:39:44:3F:DD:52:DA:84:CA:AF:0B
Authority key identifier: AB:86:32:67:B5:B7:3D:B0:7C:80:E7:4D:71:5B:67:36:D4:FB:A9:FB
Certificate issuer: /CN=ab863267b5b73db07c80e74d715b6736d4fba9fb
Certificate serial: 0196B446D924FE1A2E6616F0893EF87CF1B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
Manifest number: 0405
Signing time: Fri 09 May 2025 09:01:04 +0000
Manifest this update: Fri 09 May 2025 09:01:04 +0000
Manifest next update: Sat 10 May 2025 09:01:04 +0000
Files and hashes: 1: auh_CELZVQItOo9vbdk8bNA5drU.roa (hash: lsZhhuWVu0Ccaib1jj0SXulSIcbRTpNBfg+1fElDPKs=)
2: q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl (hash: po/7B6v1mE5xMlUsNItvqYXprIew88qvxLpSA4be/tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:46:d9:24:fe:1a:2e:66:16:f0:89:3e:f8:7c:f1:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab863267b5b73db07c80e74d715b6736d4fba9fb
Validity
Not Before: May 9 09:01:04 2025 GMT
Not After : May 10 09:01:04 2025 GMT
Subject: CN=4d0c7b9dadca39440e4939443fdd52da84caaf0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1e:ff:6a:4a:bd:6e:b6:86:ed:cb:be:20:09:
2c:86:fc:6c:3d:03:18:5b:e3:cd:20:41:72:21:44:
fb:18:f5:7a:35:29:61:1d:6e:5b:86:37:e7:6a:a7:
e0:43:d7:98:21:e8:84:b7:10:7a:7e:27:32:90:5f:
bf:0e:82:21:ab:c9:e6:d8:a8:cc:63:c5:81:cd:b5:
e3:44:b7:b0:74:6c:bd:b4:e9:02:94:8d:a2:97:84:
b9:18:e7:19:af:4b:cc:af:2e:63:98:94:e3:68:d5:
ac:7e:a0:1a:13:07:8a:76:d7:13:6f:d5:cf:10:79:
37:aa:05:3d:94:6f:53:90:68:89:1b:1a:ca:7d:ac:
47:90:08:bd:de:81:2e:db:13:57:48:ae:fe:f8:4d:
06:f5:92:7d:14:2c:24:82:e7:f4:16:82:23:71:ba:
23:3f:12:e5:c6:8a:19:72:f2:79:73:1f:b7:b6:10:
24:3b:a0:d4:9f:53:13:d8:46:1d:d5:e9:d9:b8:7d:
78:8f:84:12:8f:6e:b0:aa:4b:2f:6e:8e:af:a4:fe:
43:e0:a4:b6:06:6a:4f:d0:d1:0d:0b:49:42:b6:b6:
5c:70:a9:66:4e:f7:61:b5:fe:9d:f7:1e:9c:ef:c1:
e2:d4:ff:a4:00:90:9d:b5:92:c5:11:85:75:a3:79:
76:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0C:7B:9D:AD:CA:39:44:0E:49:39:44:3F:DD:52:DA:84:CA:AF:0B
X509v3 Authority Key Identifier:
keyid:AB:86:32:67:B5:B7:3D:B0:7C:80:E7:4D:71:5B:67:36:D4:FB:A9:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:99:03:62:b7:51:7b:ec:ee:c0:54:94:6f:1c:3b:f4:73:97:
dd:97:34:57:d2:11:74:5d:df:9d:20:86:89:03:6b:f6:8b:68:
b2:08:f3:d2:a3:bb:a9:e4:97:c0:13:43:2e:6f:2b:09:73:9a:
7b:92:37:06:ea:05:fc:53:25:6c:c5:cc:29:98:d3:61:35:d0:
99:87:a4:1f:06:d3:92:9f:c8:0a:ae:8c:dd:33:b0:6a:40:46:
53:18:53:78:11:39:e5:ae:c9:01:44:c9:bf:04:33:e3:70:5c:
40:1a:59:f0:1c:0e:79:84:3e:46:0e:3d:69:21:af:07:8c:07:
00:cb:61:79:9f:94:ec:58:51:76:de:53:81:a2:60:fb:02:0c:
c2:d4:c9:f4:c9:ae:f5:eb:fe:7c:dc:ee:67:99:4d:b8:b9:3c:
80:74:18:af:13:37:0c:3e:5c:38:11:56:b1:52:e6:f9:ae:18:
06:fb:34:23:5d:11:de:9c:a9:20:68:02:76:d2:e6:f6:fd:a7:
fe:57:cb:57:ae:26:fa:0e:00:a1:d2:c1:d5:be:f7:e2:2b:38:
0c:98:11:03:aa:19:87:bb:99:b6:ae:0d:28:be:20:6f:9e:54:
c0:54:b9:54:f2:8e:e6:61:85:f8:ad:16:a7:e3:1a:7e:c7:ff:
08:6d:e8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:16:05 2025 by rpki-client