Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft
File: qjHuUSwaViq56UEKgx9y_UMYiS4.mft (raw, json)
Hash identifier: P/cG1/kYi5zbLF+XuETZP5C+flm/DB6Mu7eWGoIy/8w=
Subject key identifier: 01:4B:C2:8F:3F:70:6B:64:EC:B1:2F:03:DC:B8:75:F1:A4:35:12:7B
Authority key identifier: AA:31:EE:51:2C:1A:56:2A:B9:E9:41:0A:83:1F:72:FD:43:18:89:2E
Certificate issuer: /CN=aa31ee512c1a562ab9e9410a831f72fd4318892e
Certificate serial: 0196BEC9D318AA54938FB3E02C188488347B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft
Manifest number: 080E
Signing time: Sun 11 May 2025 10:00:19 +0000
Manifest this update: Sun 11 May 2025 10:00:19 +0000
Manifest next update: Mon 12 May 2025 10:00:19 +0000
Files and hashes: 1: TrtR0Owq5Xkx-biJC8Ej_IhK1Ag.roa (hash: a1F6oMMLvEFRIYoQInrH9FMRLmJcoCgIJF0JoxM2u7Q=)
2: qjHuUSwaViq56UEKgx9y_UMYiS4.crl (hash: 3GsXXNfHn4IQeTCTvXsMhm5hdEd18ZyUPWGlpfQRj6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:c9:d3:18:aa:54:93:8f:b3:e0:2c:18:84:88:34:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa31ee512c1a562ab9e9410a831f72fd4318892e
Validity
Not Before: May 11 10:00:19 2025 GMT
Not After : May 12 10:00:19 2025 GMT
Subject: CN=014bc28f3f706b64ecb12f03dcb875f1a435127b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:57:fd:e9:67:49:ec:48:c7:d1:e2:47:2f:08:
59:0e:1c:eb:62:db:2b:74:7e:60:d8:e1:ca:2c:39:
73:6a:09:fc:68:6b:ce:44:ad:18:0c:25:ad:fc:78:
52:a5:40:9e:2d:24:a2:06:fb:a7:89:83:23:1b:ad:
1a:5b:77:0c:92:87:e3:20:4b:8a:6d:7d:0b:02:ce:
86:d7:bd:7a:50:8c:20:42:6e:75:63:ee:7a:7f:13:
91:d7:59:12:92:c0:76:50:42:0b:a8:88:f5:83:97:
6a:ea:54:27:25:74:e9:dd:fc:51:10:b3:ba:7b:12:
b3:9d:33:e4:73:90:a0:d3:5c:56:b1:8e:e8:51:d8:
bd:0a:32:ab:5b:5f:00:62:a3:53:0d:9f:3e:70:42:
88:b9:ed:57:80:18:37:c1:7e:43:9e:44:c1:12:b2:
d9:78:a1:ed:55:34:47:b0:34:40:e3:be:32:e9:5e:
67:09:99:2b:30:7d:cc:c1:e1:ca:f1:ba:69:b6:39:
df:64:78:07:b2:5d:25:3e:13:e4:cc:e0:5b:b0:67:
1d:a0:07:ce:f4:af:ae:e8:aa:20:d3:c5:a0:06:bd:
ad:20:f2:7f:36:d7:8f:7d:29:05:e2:1d:7f:4a:e8:
06:5f:29:19:04:89:a4:2f:a9:9f:4e:43:cd:ba:5e:
c4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4B:C2:8F:3F:70:6B:64:EC:B1:2F:03:DC:B8:75:F1:A4:35:12:7B
X509v3 Authority Key Identifier:
keyid:AA:31:EE:51:2C:1A:56:2A:B9:E9:41:0A:83:1F:72:FD:43:18:89:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:65:7b:96:59:1f:70:6d:11:13:06:3f:6d:93:f2:76:0f:d7:
3c:4c:37:1f:f7:20:18:48:90:01:43:f7:a1:ce:9a:fb:d1:48:
51:c4:b8:24:36:e4:e1:8b:6a:73:6e:c7:91:8a:be:43:0d:ca:
34:ef:12:98:c5:0f:9f:d2:bc:d4:eb:fc:45:75:b6:f1:8a:58:
75:58:85:96:37:e2:9d:a1:a4:cf:6a:bd:8e:3e:7d:a9:91:55:
0b:1f:7b:68:61:24:e8:58:8a:43:ea:9e:46:b9:dd:d7:ea:1d:
54:cc:b3:25:4d:19:14:6a:94:35:91:4e:53:db:b1:e7:96:96:
6b:80:c1:69:83:b1:bc:3a:07:0c:55:e0:f6:fd:3b:0f:0a:16:
61:42:2e:30:d7:c4:6a:20:08:42:ec:05:a2:3e:f2:a1:14:5c:
72:3d:1b:58:72:27:bb:4f:b0:f2:d8:94:6e:d4:6e:a6:23:b6:
b1:23:6c:ed:b8:43:95:9b:b1:1e:eb:0b:33:88:fa:41:3c:d2:
80:ac:5d:98:d3:18:f8:c2:97:88:bc:1c:b1:d5:6f:fa:b7:cb:
ff:ad:4e:7a:87:1b:48:85:ea:7a:4b:03:37:ea:91:6f:28:71:
93:3c:51:98:0b:54:4c:c0:5e:79:fe:13:02:e5:e3:e3:6e:7e:
0d:ab:e7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:57:56 2025 by rpki-client