Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
File: QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft (raw, json)
Hash identifier: SALRTr5f4lzN/xZOFpDti7wJlx2W5Ang5vAgrO8XER8=
Subject key identifier: 2C:E4:67:96:3D:4D:5A:1B:0D:26:81:36:21:44:5A:B1:D6:32:E7:B0
Authority key identifier: 42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3
Certificate issuer: /CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
Certificate serial: 01969F3F2D3C9D18E3903BD0B2FC2E714722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
Manifest number: 0844
Signing time: Mon 05 May 2025 07:00:39 +0000
Manifest this update: Mon 05 May 2025 07:00:39 +0000
Manifest next update: Tue 06 May 2025 07:00:39 +0000
Files and hashes: 1: QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl (hash: 8EZjA+pmcwMLLh/HswPivQa03DoiUTD8CFWRmoPDvxc=)
2: _1j-vq_YcHaEMFMbb53TSNwHgps.roa (hash: FFNOOLLPGSug4NyRBtLQbxLYgOZN6JLp0mqYGuu/rHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:2d:3c:9d:18:e3:90:3b:d0:b2:fc:2e:71:47:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
Validity
Not Before: May 5 07:00:39 2025 GMT
Not After : May 6 07:00:39 2025 GMT
Subject: CN=2ce467963d4d5a1b0d26813621445ab1d632e7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1d:1b:22:1a:14:b6:91:7d:c0:69:8f:9c:f9:
ba:c4:d9:42:35:7f:d1:44:60:60:b4:b6:93:e8:90:
83:a8:47:fe:b1:84:20:3c:0a:b1:29:73:06:eb:ac:
63:ce:36:71:ee:dd:76:af:e9:11:6a:d4:38:0e:a3:
04:bc:cb:16:81:94:82:3f:3a:4e:32:28:c4:89:b3:
05:53:43:47:ae:4d:5a:f3:5c:d3:41:63:4c:c4:17:
3f:47:be:e6:df:f6:69:7b:7d:58:13:d9:ae:c1:91:
bd:c3:97:a3:ae:e3:31:12:60:d8:be:79:0e:44:98:
56:62:3f:f5:8c:43:80:48:5e:8f:5d:e1:7f:4c:62:
bd:e7:e5:f4:34:24:8b:d2:59:b1:52:e0:65:f8:e7:
ba:25:a4:81:3e:0d:c8:e3:dd:78:9c:36:ea:48:d1:
e2:5d:a7:48:27:c8:11:e1:f3:c8:21:55:8d:a5:ac:
f4:0e:6d:c7:e2:44:87:55:c4:c1:3e:32:aa:c0:fe:
ee:73:f5:f4:85:5c:84:36:13:42:43:8a:e8:27:bb:
b2:43:53:6e:ca:49:3e:37:6a:3f:3a:57:9a:e5:c7:
74:b8:d7:32:a3:fd:fb:a4:24:c7:dc:a4:13:b9:a9:
fc:79:96:73:a6:ae:f1:c0:f2:59:96:67:74:cd:78:
f1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E4:67:96:3D:4D:5A:1B:0D:26:81:36:21:44:5A:B1:D6:32:E7:B0
X509v3 Authority Key Identifier:
keyid:42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e2:70:db:85:8c:1d:c0:a6:f9:94:0f:db:f2:29:3f:31:c5:
d7:60:03:ca:6b:cf:1f:68:d3:8b:f8:b5:f0:f7:5a:2e:33:b0:
1d:6b:df:a2:fa:22:39:36:97:d0:7a:91:37:9e:ec:5f:a4:bd:
bd:04:96:c8:c0:fc:b1:38:b7:a3:be:6e:31:27:ab:17:d3:ab:
c6:a7:9f:a3:15:1d:7c:97:86:4b:40:49:bc:56:6c:4e:0d:ac:
8e:03:6c:73:9e:28:05:38:85:e5:fa:84:2c:8d:31:e6:a4:6a:
98:2b:ee:c0:34:26:c2:14:f6:4a:29:38:23:77:64:c1:01:8f:
25:db:e9:5a:83:a0:c3:bd:00:74:ac:d3:e1:99:e5:7b:2d:bc:
1e:20:3d:f2:51:24:23:3a:be:90:90:6d:5f:13:22:09:83:f0:
1f:bd:06:61:e0:37:41:fb:7f:e6:a8:b7:45:14:d5:7c:4c:60:
c7:f2:0b:f4:c9:96:29:5a:a6:68:4b:3e:9b:6f:12:61:12:07:
05:16:de:57:c2:60:e9:41:ff:d0:40:13:42:a1:e5:d6:06:01:
67:22:cd:9e:db:a9:49:b4:f1:ea:cb:3e:95:9a:23:0a:59:62:
db:b6:42:ab:94:b0:60:7e:e2:5f:76:9c:f7:ca:eb:a0:66:0d:
92:1c:6f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:52:34 2025 by rpki-client