Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
File: Q30oDLTq6BVqd9_no__F_UtNv6o.mft (raw, json)
Hash identifier: E5UWsxXEskNFA2Hl9Uy1+EC5En5/8jfTIV8qqIqZ+CE=
Subject key identifier: C9:0C:C4:F5:5E:F9:AE:08:54:A8:86:6A:99:51:4F:73:51:3E:93:20
Authority key identifier: 43:7D:28:0C:B4:EA:E8:15:6A:77:DF:E7:A3:FF:C5:FD:4B:4D:BF:AA
Certificate issuer: /CN=437d280cb4eae8156a77dfe7a3ffc5fd4b4dbfaa
Certificate serial: 01964C6BC7EFD744F6CB4D71038F5B339B99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
Manifest number: 0AE9
Signing time: Sat 19 Apr 2025 05:00:53 +0000
Manifest this update: Sat 19 Apr 2025 05:00:53 +0000
Manifest next update: Sun 20 Apr 2025 05:00:53 +0000
Files and hashes: 1: NUMGApw0ZIudlY6CbxaMIi5m3Sw.roa (hash: sPPFfl9rDy2r8PN0vy1ncdAusR2ktn2BYpHhqH/9HPU=)
2: Q30oDLTq6BVqd9_no__F_UtNv6o.crl (hash: BYM/31Toux66mmcV5SI9b4L0Pvr5Imf96i6fMFjfR8s=)
3: qmdW7QDQZDPCWqHqKcF3JA5rms0.roa (hash: ctHCP/FM4qoA2M0yYjlwR9ihsYeU5a4WMdFfP2zXVeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:c7:ef:d7:44:f6:cb:4d:71:03:8f:5b:33:9b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437d280cb4eae8156a77dfe7a3ffc5fd4b4dbfaa
Validity
Not Before: Apr 19 05:00:53 2025 GMT
Not After : Apr 20 05:00:53 2025 GMT
Subject: CN=c90cc4f55ef9ae0854a8866a99514f73513e9320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:3c:e0:e2:23:46:5c:3c:f8:3e:aa:f3:fe:81:
30:d5:04:ef:9b:dd:a8:02:86:61:41:9a:8a:32:40:
69:f6:d4:fc:0a:7c:23:e0:51:6f:a1:62:1b:f9:87:
0c:5e:6d:2d:04:f7:f4:12:fd:65:76:ce:cc:08:72:
75:3e:41:25:e9:8a:a8:f0:8c:47:5a:a5:11:e8:5f:
bf:56:48:37:2b:9c:78:f3:76:1d:91:13:eb:58:fc:
4c:d0:26:c6:2c:d7:22:23:42:68:10:4d:85:73:02:
38:d4:bf:b7:62:3b:1a:4c:98:cd:9c:46:0e:53:a9:
a8:8c:56:e0:96:a8:dc:2a:be:b0:de:b8:ff:2d:e5:
a5:ac:00:38:b3:34:0a:ae:fe:e2:ed:ae:0c:06:40:
1c:55:25:d4:37:6f:8e:40:45:ab:58:e7:c0:62:5d:
4c:45:6a:c0:37:9d:64:9c:55:61:1e:21:ba:33:af:
6d:90:f8:e3:87:fd:b7:f4:5c:53:9b:9f:68:f7:8a:
73:18:0f:d2:ed:b4:d7:51:38:b9:a2:1b:05:bc:72:
1d:c7:aa:4b:6d:98:a6:52:ce:41:a9:d9:ce:43:c2:
a8:b8:c3:1d:df:fe:68:99:ec:be:6c:70:37:2b:4d:
8a:00:e4:7f:72:a3:72:37:79:44:54:0f:1a:e1:df:
20:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0C:C4:F5:5E:F9:AE:08:54:A8:86:6A:99:51:4F:73:51:3E:93:20
X509v3 Authority Key Identifier:
keyid:43:7D:28:0C:B4:EA:E8:15:6A:77:DF:E7:A3:FF:C5:FD:4B:4D:BF:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:1a:23:3a:fe:69:67:bc:14:2f:f1:90:b4:1a:33:68:41:a3:
17:a3:91:f2:a5:92:4b:cb:af:9d:1b:8a:a5:b7:ae:4c:7b:77:
a2:3b:53:4c:33:a2:ff:8d:a9:5a:de:fe:cb:c5:c6:f2:b5:47:
86:d9:9f:b9:2e:d9:1a:27:1e:ea:64:db:b7:0c:a3:c1:74:ca:
ce:d7:bc:3d:89:e6:d1:90:6f:e1:da:21:19:c1:c1:de:ee:7f:
f8:cd:1f:a0:f9:0e:58:ab:7e:75:0d:43:1f:0a:18:d5:f2:1e:
7c:60:43:71:c7:a2:53:6e:0b:69:70:d4:73:2d:a4:62:71:e9:
fd:07:c4:e3:df:99:71:1a:8e:5c:85:b1:ac:aa:b6:d5:50:36:
c0:9a:e4:18:f8:06:cc:19:cb:6e:af:be:49:4a:5f:39:96:f0:
39:71:88:86:f5:5f:c8:dd:47:99:5a:87:c1:e7:98:97:c1:2a:
a3:88:16:3c:30:14:fe:da:1b:43:29:e5:ba:cd:cf:16:4c:93:
57:7e:8c:21:e7:e2:54:40:81:0c:88:11:48:ea:d3:94:ee:18:
2b:c3:2a:66:ac:11:80:dd:ec:c6:b7:13:9d:28:16:6d:43:0b:
c0:ba:76:96:68:b9:c3:2c:7d:e9:47:8e:b5:db:8c:04:8b:27:
4e:43:be:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:29:33 2025 by rpki-client