Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
File: QZaJLQegCQaxt61L-FDYv4CIb7w.mft (raw, json)
Hash identifier: g3fqmv8MIFrzsH1DnATD09y+95sfUKj+oaBSbdLudtw=
Subject key identifier: 38:9A:DC:D7:94:C2:A5:11:0C:09:4A:C2:1E:AC:66:4B:57:0B:7E:6C
Authority key identifier: 41:96:89:2D:07:A0:09:06:B1:B7:AD:4B:F8:50:D8:BF:80:88:6F:BC
Certificate issuer: /CN=4196892d07a00906b1b7ad4bf850d8bf80886fbc
Certificate serial: 0196BA486ABAC963CA320D898FE2762CE2B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
Manifest number: 0110
Signing time: Sat 10 May 2025 13:00:30 +0000
Manifest this update: Sat 10 May 2025 13:00:30 +0000
Manifest next update: Sun 11 May 2025 13:00:30 +0000
Files and hashes: 1: QZaJLQegCQaxt61L-FDYv4CIb7w.crl (hash: L9NazFuyDckib56f3p7lOTOOlpkgpUghlAxme3bmSgM=)
2: e5dMHPand7tLiGm-I939H3JZTvY.roa (hash: y0qgSQNcHHdL0M2B8nXHP7/1AvZVBbtB25JDO+3B9Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:6a:ba:c9:63:ca:32:0d:89:8f:e2:76:2c:e2:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4196892d07a00906b1b7ad4bf850d8bf80886fbc
Validity
Not Before: May 10 13:00:30 2025 GMT
Not After : May 11 13:00:30 2025 GMT
Subject: CN=389adcd794c2a5110c094ac21eac664b570b7e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b9:39:9a:df:be:3f:65:25:e4:74:72:cd:ca:
60:a4:a6:9c:8b:42:c2:4d:79:95:0d:e7:4a:3b:e1:
72:62:8a:7f:c7:9c:d7:06:1c:8a:42:f5:25:12:5b:
b5:81:1a:bf:0b:20:ab:13:b9:02:2f:79:99:e5:29:
10:d3:76:df:c0:5b:33:96:78:2f:75:5a:22:01:1b:
30:18:16:c8:c1:12:b2:fd:d3:d3:9e:1b:a7:57:67:
ab:34:bd:22:43:64:d5:b4:9b:3b:59:c1:50:9b:5c:
3c:6e:d0:23:79:68:6d:a0:e7:6d:00:99:3c:f2:1a:
2d:da:a8:5d:bd:0e:e7:c9:df:5b:ba:1b:c4:43:7e:
d3:44:99:85:55:3b:fc:e5:1a:25:6c:25:85:e6:ce:
e7:89:a3:93:14:2f:1e:f6:dc:e3:fd:ff:02:fe:c3:
2d:74:b4:b7:d1:ac:f7:76:9b:a1:3e:0a:f8:43:47:
a2:13:aa:d7:ce:ae:55:56:98:42:5d:31:98:af:fa:
38:2b:20:d7:71:2c:b9:24:27:0f:24:ce:0a:1b:01:
96:30:b0:94:2f:38:5d:55:3a:ab:b8:c7:9d:54:ae:
43:c7:af:e3:32:03:d2:07:19:2a:04:a2:cc:1d:28:
a5:00:b8:06:e0:95:6b:be:8d:40:f2:af:15:9e:17:
55:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9A:DC:D7:94:C2:A5:11:0C:09:4A:C2:1E:AC:66:4B:57:0B:7E:6C
X509v3 Authority Key Identifier:
keyid:41:96:89:2D:07:A0:09:06:B1:B7:AD:4B:F8:50:D8:BF:80:88:6F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:5a:28:5a:7f:4c:e9:ec:98:23:0e:5a:c5:70:88:be:05:3a:
1d:c0:41:15:ff:c6:48:ef:95:2d:6d:c5:02:8a:f4:6e:a9:4a:
cd:6c:c3:0d:fa:64:77:7b:7b:7c:77:f0:a4:22:bd:c6:5e:5b:
7c:24:39:26:62:ec:40:44:29:b5:36:1d:fd:01:77:47:da:4e:
be:bf:73:5a:d1:31:ee:bd:40:e1:3d:04:dc:c0:1d:58:fe:f8:
94:70:c3:ee:59:93:14:fe:3c:b4:99:c4:4e:5f:70:d6:66:16:
6b:64:8c:6a:01:c7:ec:ad:9c:8c:ab:e8:31:6c:b7:cd:39:51:
f9:7e:6a:dc:22:80:49:05:68:10:8c:dc:a3:d1:c1:0b:16:85:
f3:91:7b:53:6c:81:2d:91:b7:0b:21:b0:0d:b0:e5:a5:c6:64:
c0:64:ec:10:82:f8:b3:e0:4c:af:a9:cf:fc:1d:8c:49:06:5e:
50:6c:6c:2a:86:a7:83:38:2a:52:15:a9:47:45:c7:30:bd:8c:
fb:37:1b:a4:0e:12:c9:19:8d:9d:c7:23:58:f4:23:60:1d:10:
65:2b:a0:b5:12:49:18:84:33:a4:b8:99:9f:0e:c3:57:9d:d1:
59:0c:83:95:b4:07:d3:eb:cf:02:7e:91:09:84:2c:17:5c:fa:
b9:d2:40:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:06:30 2025 by rpki-client