Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
File: QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft (raw, json)
Hash identifier: P5GhLJOt6fHCDBWoyYEjRbFokZh/H+TUAElYbxYRzP4=
Subject key identifier: 85:C7:E7:CB:35:2A:62:71:A4:10:EE:29:70:8D:1B:F7:1C:81:BB:2C
Authority key identifier: 40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
Certificate issuer: /CN=4003350bcc7b540fadea951e046081d8da06c145
Certificate serial: 01969E2C128DD42ACE098946E082B8A50DB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
Manifest number: 06FE
Signing time: Mon 05 May 2025 02:00:10 +0000
Manifest this update: Mon 05 May 2025 02:00:10 +0000
Manifest next update: Tue 06 May 2025 02:00:10 +0000
Files and hashes: 1: QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl (hash: pe3Kj1EG9vicW1vcP5V+007OSbc8ItjaeILJsxiePrA=)
2: pqlsmAxEb6u37QxzF6qCzpQ4SBk.roa (hash: teI/DPbnnC6ro04KC4yzmzn/SS2I9ht6+3TdoQMOA3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:12:8d:d4:2a:ce:09:89:46:e0:82:b8:a5:0d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4003350bcc7b540fadea951e046081d8da06c145
Validity
Not Before: May 5 02:00:10 2025 GMT
Not After : May 6 02:00:10 2025 GMT
Subject: CN=85c7e7cb352a6271a410ee29708d1bf71c81bb2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:e8:c1:84:c6:9d:3b:f9:4c:dd:ca:1b:19:
51:08:54:20:24:04:35:44:a3:54:36:db:cd:bb:55:
18:79:1a:12:93:93:e6:96:f9:ff:6a:ba:ec:8a:6e:
f7:55:05:20:ef:37:35:87:f0:80:30:20:af:5c:09:
ff:08:5d:b4:6d:68:01:80:77:13:5a:20:78:d5:76:
bd:fd:ae:8a:46:fb:98:56:8a:bf:89:4f:1c:19:d9:
68:4d:33:34:d4:52:b3:7e:0e:a8:61:4e:29:47:6c:
65:11:15:53:98:71:b7:6e:68:4d:02:81:29:0a:87:
02:9a:38:88:90:f9:59:7b:d0:a5:9f:f5:7b:73:61:
fd:0a:d4:08:65:a0:1d:1a:2b:20:9a:a4:87:44:44:
49:ad:ed:02:93:01:20:fd:b6:37:7e:73:bd:31:d9:
89:c1:6b:5d:26:0b:1b:d7:9b:b2:66:a2:d0:1c:33:
8a:11:43:59:28:21:67:80:37:b2:86:56:ca:b8:68:
0f:0f:c4:27:fe:06:f4:39:81:ed:a4:4b:2e:a5:0f:
a8:58:72:db:1c:6f:09:00:4b:64:bb:cd:de:63:65:
c2:06:03:c2:ef:bd:11:d7:ac:7d:66:45:20:17:c2:
eb:1c:62:f5:be:d7:e3:95:37:ee:b3:88:a0:a2:cb:
ab:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C7:E7:CB:35:2A:62:71:A4:10:EE:29:70:8D:1B:F7:1C:81:BB:2C
X509v3 Authority Key Identifier:
keyid:40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d8:bf:2e:04:10:37:84:ce:dc:e1:80:94:da:5a:6f:2b:97:
f4:06:a0:f3:a6:d7:70:25:7e:77:65:76:0c:fa:49:df:f0:23:
9a:8a:90:40:0f:95:7e:18:d7:17:7f:64:5f:e3:10:7f:91:99:
90:b0:d3:e6:31:f4:49:0d:06:82:df:30:eb:42:da:4f:b7:46:
ab:92:a2:62:e5:87:0f:93:39:e6:a4:c8:de:c9:cb:11:d8:f1:
31:ba:ec:30:5f:be:62:2f:10:e4:56:99:ac:7c:d6:0a:4b:67:
70:c6:c6:ea:da:5d:de:86:ca:18:38:de:1e:d6:54:ac:95:66:
c6:e6:a6:9a:4e:45:e9:0b:ce:a8:ad:a0:bc:4a:82:4a:90:61:
ce:cc:0c:74:71:28:c8:19:55:93:7e:68:99:30:75:7d:9c:ae:
9b:20:69:53:13:47:1b:a2:1f:75:d8:21:f9:72:b3:1a:5e:df:
1c:7a:26:c4:ac:dd:db:00:34:27:3c:63:1f:91:64:65:58:5f:
41:aa:59:dc:0b:91:bf:07:53:ae:dd:29:ce:e0:34:fb:d1:bb:
1b:08:42:8a:a2:0f:d1:48:e7:0e:f5:31:7e:98:74:ea:ee:31:
a0:f0:00:67:cd:0d:2b:33:b9:94:dc:df:d4:7f:3d:f7:04:8c:
35:fa:e9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:52:54 2025 by rpki-client