Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
File: qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft (raw, json)
Hash identifier: F/yyI2UVwHF/bVec9pzPdDxORGDO/UZtOQe3aj7jmA0=
Subject key identifier: 8B:72:86:0D:3B:21:52:92:96:8B:79:D7:06:F5:31:21:73:EE:7F:80
Authority key identifier: A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
Certificate issuer: /CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Certificate serial: 0196BB5B2CB0FE36077039447C3446B548FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
Manifest number: 029E
Signing time: Sat 10 May 2025 18:00:36 +0000
Manifest this update: Sat 10 May 2025 18:00:36 +0000
Manifest next update: Sun 11 May 2025 18:00:36 +0000
Files and hashes: 1: Pdk1L9w3iAsdUTSgBaCMpP43Lfc.roa (hash: l+PHwAcEJ9+JdHW+J9w4HmPhehTBZx7nVK+BVTGzJcs=)
2: qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl (hash: /1Dm2etnqvsXxfPcOY+sHxt/K0b9THU1d8dlwQ6vGqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 18:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5b:2c:b0:fe:36:07:70:39:44:7c:34:46:b5:48:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Validity
Not Before: May 10 18:00:36 2025 GMT
Not After : May 11 18:00:36 2025 GMT
Subject: CN=8b72860d3b215292968b79d706f5312173ee7f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:67:f0:36:87:7f:77:89:8c:a6:ea:f8:aa:08:
ca:5d:db:ba:6f:b7:9c:12:12:6c:7b:29:65:d4:cc:
55:af:98:50:de:e7:af:4b:8e:30:f9:dc:e8:b8:47:
c7:f5:da:33:20:bb:d1:12:7a:6f:67:cb:e5:92:f8:
79:ef:57:a2:ee:7e:fe:a7:50:b7:28:a0:c6:55:be:
f5:ae:05:12:a4:93:78:75:26:01:60:c6:1a:3d:e4:
bc:bf:84:0a:25:65:fe:06:eb:46:3a:2e:1f:59:bd:
3a:9d:de:da:b1:1f:d6:10:69:c2:ad:bc:f0:04:e7:
ec:cd:c8:f3:25:c4:4e:66:44:99:c1:12:fb:f4:c9:
56:3c:88:c1:47:a5:9a:bc:3a:b7:43:8c:e4:a2:4c:
54:aa:97:ea:c4:79:8f:8e:9b:fe:98:2d:80:c9:53:
73:00:80:ee:c4:07:22:bc:6c:4f:cd:2a:b3:29:4a:
78:6b:27:d5:7f:eb:56:85:bd:b1:b1:54:7a:fc:59:
45:88:f1:41:cd:c1:81:78:04:f6:41:31:da:f5:98:
e3:a2:74:00:01:2b:cd:4e:3a:ee:38:ef:ff:09:d6:
e5:8f:0c:71:00:42:4e:c4:5b:25:13:5a:3f:f6:e3:
71:f4:67:a0:93:8b:0f:20:e2:e4:fb:38:c9:a1:a4:
37:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:72:86:0D:3B:21:52:92:96:8B:79:D7:06:F5:31:21:73:EE:7F:80
X509v3 Authority Key Identifier:
keyid:A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:33:f0:eb:e4:42:58:1a:08:95:f4:a9:e2:13:40:52:71:c6:
52:06:6b:9b:a8:01:7e:fc:93:1f:5c:61:3b:27:f0:ac:f8:c3:
62:3f:b7:9e:81:ec:12:4b:17:e8:62:fa:67:0f:7e:cf:db:c7:
83:a8:96:aa:b8:b3:a0:d6:0a:68:50:52:a3:11:4f:ee:de:ef:
35:47:f3:23:84:12:bd:93:45:f6:d6:e5:88:bb:bc:14:2f:c9:
90:4a:82:6b:ea:be:b6:03:4c:92:8d:88:e6:50:fd:fa:e9:50:
15:48:e7:68:f5:84:44:7d:56:42:ee:b3:57:54:f6:5e:e0:ce:
6a:4d:07:32:36:ca:a5:77:58:be:55:15:80:ce:54:c8:8e:cf:
33:66:c4:95:d0:3f:0b:e1:cd:d6:4d:e1:ee:3d:4e:31:98:e8:
70:af:0e:81:f9:f1:28:00:db:47:20:a8:26:c4:12:0e:24:83:
9e:84:20:6d:b7:10:2d:bf:ef:9c:e7:d2:30:41:4d:bc:96:2e:
67:c0:7c:a1:c8:c6:7b:c8:93:3c:4c:1e:a9:ca:54:47:3b:e6:
e5:c7:6d:1c:68:3f:cf:8e:b3:ed:94:17:e5:08:7a:ef:19:47:
33:29:d5:a0:ab:74:86:97:8b:79:ed:5d:75:9c:87:dd:28:b7:
b1:19:62:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:17:30 2025 by rpki-client