Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
File: qeC20TzRHzYRT6mEAzgElByC8UM.mft (raw, json)
Hash identifier: /7dTpyFAaha3kTCOQGHV9nn6f4ltH8NJPsLOUKlYyKQ=
Subject key identifier: 26:77:30:81:9D:7D:CF:3F:9D:2B:66:32:77:18:75:AB:F9:AA:F3:30
Authority key identifier: A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43
Certificate issuer: /CN=a9e0b6d13cd11f36114fa984033804941c82f143
Certificate serial: 01965982612DA0B37F18F2799E1AFC987716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
Manifest number: 10DB
Signing time: Mon 21 Apr 2025 18:00:38 +0000
Manifest this update: Mon 21 Apr 2025 18:00:38 +0000
Manifest next update: Tue 22 Apr 2025 18:00:38 +0000
Files and hashes: 1: lO3U7O5xn_SH8biBa02wbaj6rwE.roa (hash: Ur2/ddmmedYhTdeyhrYUxfNHrSlslVFvOy6wD+8Tc1U=)
2: qeC20TzRHzYRT6mEAzgElByC8UM.crl (hash: ahJ6MwIH1odwzx7CGWrJfTsgptzfI6Ua9KSdOrgmung=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:61:2d:a0:b3:7f:18:f2:79:9e:1a:fc:98:77:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9e0b6d13cd11f36114fa984033804941c82f143
Validity
Not Before: Apr 21 18:00:38 2025 GMT
Not After : Apr 22 18:00:38 2025 GMT
Subject: CN=267730819d7dcf3f9d2b6632771875abf9aaf330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a6:92:d9:fa:17:7f:42:17:01:e2:37:dc:27:
02:ec:62:4f:12:d6:af:fd:9e:b1:63:4e:84:32:41:
b3:8e:4b:b7:87:bd:e7:c2:e6:84:93:9a:40:23:35:
f5:df:0d:5b:67:cc:74:c6:aa:b5:f5:ae:8b:41:08:
22:f9:79:6d:72:00:e6:91:8e:44:ec:5f:a7:6f:43:
e7:79:2f:98:36:b0:28:19:76:f3:3e:d9:74:b4:4a:
fa:98:eb:22:27:32:47:76:78:95:39:22:be:2d:73:
22:f7:5a:43:e6:f3:26:c0:8b:7f:36:39:ee:fd:c9:
95:9b:80:d4:cf:9d:98:ff:84:81:84:fc:96:f9:8c:
8f:43:0c:23:95:b8:e2:91:b6:1d:bb:3d:c9:e4:be:
a9:5f:11:d3:cc:f2:b9:42:ce:57:9a:c9:69:ab:71:
f3:f2:2d:c1:ce:b8:ce:e8:b0:02:6d:73:49:5d:fc:
3d:9e:34:05:97:c3:3a:47:7c:c4:c9:76:df:55:e9:
ba:fc:06:ce:80:d9:ed:38:71:a3:5c:3f:08:b7:59:
b3:bc:bd:00:16:38:84:3d:5d:f1:fc:b2:33:4c:37:
2b:77:55:e9:b9:42:b5:78:b8:6b:c9:cd:fe:5a:ee:
2c:34:ec:83:0c:25:a7:07:72:92:52:d8:0a:1a:d2:
09:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:77:30:81:9D:7D:CF:3F:9D:2B:66:32:77:18:75:AB:F9:AA:F3:30
X509v3 Authority Key Identifier:
keyid:A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f7:b8:c5:b4:ed:df:f1:6c:4d:a3:8d:c4:91:c1:35:dc:ac:
3e:05:b8:5a:1b:41:d5:ca:3d:c7:7b:20:22:52:e4:c1:2c:0c:
42:28:d4:d7:a8:76:08:3d:e7:64:34:fc:b6:78:a5:af:35:79:
b0:de:bb:03:e3:73:eb:cd:17:56:d7:89:64:1a:67:55:fb:25:
59:49:41:39:5a:a2:4f:63:48:e8:96:78:0b:cb:42:d3:39:35:
41:a7:0a:e8:24:00:22:d5:cf:82:f9:20:03:da:3e:97:38:f8:
b3:35:28:27:28:56:52:6d:00:a5:e3:e5:4d:35:fa:f7:2e:f7:
96:de:31:b5:96:43:16:d3:c7:fa:7b:92:17:17:2e:62:da:ee:
82:48:bc:a4:da:43:7d:dd:02:9c:18:f2:10:a7:54:91:9f:51:
f0:b8:f5:99:32:10:83:a2:9d:58:ff:f3:98:da:bf:d0:c3:96:
89:b0:3d:6a:8a:a5:9a:23:6f:74:af:60:60:2f:cf:11:52:fe:
9f:4f:7e:48:2c:fb:89:9e:f5:cd:6f:de:f9:3c:01:ef:6a:2d:
f1:5b:1c:35:64:b0:19:8d:21:4d:4f:45:c0:e2:06:df:0c:a7:
21:8d:88:5f:71:2a:de:ed:8c:58:06:99:78:6f:d5:c7:dd:40:
43:73:1c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:40:42 2025 by rpki-client