Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
File: QO5hC9zSO60rEZK9RcqKl204Vdo.mft (raw, json)
Hash identifier: uP7TdIfyjghD9BuMP7G3HBFwlcqlewAvq3bzqlKczF8=
Subject key identifier: A7:DC:43:DF:BB:5E:BA:A8:2C:0E:F3:20:51:07:A1:1C:82:D1:9A:A7
Authority key identifier: 40:EE:61:0B:DC:D2:3B:AD:2B:11:92:BD:45:CA:8A:97:6D:38:55:DA
Certificate issuer: /CN=40ee610bdcd23bad2b1192bd45ca8a976d3855da
Certificate serial: 0196C34C147D0163891C2DA4C60C71E65791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
Manifest number: 13D1
Signing time: Mon 12 May 2025 07:01:05 +0000
Manifest this update: Mon 12 May 2025 07:01:05 +0000
Manifest next update: Tue 13 May 2025 07:01:05 +0000
Files and hashes: 1: QO5hC9zSO60rEZK9RcqKl204Vdo.crl (hash: Y85W0Q3l3SEkYvuck0Zo9j3g7O+lQOsVLdvF+jvbTC8=)
2: WXzwl6dDgLLRTGjEWsJa-Mt4DFY.roa (hash: AsvwbpP9IRPmxXb+scTtlP8HJBrFwXPs3woICGrCIxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4c:14:7d:01:63:89:1c:2d:a4:c6:0c:71:e6:57:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ee610bdcd23bad2b1192bd45ca8a976d3855da
Validity
Not Before: May 12 07:01:05 2025 GMT
Not After : May 13 07:01:05 2025 GMT
Subject: CN=a7dc43dfbb5ebaa82c0ef3205107a11c82d19aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e4:b0:18:26:85:23:26:32:c9:0c:9e:0a:ec:
bf:d4:33:a8:cf:96:0f:33:7c:33:03:93:05:08:c5:
75:e6:fa:85:e6:8b:de:21:0a:33:0b:0f:fd:16:2b:
39:f7:65:79:79:a7:fa:a6:b6:9c:c9:0a:74:4a:ca:
da:d9:f6:16:dc:35:fa:1e:bb:e5:af:1c:37:cd:d7:
24:06:8a:7a:8e:b8:82:d1:30:83:16:57:f8:df:27:
b6:df:cf:e0:ec:78:8b:f7:be:fd:c5:10:79:da:0f:
7d:91:26:b5:78:08:dd:56:6f:03:c9:a3:e9:57:61:
91:85:46:91:5e:9b:ec:1a:0a:96:11:0c:36:01:99:
24:a8:4a:08:b0:2a:fd:69:ce:b0:a4:05:6b:72:0c:
5e:ff:e5:f4:83:73:ff:04:4c:fd:6a:0e:ec:bf:28:
32:c4:d6:c6:1c:d6:ab:ff:f0:64:79:1c:13:dc:ef:
cd:37:a0:c1:55:54:3c:b8:5b:29:4a:4a:3c:14:e2:
41:d2:a3:c8:3c:71:59:2f:9e:23:00:0b:9a:94:29:
74:bc:6c:7f:97:ec:df:f0:99:2d:84:c4:67:b9:3b:
ae:79:3b:47:02:a2:50:21:5c:28:0e:1e:89:80:ed:
27:f5:e8:e0:f0:a8:60:3d:b9:f2:ae:49:f2:aa:49:
fc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DC:43:DF:BB:5E:BA:A8:2C:0E:F3:20:51:07:A1:1C:82:D1:9A:A7
X509v3 Authority Key Identifier:
keyid:40:EE:61:0B:DC:D2:3B:AD:2B:11:92:BD:45:CA:8A:97:6D:38:55:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b3:75:7b:71:c8:70:61:64:c4:cb:f8:80:46:94:77:18:56:
74:11:ba:b5:83:e7:5e:9e:1b:b3:90:26:8d:a7:ae:e9:3a:c8:
f6:f2:6e:65:4d:d8:79:2b:f1:a6:4c:70:20:76:de:fd:55:f3:
fb:eb:63:47:0b:58:e6:a3:99:3c:99:29:ce:a5:f0:67:d8:a6:
e4:1e:59:f8:66:6f:89:d9:ed:63:1f:96:d5:52:17:19:b9:b6:
53:22:f5:e7:fc:35:6a:44:82:f7:22:a2:b3:56:19:24:bf:e1:
d2:06:83:9a:52:20:df:d9:e4:1f:5d:3a:3c:0d:68:68:7e:9c:
49:8f:18:9d:41:2e:8b:77:c4:d3:2b:c2:82:1a:bf:6a:5a:e9:
f3:65:8c:36:9f:4d:06:49:06:93:3b:04:22:9f:d8:6b:29:53:
90:b9:33:80:60:0d:ce:ac:c0:5a:2e:43:74:45:34:75:7e:b9:
6e:90:d7:b1:02:65:5a:07:f6:fd:cf:34:7f:a2:d0:a7:89:c1:
73:c9:a5:7d:b0:59:32:58:a8:4d:fa:a6:e1:99:eb:a3:4f:13:
40:63:c3:20:ba:64:5c:e7:41:e4:bc:55:33:a5:8d:f1:24:90:
ce:e3:5b:f5:53:02:cf:6d:f7:fc:d7:b2:45:19:68:75:8c:b9:
ab:89:1c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:37:32 2025 by rpki-client