Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
File: QIyWuStsaY_TT6x9WB1MCQjczpk.mft (raw, json)
Hash identifier: ykI+Qcmq+/H0lZtv6q+nnOB8vnBFIacR6aKmkn8lz7M=
Subject key identifier: CD:3C:43:54:8F:76:11:59:17:ED:B5:54:6A:BD:42:AA:15:AD:4E:C3
Authority key identifier: 40:8C:96:B9:2B:6C:69:8F:D3:4F:AC:7D:58:1D:4C:09:08:DC:CE:99
Certificate issuer: /CN=408c96b92b6c698fd34fac7d581d4c0908dcce99
Certificate serial: 0196598240FC3F05C4B43ADE7E8EC42A94CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIyWuStsaY_TT6x9WB1MCQjczpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
Manifest number: 10D0
Signing time: Mon 21 Apr 2025 18:00:30 +0000
Manifest this update: Mon 21 Apr 2025 18:00:30 +0000
Manifest next update: Tue 22 Apr 2025 18:00:30 +0000
Files and hashes: 1: QIyWuStsaY_TT6x9WB1MCQjczpk.crl (hash: PC5bKAaCL5Gk0P8zLxsUp+mKaqDbgqKNe9DAXNNMUyY=)
2: o7v3w6s-TtM4FqHNx2KIzrdDfyg.roa (hash: E/bv9FlRfrfb8DUNG3s4m8ELhpH6SWFAZyVqbfxptQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIyWuStsaY_TT6x9WB1MCQjczpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:40:fc:3f:05:c4:b4:3a:de:7e:8e:c4:2a:94:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408c96b92b6c698fd34fac7d581d4c0908dcce99
Validity
Not Before: Apr 21 18:00:30 2025 GMT
Not After : Apr 22 18:00:30 2025 GMT
Subject: CN=cd3c43548f76115917edb5546abd42aa15ad4ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d8:b2:6f:5a:37:3b:86:1f:14:c7:cf:7d:c1:
70:91:e2:16:f4:8a:c4:a2:f5:52:8f:d8:48:eb:74:
e3:ea:ca:aa:59:f3:93:b8:7f:c8:1f:fa:7a:bb:b7:
b7:a9:ec:ab:82:1f:da:58:15:c1:a3:f3:47:f9:c2:
ce:bd:62:f8:f4:01:3b:84:76:6d:1a:53:0b:2c:54:
46:c6:8f:3e:e2:cd:6d:b8:84:5f:23:11:a6:f9:4a:
15:f6:f4:8a:aa:af:9b:a7:b7:cc:45:25:dd:3f:b0:
14:27:b1:3d:72:5f:52:77:7b:4f:b0:f9:4d:aa:0b:
84:70:dc:2e:0f:c5:03:a2:fe:68:53:db:7b:e3:e6:
6b:d5:e4:ab:8c:b0:21:16:10:17:b4:d6:c0:b0:17:
44:3d:d6:79:c9:cc:a7:76:71:f8:6b:39:39:54:e7:
70:1c:31:65:4d:a2:c4:d1:62:bb:34:ef:0f:33:11:
7f:04:8b:f8:32:2e:34:db:30:ac:0e:1c:73:af:4a:
4e:61:9f:85:57:9f:8b:92:9d:40:1d:0c:e0:37:f8:
52:8e:a8:9b:a5:5d:14:a0:a4:7b:a0:e7:9b:e2:2c:
85:80:22:92:06:66:b5:ef:ff:fc:59:24:dc:b4:bc:
5f:ae:80:57:2c:a7:25:83:85:31:17:a7:8d:a0:f2:
70:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3C:43:54:8F:76:11:59:17:ED:B5:54:6A:BD:42:AA:15:AD:4E:C3
X509v3 Authority Key Identifier:
keyid:40:8C:96:B9:2B:6C:69:8F:D3:4F:AC:7D:58:1D:4C:09:08:DC:CE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIyWuStsaY_TT6x9WB1MCQjczpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:3d:d1:c4:ce:6b:03:d5:1a:25:35:a9:45:79:64:df:b5:f0:
78:26:7d:bf:a9:e9:48:57:d6:d3:07:94:e8:4e:35:2b:78:d6:
ac:a1:47:74:4f:71:88:ed:ca:43:72:cb:b8:0d:5e:10:e3:3e:
12:27:18:b2:e7:6d:5b:b0:ba:0d:46:db:df:91:d7:c2:8f:7d:
6f:9d:a7:31:47:58:b7:6e:11:b4:fc:7f:2c:55:59:40:61:8d:
ad:80:02:ce:e6:15:8e:ee:ba:75:79:e3:45:d9:2e:f4:bd:13:
86:bd:83:e9:de:db:9e:f6:31:69:a4:04:a7:ec:bd:f8:1b:cc:
b4:0d:e9:13:0b:2b:74:70:13:91:6e:be:c0:90:4b:df:fb:ea:
66:bd:ac:32:24:47:ed:88:65:ae:14:4a:24:f3:4c:37:a5:06:
70:b5:36:ea:c0:00:8d:51:87:86:10:e8:d0:db:19:bb:82:09:
ce:93:b6:47:95:17:fd:fe:8e:97:05:da:86:5f:e8:03:01:b2:
0f:41:a8:1a:04:5a:c6:c3:a6:6a:d7:94:68:1d:4e:38:58:33:
96:ac:43:a3:4e:59:00:3f:60:39:80:c1:8e:f5:7e:be:c6:b5:
ee:1a:87:14:b6:fc:b5:8b:ea:cc:eb:2c:34:6a:5b:90:cc:9d:
0b:d4:bd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:48:58 2025 by rpki-client