Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
File: QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft (raw, json)
Hash identifier: o701Hx2lzvuc8Zdnmafk1DvNBYM97ETPwMKrJWZ9sQk=
Subject key identifier: AE:CB:0D:85:2B:28:49:20:05:4B:97:E8:0B:6C:8A:CE:F9:FA:FB:DD
Authority key identifier: 41:2A:BB:11:4F:32:57:0C:5D:D5:20:66:25:9B:DC:80:C9:87:68:FD
Certificate issuer: /CN=412abb114f32570c5dd52066259bdc80c98768fd
Certificate serial: 0196556E76EB7DEDA9953DC3680DB3257BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
Manifest number: 0C3B
Signing time: Sun 20 Apr 2025 23:00:24 +0000
Manifest this update: Sun 20 Apr 2025 23:00:24 +0000
Manifest next update: Mon 21 Apr 2025 23:00:24 +0000
Files and hashes: 1: QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl (hash: Y4bfPKCuLDrWQ250XVOtEd6wWs+kJhOy8vd7PeSsmos=)
2: WjHlxqu14v8phrZRkyuwZHi4tA0.roa (hash: OgrQu5S4ReMsliJzFxYO2+I1LQQpOGuq17K/+Bl2UJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:76:eb:7d:ed:a9:95:3d:c3:68:0d:b3:25:7b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412abb114f32570c5dd52066259bdc80c98768fd
Validity
Not Before: Apr 20 23:00:24 2025 GMT
Not After : Apr 21 23:00:24 2025 GMT
Subject: CN=aecb0d852b284920054b97e80b6c8acef9fafbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:38:25:e7:89:e9:c5:7e:ed:4a:85:55:ae:b4:
d8:8d:ed:52:46:24:7c:cc:d0:6d:d9:64:3c:b9:30:
6d:ab:79:e3:68:80:da:22:2f:1a:f7:c2:e3:01:2d:
dd:87:68:ea:41:7b:63:a2:1c:16:58:aa:7c:1c:dd:
8d:a3:8b:23:09:7e:09:b4:95:b9:9e:0b:67:60:80:
32:89:1a:f6:8d:6d:67:ee:aa:82:24:bd:21:27:9c:
b2:40:7c:26:a2:86:6f:fd:94:f0:e5:eb:00:89:4e:
26:f0:af:81:c8:c2:d1:d4:78:96:c6:32:1b:bc:57:
1b:bd:11:bb:7e:df:12:25:10:f8:5b:f3:60:95:e7:
d4:fa:8c:e3:05:7f:f5:8d:a7:41:ca:af:8b:ef:f3:
f7:4f:ba:bb:83:5b:97:3e:f1:04:c1:39:52:71:ca:
59:f7:d5:e9:5d:87:4f:b0:c4:d0:44:e0:a5:42:be:
c1:cd:67:85:90:63:04:2b:3c:5d:32:89:ad:ee:0b:
f0:03:12:eb:ee:2d:24:94:98:64:03:c4:f9:29:6d:
c4:d5:74:72:4d:92:44:37:fd:79:4a:88:e6:cc:55:
41:94:ab:3b:c3:21:16:72:3c:44:ed:ab:c7:4b:66:
ca:d0:53:b9:91:18:2f:0e:49:8e:eb:d6:43:44:a4:
8e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CB:0D:85:2B:28:49:20:05:4B:97:E8:0B:6C:8A:CE:F9:FA:FB:DD
X509v3 Authority Key Identifier:
keyid:41:2A:BB:11:4F:32:57:0C:5D:D5:20:66:25:9B:DC:80:C9:87:68:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:eb:4f:29:4b:96:08:72:22:d5:d2:ad:b3:7b:2c:6a:9c:5a:
72:54:89:48:4f:af:33:90:6a:ab:85:c9:a6:81:f4:41:e7:df:
68:10:27:a1:c9:5d:1f:27:ef:b3:cc:46:31:eb:74:d7:39:a1:
9a:27:1d:c8:3b:4f:77:74:34:e0:c4:00:5e:b1:91:8b:11:de:
c3:ec:03:44:0a:72:3c:cd:85:67:8f:dc:0c:ac:73:49:61:f8:
d7:c7:9a:a2:12:de:08:b5:17:58:c7:94:78:37:f4:c1:6f:68:
99:6d:04:f6:79:94:09:e7:f3:f4:a6:27:78:c0:a0:b4:12:c4:
98:67:a0:5c:25:7d:83:61:fd:bf:ae:31:e2:c6:f5:ab:15:0e:
07:36:6b:05:7c:5d:96:bf:e4:7f:39:50:93:c9:ba:1f:d2:b5:
59:3d:6f:76:87:e0:44:04:4e:e0:18:a5:00:9b:34:2a:7b:e9:
64:a4:8a:93:08:47:20:6b:10:28:ff:fa:dc:8e:d7:78:ae:11:
b5:22:1f:a0:bd:ab:b6:52:ac:f7:ea:67:e3:17:23:9b:d7:ba:
ca:46:a0:b9:7c:5f:c3:e2:43:5c:54:80:19:88:e0:9f:c4:c4:
f3:84:82:b8:c8:63:fc:51:2b:61:4b:05:d3:bd:01:20:ba:fa:
d7:8c:66:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:14 2025 by rpki-client