Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
File: qsqNwMC5IbCJ8WAmGORVN5enR0I.mft (raw, json)
Hash identifier: TFHOk9G5MsPP6an7u9Sah6c0yK1hxd65Q3sLCQIC6Sc=
Subject key identifier: BE:B9:E2:73:28:31:32:E7:F6:4A:A9:BD:DB:7B:F7:4D:4D:E8:C9:97
Authority key identifier: AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
Certificate issuer: /CN=aaca8dc0c0b921b089f1602618e4553797a74742
Certificate serial: 019653B6E5898FDF135C6BDF2920F4075940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
Manifest number: A0
Signing time: Sun 20 Apr 2025 15:00:17 +0000
Manifest this update: Sun 20 Apr 2025 15:00:17 +0000
Manifest next update: Mon 21 Apr 2025 15:00:17 +0000
Files and hashes: 1: 0TAMfzKO6y7wTDVfhrp7A0vqejU.roa (hash: 3Yzu9IXvscc/7fQLVXNg8nKXbm7Wf5jZKKVCSByaB5U=)
2: qsqNwMC5IbCJ8WAmGORVN5enR0I.crl (hash: Npx8uY00mIbZhEbqK7ducXYqVa1bMPr4hE5BE6mWhRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b6:e5:89:8f:df:13:5c:6b:df:29:20:f4:07:59:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaca8dc0c0b921b089f1602618e4553797a74742
Validity
Not Before: Apr 20 15:00:17 2025 GMT
Not After : Apr 21 15:00:17 2025 GMT
Subject: CN=beb9e273283132e7f64aa9bddb7bf74d4de8c997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:12:bd:f4:0c:dd:7f:c2:38:55:29:2f:4b:5e:
c6:e1:60:ac:21:11:d4:f3:ca:3d:6b:4a:fc:db:88:
82:b5:43:8a:15:83:2f:e2:4d:5e:33:d6:62:b1:f3:
9f:f3:87:96:a2:35:f2:47:8c:1b:bb:7d:52:5f:ec:
2a:af:86:9a:14:e7:3d:65:2e:d6:89:4f:1d:26:8f:
05:08:56:50:db:ea:a0:22:43:c9:f5:35:68:e8:1b:
9d:37:6e:4d:d7:7b:93:79:1d:6e:87:87:bf:01:ca:
c1:e4:e6:d0:4d:c1:80:8b:ce:8a:9b:0b:c5:3c:a9:
48:49:e0:6b:53:56:d6:fc:9b:41:6c:02:46:47:d2:
d3:40:f5:38:7b:19:01:6f:49:75:ef:9a:9a:96:ba:
3b:c0:60:b4:8a:aa:47:48:fd:24:22:02:3a:ca:3e:
ab:d0:7c:01:44:88:7e:d8:1c:c6:58:ff:82:53:db:
86:5a:bf:06:cb:9f:2a:28:f4:22:8d:d7:a8:89:6e:
1a:a8:6c:69:b5:1c:fe:55:12:fc:a0:f3:f4:06:bb:
f7:54:3e:49:b5:22:26:8d:52:c8:f7:77:10:e2:37:
dd:31:4a:44:5d:99:99:1f:5e:bd:e9:77:0d:5d:3f:
f3:5f:fa:ef:71:4c:a9:07:af:55:23:f1:17:c5:f1:
57:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B9:E2:73:28:31:32:E7:F6:4A:A9:BD:DB:7B:F7:4D:4D:E8:C9:97
X509v3 Authority Key Identifier:
keyid:AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ce:ca:0c:ad:d3:cd:9d:f3:88:cd:e5:db:63:a8:55:ad:a3:
54:bd:98:89:fb:81:1d:f5:bb:72:2a:f7:0e:d4:71:f6:29:de:
0b:25:d8:4d:6f:8e:65:af:f7:44:32:df:12:7b:42:f1:60:5d:
ee:35:e5:3a:b1:1e:ec:94:a7:18:70:0e:d8:16:a7:d3:c4:8d:
2a:df:a1:fa:e3:ee:35:35:3a:a6:26:4c:a6:f6:a3:7f:b6:02:
d2:5a:03:43:25:ab:43:75:bb:26:fe:cd:64:a0:6c:30:d1:8b:
88:4f:e8:ca:b3:19:bf:50:2a:cb:11:02:79:aa:2d:24:4e:6d:
35:78:a1:3b:76:ce:39:4b:a0:9e:1f:22:8b:67:d1:bc:b1:c0:
85:30:e9:eb:86:c3:82:e7:03:99:7c:53:4a:54:26:e4:0c:e4:
19:eb:2d:0f:e4:e7:99:9e:31:c0:9a:6b:10:0e:b0:37:e9:c2:
c7:5c:e6:0d:a8:c7:e5:f2:10:17:f7:a3:ba:f0:a9:c3:82:e5:
35:a0:84:ab:83:8e:03:15:43:df:37:2b:05:58:0c:45:0f:8b:
01:f7:d3:54:eb:cd:d5:28:6b:9f:78:63:e1:fe:8d:3e:43:e2:
d6:28:d8:b4:c3:cb:e0:79:37:6a:73:4b:dd:df:a7:1d:28:00:
e2:ca:cf:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:22 2025 by rpki-client