Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
File: QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft (raw, json)
Hash identifier: kl7PZowD4X+RUM0OawqOfufcLcrgPKYNbPA+EMYB0Dg=
Subject key identifier: 92:2F:9C:BF:F3:6B:3E:5F:0B:28:F7:52:05:A1:09:CE:55:E1:9E:EB
Authority key identifier: 43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B
Certificate issuer: /CN=43301775b3fdff04a227d6d859c01b6d633a4f0b
Certificate serial: 0196B17C6176B2FB30C345932634C095108E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
Manifest number: 0D8A
Signing time: Thu 08 May 2025 20:00:40 +0000
Manifest this update: Thu 08 May 2025 20:00:40 +0000
Manifest next update: Fri 09 May 2025 20:00:40 +0000
Files and hashes: 1: QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl (hash: cr4B+vqFnMMdwIYS9iT6lo7EJreoXqrFGG8Kpwx0U6c=)
2: epxu4ldel37euJv5iKK-6i05AIc.roa (hash: 8++9DWFJDI5Z8sw+rLXkJDDM4NKVAVZxp3Q8VNvU1K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:7c:61:76:b2:fb:30:c3:45:93:26:34:c0:95:10:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43301775b3fdff04a227d6d859c01b6d633a4f0b
Validity
Not Before: May 8 20:00:40 2025 GMT
Not After : May 9 20:00:40 2025 GMT
Subject: CN=922f9cbff36b3e5f0b28f75205a109ce55e19eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8b:1e:2b:8f:35:57:ce:ce:c9:7d:3c:cf:35:
63:d0:e6:1a:9c:38:0b:41:4c:5e:ca:2b:3d:3d:ff:
0b:7f:69:1e:c7:da:9e:92:3f:cf:66:77:68:75:24:
55:a3:5e:67:5a:d4:bc:35:1e:7a:88:c0:82:92:5f:
55:5c:0e:e5:7d:95:8b:0f:92:5c:76:aa:32:79:6a:
56:67:7c:b6:49:e8:c4:a8:02:74:49:b6:26:bf:23:
a0:6c:e2:f8:60:c4:df:7d:7b:06:b7:d2:c1:6b:9e:
40:9a:78:32:d1:82:05:15:79:f9:59:6f:17:6e:ba:
37:01:39:4a:91:f3:b5:08:c5:51:25:bd:4a:cc:a0:
bf:e4:bc:d2:e8:a0:69:c1:cb:05:d1:8a:d3:84:be:
d1:18:60:2b:d9:47:7c:82:39:d7:eb:26:fe:46:ea:
a9:a2:aa:c6:e2:62:0a:f6:de:d4:73:2f:fc:50:4b:
3f:79:ca:f1:84:6a:1c:24:35:ae:3e:23:2a:07:d7:
51:d3:6e:08:f5:55:b7:8c:44:8f:16:a3:5a:c4:59:
47:57:d1:0a:7e:36:46:cb:19:89:59:0d:51:85:cb:
2e:02:de:2a:0a:05:9e:6c:5d:ed:7c:13:0e:20:74:
ae:2b:f6:61:22:04:6b:5e:b9:2f:41:79:c7:20:8a:
68:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:2F:9C:BF:F3:6B:3E:5F:0B:28:F7:52:05:A1:09:CE:55:E1:9E:EB
X509v3 Authority Key Identifier:
keyid:43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9f:e8:6d:79:e4:99:8e:2a:46:61:e7:f2:c5:03:15:81:94:
b7:bb:71:a3:a1:ca:d2:94:9f:43:72:09:d6:04:fb:03:2e:0a:
0f:a4:54:ab:79:06:61:de:9a:54:ca:0b:3d:6b:34:b6:df:9d:
90:24:02:b5:cd:b5:ed:f7:a0:e2:4b:73:6d:15:30:f4:e3:2a:
43:ca:50:49:42:db:1c:6b:ab:82:d6:a9:21:e0:13:0d:73:43:
70:5f:cc:2b:ae:98:a7:15:37:a1:8e:6e:39:23:64:4e:b9:9a:
74:a4:3d:d7:8c:1d:9d:c7:3c:30:cd:ec:44:d1:17:20:7b:f5:
71:28:ea:19:7e:ba:90:b2:1b:7e:69:4b:1b:64:bf:c3:62:49:
80:aa:5f:95:41:ca:25:5b:e7:29:bc:7b:c4:be:67:b9:56:0e:
de:f2:2c:97:0a:b9:1f:75:dc:ad:e1:93:f6:f3:a0:99:dc:d2:
d1:df:a5:df:64:50:cf:4f:c9:cc:b1:ea:37:b2:86:bb:9d:b2:
f8:2e:c2:11:39:bd:5f:c0:1d:23:d9:6e:99:dc:12:6f:21:ae:
7e:d3:c2:a4:88:46:06:10:1c:f9:03:92:ea:02:c5:d9:d4:c1:
d2:b2:61:9e:29:d9:97:6b:a5:a9:12:e5:26:6f:af:30:19:1b:
e1:7b:b3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 23:58:57 2025 by rpki-client