Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
File: Qb-tl6WMtQy_yE7IZa89ccixha8.mft (raw, json)
Hash identifier: pXjL8/7/lJtymGerg2FX1FzsEdlpA7XnCFa37IndvUM=
Subject key identifier: 63:30:AB:1E:CC:95:FF:72:96:14:6A:D3:52:C9:E9:62:D1:1E:1F:EA
Authority key identifier: 41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF
Certificate issuer: /CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af
Certificate serial: 019656B85E869C51855995C839BD2E4305AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
Manifest number: 1001
Signing time: Mon 21 Apr 2025 05:00:45 +0000
Manifest this update: Mon 21 Apr 2025 05:00:45 +0000
Manifest next update: Tue 22 Apr 2025 05:00:45 +0000
Files and hashes: 1: Qb-tl6WMtQy_yE7IZa89ccixha8.crl (hash: /nTo7kbbt9IwCyyD0cOyuK0R9SmW3V6pbbuQL04gSi0=)
2: TAMhyO_TxaxCZl8ndF5QQYJ7fSc.roa (hash: fwo98qFwUrEP75fKt0AHaKO4fww5cOw9kGra/QKoqNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:b8:5e:86:9c:51:85:59:95:c8:39:bd:2e:43:05:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af
Validity
Not Before: Apr 21 05:00:45 2025 GMT
Not After : Apr 22 05:00:45 2025 GMT
Subject: CN=6330ab1ecc95ff7296146ad352c9e962d11e1fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f1:3f:e9:16:51:e0:d3:1c:ff:33:61:a6:75:
e2:b4:be:4a:03:79:b0:f6:52:a5:61:0e:25:e2:5b:
88:87:43:f7:01:d6:16:86:f9:69:82:4f:8f:fa:05:
f0:d1:59:76:8b:83:6b:b0:f6:50:f5:75:88:06:89:
5c:06:37:26:7e:77:1b:16:98:30:f2:bb:7d:d4:22:
c5:cc:aa:7e:cb:2f:b0:79:3f:63:30:a8:21:fb:ef:
42:ce:33:e9:ea:dc:6d:e5:2a:1e:c0:0a:91:7a:14:
df:37:2b:34:c5:ce:14:00:7e:f9:e0:9b:9d:0c:34:
e8:93:c5:39:97:d2:aa:9c:ec:1c:fa:b2:40:a3:f5:
ac:66:0e:31:63:fc:77:2d:f5:33:a6:90:4f:e3:64:
e1:37:d8:07:db:9f:7c:68:31:12:1e:29:f7:be:7e:
12:11:da:0e:2f:82:ae:9d:4e:08:30:f2:15:54:b8:
e8:7c:f0:a2:41:22:4f:77:36:fd:54:fc:85:ff:d3:
fd:5f:07:a4:03:47:a9:41:6d:ce:99:4e:bb:3d:98:
f6:14:a6:fb:8c:24:de:61:cc:3a:c3:11:0f:3a:0f:
a5:52:c3:0e:6f:64:72:02:0d:27:09:38:4a:60:10:
fd:d7:71:76:04:c9:4f:38:3b:d0:9f:85:a8:15:43:
32:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:30:AB:1E:CC:95:FF:72:96:14:6A:D3:52:C9:E9:62:D1:1E:1F:EA
X509v3 Authority Key Identifier:
keyid:41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e1:5b:21:cc:b5:1d:b5:d1:0b:08:04:09:f1:4a:fc:75:63:
01:fc:46:92:50:fd:96:2e:37:fd:a4:24:63:bc:6d:9c:d7:44:
4d:db:12:2b:92:aa:79:1f:82:6d:a0:3c:9d:53:da:5c:c4:91:
6a:4d:b3:97:a5:9f:9c:f6:68:b3:23:c6:d0:48:bc:a3:4c:73:
df:eb:9c:68:cf:75:0e:a7:c3:3c:dc:40:98:c2:bc:94:ce:7c:
04:3a:9e:92:f6:07:e5:7c:27:7f:e1:f4:06:6f:31:33:da:88:
45:88:2a:67:ee:16:80:1e:70:f2:b9:cb:8f:58:46:b9:24:d9:
26:e6:01:ba:11:e6:4d:62:9e:3d:a5:12:27:8b:2d:8b:55:12:
2c:c9:28:bf:f3:e7:5a:4a:7f:0d:72:6a:f3:ce:a8:27:e0:c5:
eb:96:d7:dd:ac:eb:1d:98:70:88:19:95:27:b9:8a:c7:3d:7b:
06:21:93:47:4e:0a:5b:46:c8:7a:03:08:6a:71:8c:13:5d:1a:
5b:57:8e:98:68:58:56:a6:73:29:44:27:c7:ab:bc:e5:24:e3:
25:73:e8:66:7b:92:44:ea:e6:7e:bf:2d:f8:f0:e9:f7:2b:c5:
51:17:65:d8:e0:89:42:57:cc:c3:33:4a:e6:25:b4:d6:85:11:
42:5c:6f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:11:31 2025 by rpki-client