Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft
File: QCc8FepF3zcZPjRbae3YP4xvIgI.mft (raw, json)
Hash identifier: 8Wc1QEVGdx+eoYOebrycGUZRFXLajG0O+KTOde0lSok=
Subject key identifier: 48:C6:29:89:11:F6:E4:36:99:9E:C2:E9:F3:15:46:AF:FD:65:58:56
Authority key identifier: 40:27:3C:15:EA:45:DF:37:19:3E:34:5B:69:ED:D8:3F:8C:6F:22:02
Certificate issuer: /CN=40273c15ea45df37193e345b69edd83f8c6f2202
Certificate serial: 019655A60E2BB312BEA488500969E9CF1E62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCc8FepF3zcZPjRbae3YP4xvIgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft
Manifest number: 44
Signing time: Mon 21 Apr 2025 00:01:08 +0000
Manifest this update: Mon 21 Apr 2025 00:01:08 +0000
Manifest next update: Tue 22 Apr 2025 00:01:08 +0000
Files and hashes: 1: QCc8FepF3zcZPjRbae3YP4xvIgI.crl (hash: cy6IMlmK5g3ajwGZNOkNhQyx7cKuLA+UcJJQHAAZRbk=)
2: rg92faZanaYES8NBj5pg8WmI5nI.roa (hash: 8R4hL47sFCLdHAmoIZE8IPnGm4ZN8Yi2FpnpcDwoEOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCc8FepF3zcZPjRbae3YP4xvIgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a6:0e:2b:b3:12:be:a4:88:50:09:69:e9:cf:1e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40273c15ea45df37193e345b69edd83f8c6f2202
Validity
Not Before: Apr 21 00:01:08 2025 GMT
Not After : Apr 22 00:01:08 2025 GMT
Subject: CN=48c6298911f6e436999ec2e9f31546affd655856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:40:2c:bc:55:67:79:b4:31:60:60:30:60:34:
ea:52:bf:45:15:e9:c8:f0:47:d6:65:92:b0:4a:8a:
40:ea:d6:ca:01:7b:c8:92:f8:5c:90:47:79:e3:cd:
99:75:dd:6c:0d:d2:a7:90:9d:7b:f5:34:44:fc:49:
fe:81:1f:b2:a4:35:46:0e:c3:05:a6:23:63:5c:f0:
7f:80:18:13:84:56:a9:19:44:16:f6:ec:f0:76:ef:
99:87:8d:60:a6:e6:ca:b5:a1:e5:76:e4:01:47:e3:
4a:5f:09:70:fd:d1:55:e7:b7:5e:cc:ce:c4:8d:66:
0b:07:17:b3:69:41:9e:04:d2:15:d1:8e:e1:b5:a0:
d1:cd:cb:17:ae:e4:eb:ed:19:b4:20:89:1d:bd:1b:
2b:b2:fc:78:ed:e5:7a:3c:d4:3f:10:25:b1:94:cd:
53:29:87:35:91:3e:33:7c:b3:ea:ed:03:3f:4e:6e:
05:58:99:2a:64:63:6c:87:01:f6:cf:f2:7f:72:35:
f1:8e:2a:fc:5c:87:e7:ea:fc:05:89:7e:81:e6:ed:
65:07:e6:7c:8b:3c:e6:3f:99:e4:cf:26:76:33:b6:
cc:bf:52:2d:f6:0a:91:04:e5:cb:55:cf:76:d1:54:
f8:34:24:59:8b:65:32:d6:5c:99:74:15:a5:9d:6f:
cd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C6:29:89:11:F6:E4:36:99:9E:C2:E9:F3:15:46:AF:FD:65:58:56
X509v3 Authority Key Identifier:
keyid:40:27:3C:15:EA:45:DF:37:19:3E:34:5B:69:ED:D8:3F:8C:6F:22:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCc8FepF3zcZPjRbae3YP4xvIgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:82:f7:4c:25:15:ed:b0:ac:0b:24:ba:20:c2:a1:87:2b:1a:
b8:d0:dc:67:32:89:a9:ef:1f:04:d3:e7:fc:0a:a1:c9:28:39:
9c:29:c9:c4:3e:28:ff:10:c0:94:7e:0b:ef:53:dc:11:e8:ac:
48:aa:38:89:45:b3:06:28:e7:0a:a7:56:19:c6:a7:39:10:84:
7d:55:3e:5d:e7:8c:f3:4b:fb:93:bc:a3:78:61:83:55:c3:2c:
7d:b1:84:f1:83:5d:cb:e4:59:72:d9:f6:89:6a:18:d4:0f:c8:
c0:5e:dc:ba:17:75:4c:d8:6b:23:32:2d:4f:ca:b0:a5:0c:6e:
9d:5e:47:90:b1:34:39:d2:23:8f:2a:5f:29:75:46:ad:63:ac:
ad:92:f9:4d:dd:2f:18:d0:3c:7d:07:f3:1c:69:d8:17:27:cc:
7c:b7:b5:df:4d:07:b5:a0:29:c4:2f:61:e7:36:09:b1:31:ca:
2b:07:1a:01:66:64:f7:3d:51:93:c9:ce:e5:08:09:79:25:89:
24:4a:d2:87:77:f2:c5:b8:02:ba:e2:dc:a3:b9:51:46:df:70:
21:a0:f0:26:2c:96:90:75:74:da:1a:6b:51:fd:20:22:6a:25:
ac:71:83:19:95:03:74:0b:9f:92:a2:be:b5:bc:85:c6:ad:3c:
b3:9d:60:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:23 2025 by rpki-client