Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
File: qb2hj--wDn6cVHMwGcdiuy6zozw.mft (raw, json)
Hash identifier: QX1ZrespSaE0ftOA92imODE+zAdZRBHIPzUivRw8YJQ=
Subject key identifier: 02:63:CE:23:56:3C:4C:7F:3E:D3:8C:20:E3:99:22:FE:3E:5D:CC:4E
Authority key identifier: A9:BD:A1:8F:EF:B0:0E:7E:9C:54:73:30:19:C7:62:BB:2E:B3:A3:3C
Certificate issuer: /CN=a9bda18fefb00e7e9c54733019c762bb2eb3a33c
Certificate serial: 0196C502DAD16E7506FA0757D72A78DBB8A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
Manifest number: 0932
Signing time: Mon 12 May 2025 15:00:20 +0000
Manifest this update: Mon 12 May 2025 15:00:20 +0000
Manifest next update: Tue 13 May 2025 15:00:20 +0000
Files and hashes: 1: nJtwSC-OZ-Smz_sZfs-hc-m0EuQ.roa (hash: TPYZpfCIEtspSFBIUZCXhe4Sd3FAryoOqoR+gBeCscc=)
2: qb2hj--wDn6cVHMwGcdiuy6zozw.crl (hash: Nr5cJ8HqjbfZ3sHXpU0krVotRWSdounqWC6ELQAmnYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:02:da:d1:6e:75:06:fa:07:57:d7:2a:78:db:b8:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9bda18fefb00e7e9c54733019c762bb2eb3a33c
Validity
Not Before: May 12 15:00:20 2025 GMT
Not After : May 13 15:00:20 2025 GMT
Subject: CN=0263ce23563c4c7f3ed38c20e39922fe3e5dcc4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:eb:be:9f:8b:04:e4:d4:24:6a:2f:90:99:42:
52:da:d2:e6:fb:f2:eb:a2:a8:b7:ff:a0:29:d8:65:
84:a2:aa:4d:ba:95:32:8a:e7:66:35:82:12:72:c4:
0c:37:d8:32:31:db:29:20:30:45:9c:34:50:0d:c0:
d1:73:eb:b3:39:ee:cb:d1:08:77:87:c7:cc:18:ff:
e9:d0:6a:ca:5e:bc:04:68:ab:2f:35:a8:9a:75:49:
d7:74:c3:fd:20:ae:0f:b7:d8:9e:a8:4f:7f:bf:21:
45:81:bc:d7:b2:92:a6:2c:ae:03:b9:51:c0:d7:0c:
14:4a:da:29:5c:07:ae:12:0e:80:95:2e:70:3c:1d:
b9:0d:05:8b:bf:25:5c:95:0f:5e:c0:a8:99:4b:8c:
e2:ee:e5:45:65:5b:cc:97:fc:d8:40:2e:2f:54:2b:
24:fe:53:6f:a1:40:be:1a:19:38:be:14:34:4a:e8:
17:5f:f7:98:50:37:df:17:a1:db:0b:ba:d8:3e:ae:
af:f8:30:47:74:87:01:47:be:fd:ac:9b:d7:02:9a:
25:c3:95:76:48:05:86:46:46:83:16:64:a7:7b:e5:
fa:fa:34:c8:82:9a:04:88:3d:00:b3:65:79:bc:95:
82:77:07:db:1a:b2:b0:d6:03:b0:a6:1f:79:1a:bf:
b7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:63:CE:23:56:3C:4C:7F:3E:D3:8C:20:E3:99:22:FE:3E:5D:CC:4E
X509v3 Authority Key Identifier:
keyid:A9:BD:A1:8F:EF:B0:0E:7E:9C:54:73:30:19:C7:62:BB:2E:B3:A3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b1:6b:a1:b8:a3:ae:ce:95:d5:2a:cc:8e:a4:fb:69:85:f6:
9d:e7:32:fc:4f:f9:f4:61:39:9b:59:6a:06:f1:3e:8f:77:e8:
20:67:af:9b:8a:c1:6b:ec:73:47:96:6f:fc:3c:b2:59:d1:78:
3e:d3:3d:42:3d:5f:e7:39:72:5b:57:53:c8:e9:14:59:e5:a7:
d7:86:57:52:2b:2c:a2:16:1f:2c:50:db:4e:62:e8:9a:5d:8a:
33:03:10:e0:a7:af:87:b7:68:e3:d8:af:f6:fb:80:91:29:3b:
4a:eb:fb:92:62:0e:eb:ba:4b:f8:ff:6e:75:b7:d9:2f:02:71:
c5:f3:66:84:95:f8:8f:60:7d:06:fe:b7:22:e2:c8:57:a2:27:
b9:b2:84:a2:4c:5d:52:d1:ed:5b:67:c4:b8:08:3b:89:6a:1d:
6d:00:68:9f:1e:5e:1b:5a:9e:13:f4:c5:4c:d1:e1:9f:ea:2c:
91:f1:9c:94:f6:c6:b4:b6:ed:e7:35:65:09:2b:9e:ef:f3:8d:
a2:1e:19:18:d3:11:1f:2d:58:04:3a:f0:89:22:7b:b7:0b:d3:
c4:d1:68:5f:d2:83:0b:5c:38:ed:92:aa:bc:33:62:e9:be:90:
70:15:7d:dd:10:cb:8f:57:3f:68:36:47:a0:9d:5f:f5:e0:67:
9a:2e:27:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:11:38 2025 by rpki-client