Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
File: QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft (raw, json)
Hash identifier: +8Q1kTiojSpJW66jdgMq/OIAJJedlHU6cvRSXe7d9dU=
Subject key identifier: 5B:4C:7E:94:53:04:AB:CC:BD:93:37:78:84:E6:33:D4:8D:E7:42:66
Authority key identifier: 42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87
Certificate issuer: /CN=429196310a7f7dd9999ec43e938fd906985a3f87
Certificate serial: 01969FE3D37CFDEDA3B68E5808BCE459B072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
Manifest number: 0A81
Signing time: Mon 05 May 2025 10:00:30 +0000
Manifest this update: Mon 05 May 2025 10:00:30 +0000
Manifest next update: Tue 06 May 2025 10:00:30 +0000
Files and hashes: 1: QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl (hash: IUOllN5Ya0NJ2ITbA6rXt9lzNat+7AFQEWMZpFkcuzA=)
2: wqLf4HxTBxblmV7dYjywZ9LSO_g.roa (hash: xrazM8n3J2DoAIHJJglhb+L4RSIj7Z+1Mi/FtQpdckQ=)
3: yy37HnfCaW61gwGyu1dsgubo12s.roa (hash: iEoXay/v6I8F/MG3qHjPe1FvicHR4Thx5PSijnoSoog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e3:d3:7c:fd:ed:a3:b6:8e:58:08:bc:e4:59:b0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429196310a7f7dd9999ec43e938fd906985a3f87
Validity
Not Before: May 5 10:00:30 2025 GMT
Not After : May 6 10:00:30 2025 GMT
Subject: CN=5b4c7e945304abccbd93377884e633d48de74266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:74:c5:63:22:b9:23:e7:61:c2:1e:a1:0c:e1:
9d:b2:3b:57:8c:16:40:36:a7:67:ed:b6:41:1b:a5:
64:53:8f:95:86:f4:d2:e6:6a:da:1c:3c:6b:2e:27:
08:86:8a:91:d8:36:7f:1f:51:e2:c7:c6:9e:f5:d4:
60:7a:d6:27:7c:d2:a3:f4:6a:de:a5:25:84:a3:3d:
bd:f9:1f:7f:94:d4:59:de:b0:3c:84:f0:8f:e7:44:
c7:e6:d7:d1:11:26:fa:a7:b0:34:88:71:d4:7c:03:
b3:8b:3d:5d:f7:75:36:71:07:4b:03:ea:96:bc:cd:
09:2c:b0:bd:29:d5:31:aa:90:de:25:1e:67:a9:d5:
49:9b:b8:7c:a8:7a:0a:f6:96:f2:5b:b4:c9:bf:72:
8e:ee:db:39:3d:07:12:e5:e7:07:41:53:f2:1b:2e:
30:f5:73:ed:0d:76:95:97:43:2d:ac:10:ad:5a:d9:
d8:50:ad:c2:89:33:e2:55:dc:c5:06:c6:70:67:15:
a5:05:6a:f0:a8:48:e5:bd:b1:32:a0:27:ef:a1:a8:
9a:74:f2:a7:f8:0d:ba:ea:8c:32:7f:ab:cc:28:90:
10:9a:e7:6c:4d:a4:d5:70:a9:55:15:cd:3c:d0:9f:
a0:c7:03:8e:9d:f9:a3:98:b1:72:b5:a9:a5:2e:e6:
da:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4C:7E:94:53:04:AB:CC:BD:93:37:78:84:E6:33:D4:8D:E7:42:66
X509v3 Authority Key Identifier:
keyid:42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:9d:44:b5:e9:32:20:7e:7a:7f:e9:de:25:58:6b:94:44:c4:
96:5b:34:1d:7e:66:c2:37:66:6e:c1:85:87:7d:80:b9:e7:8c:
f1:b7:68:dc:d2:a7:e7:cb:67:a6:34:d1:7d:f3:ff:d9:af:84:
84:0c:62:72:10:9e:7f:8f:b9:84:68:42:10:e9:08:0b:ac:2a:
01:05:d3:75:f2:f6:f9:ea:dc:8a:b7:d2:44:7c:8a:c8:a5:a6:
98:0e:a6:19:cd:d6:3b:fc:05:c7:db:d0:29:a7:d9:9d:68:19:
ea:0a:95:47:4e:c2:fa:c6:cb:f5:17:27:91:5c:aa:16:db:30:
7a:a5:64:7f:b0:aa:a9:5a:cb:e4:1b:fb:da:10:ff:39:ea:a8:
b6:c4:ed:49:0a:a6:fe:5f:12:da:fd:7f:a3:3b:f1:f3:24:66:
05:bb:ab:1f:9f:00:04:bd:b3:58:34:1b:6c:f1:68:ad:9e:ba:
ae:f5:7f:24:03:d9:ef:92:41:cf:cc:f5:39:2e:84:b6:db:1c:
cf:b7:ec:b6:06:b4:58:ff:d0:39:d0:ac:0b:d2:0c:de:1b:f1:
cf:f1:fe:6c:7c:fb:da:94:7d:7e:b7:4b:ab:a2:d1:46:c4:9f:
68:81:a8:63:71:92:dd:7d:71:76:42:5c:67:86:de:3f:9a:be:
5c:53:62:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:04:53 2025 by rpki-client