Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
File: qTnMFiHuMBCumOEnvSVKeDP9KCc.mft (raw, json)
Hash identifier: /YPyYoFLOm0Gt+HnfEyyYJMV8IgDkQKbb97IW9742Fk=
Subject key identifier: 4A:20:FF:A4:A5:D9:FA:8C:7F:BE:B9:E1:62:87:23:BD:54:62:1B:B8
Authority key identifier: A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
Certificate issuer: /CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Certificate serial: 0196AE7B9BCFEACD1016066595F7889BAEAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
Manifest number: 0E49
Signing time: Thu 08 May 2025 06:00:58 +0000
Manifest this update: Thu 08 May 2025 06:00:58 +0000
Manifest next update: Fri 09 May 2025 06:00:58 +0000
Files and hashes: 1: I8M09wEb8pPy5aE1tmLVBA1QjII.roa (hash: H2KzL98idyYXiGDF46vhI9MdVSfKRRTkQwlTKnfvbNE=)
2: kE5clAT_On1-sKoap2EGHHtO9ks.roa (hash: 2Gqvz4gyypjZzZQdA4iyMYqLbiLT02xiEIZm2TleSrU=)
3: m8QWxGjBijSQKviqiwGPDVQObsM.roa (hash: 0nynt3B6pt+z65wp6r175QdY0trgb8BxBMo+4Klvl7g=)
4: qTnMFiHuMBCumOEnvSVKeDP9KCc.crl (hash: StZyWQY6BYbO2E3sCwYNfTRXklBnXpVPlqRhvGQlrSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:7b:9b:cf:ea:cd:10:16:06:65:95:f7:88:9b:ae:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Validity
Not Before: May 8 06:00:58 2025 GMT
Not After : May 9 06:00:58 2025 GMT
Subject: CN=4a20ffa4a5d9fa8c7fbeb9e1628723bd54621bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d0:e2:65:70:13:01:92:b4:d0:86:61:76:85:
09:22:a3:f8:d2:8f:4b:e6:c7:ff:6a:f7:5d:0d:53:
06:88:38:51:72:a3:0a:5a:f2:5b:c3:8a:ec:0d:8e:
fd:ed:72:e9:46:05:01:0b:8f:09:4f:50:87:cf:93:
7e:5d:cf:50:dd:bb:24:12:aa:54:d6:55:5a:16:b7:
c6:1b:7f:1c:58:0a:df:fa:87:d9:d1:32:34:b2:36:
ad:87:db:8c:ce:b2:d8:ff:c6:f4:21:46:bc:19:a3:
84:65:bb:db:20:1e:3d:db:6b:54:1a:c7:88:c0:8f:
f1:a7:84:36:b5:63:d2:c4:6f:70:c8:2d:b3:11:89:
ef:45:9e:b4:34:fb:8f:c0:38:2d:5b:7f:9d:2a:7b:
66:df:7f:9d:08:e6:02:d6:3a:16:51:e5:65:a5:39:
e7:38:75:3d:00:79:23:64:e0:22:86:29:ba:ff:89:
77:17:69:c7:b9:c0:3c:61:fc:dd:62:cb:e8:95:4a:
10:fb:81:ac:dc:b1:bb:40:ea:d3:b5:3b:2c:0a:64:
f4:9c:ec:39:a6:bd:18:a8:1d:ed:33:8b:48:03:1f:
96:50:11:58:56:26:c9:fb:9a:0b:a2:e3:7b:f8:0b:
41:79:fd:01:b7:87:73:43:f2:83:bb:a3:be:eb:b7:
c9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:20:FF:A4:A5:D9:FA:8C:7F:BE:B9:E1:62:87:23:BD:54:62:1B:B8
X509v3 Authority Key Identifier:
keyid:A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:25:7f:d6:57:2d:a4:43:c7:16:90:98:3f:de:24:5f:57:f5:
71:cc:b3:47:42:b3:ec:d1:75:11:ba:eb:86:fd:01:d6:ec:13:
3c:1d:16:47:3e:0f:d2:44:5e:3c:00:4f:b9:55:3c:08:6f:54:
e1:f1:28:24:96:a8:c1:4e:1a:3a:c1:16:d6:06:94:1c:05:52:
80:f3:3d:76:90:e7:74:b4:a7:cb:0d:27:8a:fa:e4:88:c8:6a:
76:87:27:b7:c7:fa:e6:23:1d:18:2c:6c:a4:cf:2e:2f:4f:c2:
c9:fd:6b:9d:98:31:94:66:29:74:9f:3f:43:06:f1:54:be:39:
c0:eb:c4:64:53:7d:5e:0d:ff:d3:4f:f9:64:92:cd:77:f1:7f:
94:93:4c:67:4f:ee:31:bb:cc:d0:c9:ca:a7:1a:1f:6c:5d:eb:
ff:ae:45:4f:50:60:a2:dd:af:71:4d:0d:b8:5a:7b:3a:0d:39:
32:92:2a:3f:d6:8b:4f:09:51:2c:98:8a:1f:69:0a:fd:ba:ab:
bc:67:ee:5a:bf:51:4c:1b:ee:cc:19:83:e4:b6:ed:6c:d8:6a:
15:70:62:3d:78:6d:e8:77:58:4f:ac:2d:bc:df:bb:b5:98:00:
bf:1a:f1:3d:ea:a2:ec:cc:cc:e2:da:95:0d:ed:c4:38:2d:2c:
4b:12:12:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:28:22 2025 by rpki-client