Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
File: 1QibzgjFXapXtPOjyQcPs5GFPM8.mft (raw, json)
Hash identifier: IKQIZspAGCg3jP6IDwAFcUYStoBRDdMND7r9F9Y2Gys=
Subject key identifier: 64:DC:31:B2:77:2D:68:87:44:08:C3:19:36:3A:C2:CC:B7:EC:59:4D
Authority key identifier: D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
Certificate issuer: /CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Certificate serial: 0196B10E3BADDBFD52EEB06ED67E49549065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
Manifest number: 0A02
Signing time: Thu 08 May 2025 18:00:21 +0000
Manifest this update: Thu 08 May 2025 18:00:21 +0000
Manifest next update: Fri 09 May 2025 18:00:21 +0000
Files and hashes: 1: 1QibzgjFXapXtPOjyQcPs5GFPM8.crl (hash: 5HOLujc88AVKXJsHF/1KGIvQEVA8wYTdzXqnDHbqqQI=)
2: Vf8IRTOjd5EHRik_XU5SL231JR0.roa (hash: pdMIDPOwO8DUN6tctG8DJMO1R37Vl0PhbVyMv6IZEJE=)
3: x75CgHaNcNlIrskWea67UxRrM1c.roa (hash: xJt3cVolGlaYguNEQZsOwCLANVkSIZwIfqNsviXM16Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:0e:3b:ad:db:fd:52:ee:b0:6e:d6:7e:49:54:90:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Validity
Not Before: May 8 18:00:21 2025 GMT
Not After : May 9 18:00:21 2025 GMT
Subject: CN=64dc31b2772d68874408c319363ac2ccb7ec594d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:64:0c:49:f6:86:89:6e:73:b6:9c:90:fe:be:
fc:50:fc:9b:82:ba:50:1a:f5:c0:48:95:3b:a6:01:
c9:77:50:b0:ca:48:76:5e:0d:72:64:bf:7b:4a:ce:
42:b4:ed:b4:e4:b6:f6:bf:a8:a2:90:69:96:7c:8a:
cf:77:07:05:ab:06:dd:34:34:c2:aa:33:78:22:0c:
ea:1a:e0:31:b0:37:bd:98:5b:87:eb:d9:fd:42:fb:
12:af:cc:ac:a2:bd:84:42:04:e9:57:7c:b0:8e:14:
96:0d:19:bb:86:50:c0:4f:3e:2b:80:ec:0c:61:12:
8d:f0:46:39:01:b1:9e:23:64:39:ef:52:df:a0:68:
3d:5e:5e:b6:43:41:1b:69:8d:31:e9:8e:36:eb:bb:
14:a6:f8:da:37:22:80:21:f1:b5:05:45:74:a4:4d:
e0:7b:0c:2f:d0:a6:ea:8a:1c:e3:bd:17:13:0c:d1:
98:6f:dd:e1:53:c2:da:8c:50:33:9c:fc:7a:a1:99:
9a:a9:be:a4:02:1d:66:26:4b:ff:bd:4b:a6:f6:d4:
69:24:02:b0:0f:f8:f4:bc:99:23:58:69:47:6b:9f:
e9:64:26:64:ba:ac:77:cd:77:94:d9:b8:25:4c:ca:
43:12:0c:e7:8c:8f:68:70:7e:f4:58:d5:ef:f7:bf:
1e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DC:31:B2:77:2D:68:87:44:08:C3:19:36:3A:C2:CC:B7:EC:59:4D
X509v3 Authority Key Identifier:
keyid:D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f4:64:50:0a:8c:fd:80:43:33:a1:12:71:a0:d3:20:8e:df:
92:a2:84:96:13:19:c1:92:09:92:47:3f:af:34:b8:4f:eb:a3:
bb:ce:e6:ad:fe:4a:f6:5e:0e:55:9d:af:70:0c:37:91:1a:5a:
ff:e5:78:23:6a:4e:58:fb:3d:c8:f6:da:92:f3:c8:c6:eb:fd:
27:e7:45:ce:c0:c6:ba:03:f6:68:2e:6e:b6:f9:11:3c:48:7e:
2a:0c:74:5e:86:b5:b3:97:04:93:a3:70:6b:65:43:07:c9:66:
b3:b7:aa:d6:7b:75:a0:98:79:ab:f4:6e:48:f7:cd:52:14:b8:
a9:2e:07:09:ae:96:67:2b:b6:23:53:c8:8e:e3:44:6a:f5:7c:
c0:e7:89:d1:3a:c8:38:f9:26:15:4e:17:7d:54:6c:f8:1d:4c:
6a:a1:f0:a7:52:c6:75:4f:c7:34:55:b0:c1:3b:ae:75:8b:bb:
8e:0d:0b:b3:b3:32:bd:98:89:c2:6f:1f:0e:9e:7e:99:b9:e4:
97:8b:21:c0:a5:07:44:ba:41:ef:c7:f9:b9:6d:e1:43:31:21:
61:2f:93:2f:f1:25:62:bb:94:14:5e:00:d1:61:f0:aa:04:28:
58:6a:50:f1:f6:bf:10:e5:ea:8f:d1:94:7d:30:c3:3c:18:00:
00:f3:64:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:38:26 2025 by rpki-client