Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
File: cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft (raw, json)
Hash identifier: 1BWzrmOc7JpJq6iHAB/ppnHaFvVIqylRpdvQYpDKGj0=
Subject key identifier: E6:4B:5C:E1:35:6B:0C:48:E8:C4:0A:7F:C4:F4:A3:C0:09:10:B8:30
Authority key identifier: 72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2
Certificate issuer: /CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
Certificate serial: 01969DBE69FF0C7B75C725CE83CA7BE4C7DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
Manifest number: 120B
Signing time: Mon 05 May 2025 00:00:23 +0000
Manifest this update: Mon 05 May 2025 00:00:23 +0000
Manifest next update: Tue 06 May 2025 00:00:23 +0000
Files and hashes: 1: RQNfhNpDtrXAYDIMR8vJALA1HXQ.roa (hash: BQVDm+Vihmo0lXLWfB0xQkZscpfEAOjZgVYWa2N8wts=)
2: cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl (hash: s+CnlvUMDWOmBxqEME845YDvW0X49XYlfUE7Ls+MI7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 00:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:be:69:ff:0c:7b:75:c7:25:ce:83:ca:7b:e4:c7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
Validity
Not Before: May 5 00:00:23 2025 GMT
Not After : May 6 00:00:23 2025 GMT
Subject: CN=e64b5ce1356b0c48e8c40a7fc4f4a3c00910b830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0c:21:1c:13:c0:7d:75:e4:b2:c0:77:5b:98:
b8:9f:79:75:1e:1b:68:b9:12:1b:64:b8:36:b6:a1:
13:a8:08:7c:69:5c:9e:d4:d9:3c:9c:64:f7:c7:5d:
ba:96:8f:81:98:4f:5d:d7:1c:ed:01:2f:78:fd:f7:
2b:df:0a:e8:c4:dc:af:0b:ac:65:e4:7a:4b:88:db:
ef:e4:0c:bd:83:77:de:62:5d:63:ef:e1:20:8a:d4:
22:7e:07:8c:e3:e3:94:0f:97:20:d4:c6:84:a9:33:
44:64:db:14:7f:eb:28:c3:ba:b8:1e:d5:2a:b7:f5:
b3:b9:92:77:c3:57:9d:fc:60:1f:d0:56:6d:08:3d:
bd:04:02:23:2c:bc:91:0a:bd:2d:a5:da:bb:fd:92:
ba:bf:b0:91:51:e3:db:f0:6f:24:64:f2:ab:c1:cd:
52:83:54:ec:98:99:6d:89:9b:9b:e1:a0:ae:3a:a4:
75:6b:c2:77:69:a9:32:c7:16:62:2e:8a:31:31:6c:
24:f8:15:77:45:10:4f:21:a8:d2:3f:78:e0:db:a4:
4c:21:38:1f:62:36:de:c8:58:ca:3d:13:8f:c8:54:
e9:5f:6c:23:a7:b8:d0:19:3f:ad:e9:a0:3d:32:3c:
20:03:5d:9e:3f:29:df:c3:e1:3f:52:7d:5d:2c:73:
3e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4B:5C:E1:35:6B:0C:48:E8:C4:0A:7F:C4:F4:A3:C0:09:10:B8:30
X509v3 Authority Key Identifier:
keyid:72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:5e:6e:b6:50:81:a7:61:cc:5d:71:ae:a6:3e:e1:35:59:7e:
b9:62:e5:5c:fc:d9:ba:98:2b:e9:6c:a5:29:10:a9:a5:29:5e:
00:c2:d8:9f:b3:da:67:2e:db:62:38:81:6f:3a:f1:50:0c:75:
ef:6d:1d:64:37:60:b7:c5:e3:87:50:ec:e9:15:a8:90:36:93:
f9:d4:57:3b:0c:68:86:e5:5f:d2:20:af:a2:a4:29:77:1f:bc:
99:af:ab:d2:37:ae:ed:f1:40:bc:9a:42:7f:fc:9d:a1:17:63:
85:24:3d:3f:d3:61:c7:40:e0:b0:c2:c8:c5:95:05:f6:f2:56:
22:9c:c5:c8:7c:b9:4d:e2:8f:69:4c:33:fc:ea:b2:fc:af:98:
ca:7c:7b:11:21:ca:d1:f4:e1:e6:70:68:14:e3:12:25:96:3b:
33:2c:4f:48:65:47:08:93:81:83:5b:81:b0:50:8f:d5:9e:d5:
e7:78:3c:d0:ba:50:0b:1a:61:af:14:96:8f:42:15:b1:c9:a9:
15:9d:9d:5b:ae:92:58:3d:09:ed:ac:c2:a2:de:5b:e4:1d:63:
ca:ab:c8:4e:9e:8c:b8:17:88:1c:57:31:df:4b:f3:d0:5b:91:
c0:99:ef:bc:80:90:f7:e3:7c:59:ef:1e:b0:78:3d:81:df:95:
c8:8d:f7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:23:21 2025 by rpki-client