Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
File: QbjC83vY1-BOdphaTO1FWddlHEM.mft (raw, json)
Hash identifier: jQx/uf9VTZt4zhfEEhXD2bZxvbrDSkbin0sUQaqnF5I=
Subject key identifier: AC:8A:1C:4C:E8:1F:CD:45:92:C1:5B:26:1B:EF:21:B9:51:B5:6D:87
Authority key identifier: 41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
Certificate issuer: /CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Certificate serial: 0196C2392FAF73444F1C76B2AEF9465198EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
Manifest number: 153F
Signing time: Mon 12 May 2025 02:00:49 +0000
Manifest this update: Mon 12 May 2025 02:00:49 +0000
Manifest next update: Tue 13 May 2025 02:00:49 +0000
Files and hashes: 1: OYOpNeEVsu0T0BbvhmHIdNFIT_o.roa (hash: 5OjFPxxmaTIrwXXRizdKgOIFQoKouBwpJLlgwAhC1mU=)
2: QbjC83vY1-BOdphaTO1FWddlHEM.crl (hash: gzK4irZBtPBZNuTXicVd/9sDPRkKmdAjXgcJ5oiEhaQ=)
3: YdfGaXHdTb-LYhTs_wz6s9gnwBM.roa (hash: gNJt9eBEIblRu0IFOMH1K6y+ICB3kC1BNK9Q6bATMgc=)
4: q9jElUrbhazQFMEmmCOsDeqbLJA.roa (hash: RedQ+QOQuI2x8mkKA1C82rnZg776YlWDZwTviJY79bo=)
5: sJO10EU5Nx8_dkPBaPnnB2dtYNM.roa (hash: XB5B7Wmp004sDj3pl5z8PdpWXfh6a+r4ST0GRlHwVWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:2f:af:73:44:4f:1c:76:b2:ae:f9:46:51:98:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Validity
Not Before: May 12 02:00:49 2025 GMT
Not After : May 13 02:00:49 2025 GMT
Subject: CN=ac8a1c4ce81fcd4592c15b261bef21b951b56d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7e:94:a5:89:69:93:00:88:ef:49:61:e0:f6:
15:15:cf:b6:7a:68:47:f6:44:98:69:80:42:fd:3f:
89:81:30:26:79:fb:34:64:8c:3f:08:6b:e4:04:7a:
96:56:55:4c:4e:c4:1c:e6:db:03:e3:c1:a6:0c:75:
ac:d9:9e:77:7b:ad:9c:f1:de:fd:98:34:87:d5:5f:
31:8b:dd:7b:71:20:59:fc:ad:c9:dd:cc:3d:42:24:
e2:0d:03:ed:ce:c5:b0:18:98:c0:60:0d:44:4d:e8:
16:c7:cc:c1:30:51:da:1c:a2:3b:a4:0a:a6:a8:81:
6e:f5:63:d9:3c:81:be:b7:e7:18:c5:2d:c2:70:a1:
8f:84:d6:e0:00:e8:3f:3c:6e:10:f9:17:03:5e:b5:
4d:d3:52:29:8c:75:6a:cb:61:0b:ba:73:36:06:25:
05:1b:1d:f0:2e:71:42:9c:a7:93:34:f7:39:6a:2c:
8f:b9:5d:f2:58:d5:3b:e1:9e:a4:d3:18:25:56:ed:
ac:2b:31:fd:43:0c:0d:e9:d2:90:0f:ff:55:a7:17:
77:e5:ff:e0:60:8a:b2:89:e7:39:97:a1:50:01:47:
99:eb:6c:7e:2a:a8:16:6e:53:0b:27:fd:8d:d5:48:
aa:01:02:38:b1:9f:7f:42:07:fd:44:b0:76:9d:a4:
cd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8A:1C:4C:E8:1F:CD:45:92:C1:5B:26:1B:EF:21:B9:51:B5:6D:87
X509v3 Authority Key Identifier:
keyid:41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a8:e3:ef:c8:7c:e6:13:08:0b:9e:d8:62:d5:f0:26:ab:47:
e4:e3:ef:c6:a5:44:3a:d8:5c:a6:10:2e:df:a6:8b:c6:31:91:
ed:6e:3a:c5:14:6b:87:65:a3:91:60:cc:f0:92:94:ec:3b:70:
2d:13:8b:29:71:34:e8:ad:d2:f5:7f:03:fd:71:aa:cd:91:92:
57:9e:6f:44:b8:fb:46:cb:75:07:ad:01:84:68:2d:57:f1:7e:
fc:c1:ee:34:37:ca:21:9c:29:4c:68:0e:94:1a:26:75:fa:b1:
d8:c0:69:3f:c0:c8:66:01:cb:96:6d:f2:e9:ad:77:2d:29:f3:
83:d4:62:13:ad:d8:00:6e:0b:3a:28:be:eb:88:49:6d:b3:c4:
16:3a:89:5b:5c:ce:9f:66:f9:29:6b:5b:66:85:65:d3:9a:9f:
07:f0:d7:23:91:0d:e4:6d:2c:41:17:35:9b:f8:a1:0a:5c:64:
8e:d3:96:80:21:c1:ca:b5:d8:d9:99:d2:b1:d9:c4:48:fb:4a:
ef:e7:58:71:5b:46:e6:16:52:14:b6:d1:1d:01:8a:85:e9:2e:
7e:66:c1:56:e8:b9:47:73:8d:71:7e:08:79:8e:5e:30:7f:ae:
14:7f:50:b0:3d:44:fb:e3:e6:38:8f:f7:24:05:08:ff:d0:e8:
42:47:bf:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:41:30 2025 by rpki-client