Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
File: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft (raw, json)
Hash identifier: 4vQrN13Vm/QVd+LA5YebrxHx8kdTNAFltpsH+wvPvgM=
Subject key identifier: 32:E7:BF:22:6B:A7:3B:D5:B5:C0:4C:9B:65:08:5F:A8:CC:92:69:74
Authority key identifier: 09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
Certificate issuer: /CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Certificate serial: 0196A1D264FE1C8A69BE948A4362AC6269BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
Manifest number: 13B9
Signing time: Mon 05 May 2025 19:00:42 +0000
Manifest this update: Mon 05 May 2025 19:00:42 +0000
Manifest next update: Tue 06 May 2025 19:00:42 +0000
Files and hashes: 1: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl (hash: nr/wFrllJ6/9GFZnl2MBFBUss17HheY4LVkJYTEEbJc=)
2: TmgqBpglNVZfQ6dNI0QikqOaRh0.roa (hash: G5eisvL1sfpBh2+KIjiXidcLDo6qfpZS+YH09MKDa08=)
3: quAevwWcT98bf654qLWm8mJZnuo.roa (hash: Cjjwh3AHZnP9cZfkJf8nJGuosyVJj9NPURda/Hfp5vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:d2:64:fe:1c:8a:69:be:94:8a:43:62:ac:62:69:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Validity
Not Before: May 5 19:00:42 2025 GMT
Not After : May 6 19:00:42 2025 GMT
Subject: CN=32e7bf226ba73bd5b5c04c9b65085fa8cc926974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d8:ea:31:cd:60:e6:6e:ca:18:ff:a4:3a:f2:
c4:ba:73:e5:eb:a5:fa:13:db:7b:a1:5d:e0:30:50:
4d:34:51:29:cc:90:e6:58:2f:85:56:7e:27:6a:61:
ca:7d:a0:a1:6c:1d:ad:c1:91:c9:61:5d:45:a4:5a:
53:09:48:ec:ca:45:c5:12:14:f8:43:c7:b5:77:19:
ce:3e:41:5b:09:39:be:ca:79:b3:2c:3f:23:87:e1:
33:73:05:a6:17:b0:31:78:1f:9d:1a:ce:58:61:71:
d1:8a:50:73:2a:f2:0c:80:2a:ad:f9:0f:05:a3:f6:
2d:7c:e4:c0:f3:d0:ac:47:1c:02:03:ea:37:52:af:
a2:b8:da:f8:fc:0b:89:62:0c:8e:35:57:9b:5a:67:
ca:2b:38:4b:06:34:14:9a:4a:26:84:bc:cb:36:7e:
ff:dc:a3:99:ed:22:fb:09:e6:8a:27:50:24:18:e9:
41:8a:fd:ba:6c:93:6e:88:2a:fc:6b:77:68:30:bc:
2a:9b:17:dd:2e:b4:c1:55:1f:00:00:41:42:7c:e8:
b2:bb:b7:08:2a:cd:35:55:1d:29:7e:ab:46:bd:22:
3e:0a:e9:ec:b5:e2:a1:7e:a5:45:2d:34:ea:7b:1a:
ca:cf:cf:57:bf:35:15:fe:e3:a0:6d:47:64:ad:37:
02:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E7:BF:22:6B:A7:3B:D5:B5:C0:4C:9B:65:08:5F:A8:CC:92:69:74
X509v3 Authority Key Identifier:
keyid:09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a5:bb:72:2f:20:02:7e:99:c4:e0:aa:2e:05:78:36:40:9b:
05:43:85:d7:a3:41:16:5c:15:b0:48:1e:60:7f:0e:6b:71:3e:
a7:49:11:db:52:2d:c8:f0:45:f8:6e:42:3d:25:f3:82:ef:f9:
aa:56:52:4b:3b:ba:8d:a1:16:55:a9:02:77:d4:f3:72:9c:2c:
10:75:28:51:e0:a3:64:33:76:a0:77:1a:dc:dc:f2:1d:e5:26:
9b:2b:29:70:b8:2f:f1:86:d0:f1:6e:cd:57:a6:90:69:32:0f:
38:be:85:90:43:ed:8a:e0:e7:9a:6c:22:e0:7b:1c:81:dc:de:
11:f0:13:cd:ba:64:54:a0:43:0d:54:c8:11:f1:3d:f4:54:34:
86:00:16:47:87:29:6e:cd:a7:07:9e:42:9d:31:22:07:b0:a1:
f7:37:27:f8:d4:a0:fe:01:2f:ef:de:ed:d4:b5:37:c3:77:d1:
60:1e:ed:04:85:b9:ed:5a:77:fc:b4:1e:bc:8f:d1:f9:e8:4e:
76:20:39:59:74:99:0c:7a:51:cb:04:9d:12:cd:c4:83:9a:e3:
91:18:2c:f3:17:1b:15:ce:7e:6a:47:95:73:23:1f:c7:9b:17:
9e:58:e8:56:dd:83:0e:ee:af:5a:a1:ad:52:49:81:67:bd:1e:
f3:81:2b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:19:29 2025 by rpki-client