Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
File: QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft (raw, json)
Hash identifier: NhUeD6ZDuhZDJ1wy8vgiFS7FfZpv2YSGW68gfvRIezg=
Subject key identifier: 61:49:7D:31:E2:F2:23:AD:81:89:96:61:52:30:4C:16:5A:31:7E:B9
Authority key identifier: 41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57
Certificate issuer: /CN=41600300eeed5af5d7fc09d8fc158b65935ed057
Certificate serial: 01965537798E58947B9785CC8CA0E3E53301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
Manifest number: 0BD4
Signing time: Sun 20 Apr 2025 22:00:21 +0000
Manifest this update: Sun 20 Apr 2025 22:00:21 +0000
Manifest next update: Mon 21 Apr 2025 22:00:21 +0000
Files and hashes: 1: QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl (hash: aF9CXiZDFeF9e82F8Fg1Oah8YPag84T93nVuhWV+rBs=)
2: W0mc7WeTNbvVyKRZnKoY5IklP-A.roa (hash: BnijXL5FMZmk2zWfbqgaQXF8ehYBDzpPQFPkyywiPoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:79:8e:58:94:7b:97:85:cc:8c:a0:e3:e5:33:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41600300eeed5af5d7fc09d8fc158b65935ed057
Validity
Not Before: Apr 20 22:00:21 2025 GMT
Not After : Apr 21 22:00:21 2025 GMT
Subject: CN=61497d31e2f223ad8189966152304c165a317eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:39:fc:bd:f1:ed:58:50:3d:6e:a1:18:1c:77:
a6:40:71:cb:35:62:56:85:95:6b:6f:9a:cd:79:1a:
5d:47:ec:78:99:ef:37:47:32:f6:83:97:cf:38:46:
70:18:9b:32:87:89:e2:36:15:34:7b:fe:64:7b:4e:
78:65:da:17:44:30:50:db:96:93:2f:f2:e5:e6:1d:
d8:97:0a:fd:9e:79:d7:98:3d:08:d6:14:f2:7c:5b:
6c:bb:a1:b4:12:ed:94:7d:5d:43:d6:b6:4d:9b:15:
c3:2d:57:0f:1c:55:ac:a0:ec:bf:78:c1:cf:9f:7d:
92:77:59:22:0c:3e:ec:2f:90:a8:b3:86:29:58:75:
60:36:92:fd:12:84:91:55:e2:f8:bc:2e:b7:a9:fe:
e2:4c:3f:7b:66:42:27:6a:21:8a:df:4e:4d:da:b1:
5d:ce:16:84:90:86:bd:96:3c:12:90:dd:6b:21:1e:
63:f9:a3:26:a6:61:5d:56:37:dc:55:8a:c2:55:a1:
56:37:d8:fc:ab:39:ff:83:86:59:17:3a:09:bf:c6:
78:8a:37:da:1e:48:7a:a2:f8:af:f5:50:55:ab:f8:
bb:0a:c7:9c:b3:b9:09:90:b3:0b:df:77:8f:f7:30:
da:e5:82:aa:f6:3c:d2:22:7f:2b:92:1e:7e:e6:b9:
94:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:49:7D:31:E2:F2:23:AD:81:89:96:61:52:30:4C:16:5A:31:7E:B9
X509v3 Authority Key Identifier:
keyid:41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:5a:98:f8:48:40:3c:52:14:b1:1b:12:db:f5:e2:fd:08:df:
11:07:9f:a7:72:52:8b:14:d5:ef:68:80:e3:1a:c0:e8:e0:07:
4a:e8:6c:b1:c8:3f:db:eb:24:2e:68:aa:8a:17:fe:45:44:e0:
5c:fe:df:72:66:87:ea:98:23:09:8a:1d:81:98:ef:14:2c:a7:
42:26:25:c3:66:28:d9:e4:77:05:a3:54:de:9a:29:83:44:8d:
cc:90:ca:32:dd:12:b0:84:f9:e7:18:27:1b:78:12:01:3c:e9:
1f:90:5d:a4:ee:ee:10:96:f7:85:c4:e1:e5:38:33:b0:68:b2:
5d:fb:9e:af:04:ab:06:eb:be:18:3a:78:b3:f5:49:c5:12:f8:
78:6e:b4:1a:56:55:9b:26:af:68:1a:67:4f:ec:dd:d4:54:30:
2b:3e:54:3c:9d:e8:b5:43:77:fd:20:5e:18:b0:f5:68:c4:5d:
da:87:37:11:2e:0e:14:97:e6:6c:29:33:0d:13:7c:be:4c:b1:
bf:3b:2c:bc:71:c3:75:ae:3e:4b:3c:c6:70:1f:59:98:18:43:
bc:08:8b:71:e2:4f:57:86:2b:2d:5a:b4:90:78:11:a7:77:8a:
cb:ca:54:d3:49:3c:ed:84:dd:f5:8b:5a:73:3e:5a:4a:0b:f0:
68:e2:22:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:22 2025 by rpki-client