Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft
File: qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft (raw, json)
Hash identifier: 3Sn8TxC6RaYJjRxi01YwDKBCCNPryhA8PCrtFSSKbak=
Subject key identifier: 38:CD:D8:7E:93:1D:20:17:DA:C1:5A:9B:56:16:EF:17:80:A6:8A:70
Authority key identifier: A8:70:76:79:22:3C:88:3F:ED:7F:7C:79:FF:2F:29:3B:FF:87:30:B5
Certificate issuer: /CN=a8707679223c883fed7f7c79ff2f293bff8730b5
Certificate serial: 01965A952C95FE21FE2376CC75C77E65C3EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHB2eSI8iD_tf3x5_y8pO_-HMLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft
Manifest number: 0694
Signing time: Mon 21 Apr 2025 23:00:47 +0000
Manifest this update: Mon 21 Apr 2025 23:00:47 +0000
Manifest next update: Tue 22 Apr 2025 23:00:47 +0000
Files and hashes: 1: qHB2eSI8iD_tf3x5_y8pO_-HMLU.crl (hash: RH6RIO8A2Jm5U1HsztzbWrwJxKwP7lBwX1szA2VmtJo=)
2: yHgH_lMUm4oFa_GnCsmAbIU1COM.roa (hash: MjR/P2+PrAk5Bu0tg2NHyXtBDLvOpshbkzdWh1K2WRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHB2eSI8iD_tf3x5_y8pO_-HMLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:95:2c:95:fe:21:fe:23:76:cc:75:c7:7e:65:c3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8707679223c883fed7f7c79ff2f293bff8730b5
Validity
Not Before: Apr 21 23:00:47 2025 GMT
Not After : Apr 22 23:00:47 2025 GMT
Subject: CN=38cdd87e931d2017dac15a9b5616ef1780a68a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cc:8f:14:9c:6d:68:be:dc:a2:4e:60:e1:0c:
93:07:80:4c:f7:50:ca:6c:a0:71:df:1f:02:1e:72:
48:42:f2:78:9c:37:a4:02:23:70:1b:b3:6f:ab:07:
d2:c5:6a:8c:04:67:cd:70:e8:3a:59:c4:1e:90:36:
8c:80:88:a7:44:6f:51:aa:d8:35:bd:a8:36:62:82:
00:d3:7b:93:80:de:72:65:0f:0e:20:04:bd:c9:03:
94:23:2f:4c:c9:01:8d:07:03:51:20:e9:9f:72:20:
51:9c:40:51:36:1c:b6:37:bd:63:a9:b9:87:4a:6f:
24:71:be:c9:b6:3f:09:a9:da:1f:bc:9c:d2:3c:74:
d2:46:d2:85:e4:0d:56:48:63:1a:26:aa:81:68:26:
08:34:db:12:7a:16:e8:e0:3a:47:33:94:3e:38:a0:
11:c4:f8:b2:1d:c7:54:3a:0f:99:be:39:8d:eb:4d:
ac:a1:07:9d:51:e6:c9:61:c0:bd:0a:d6:53:07:5d:
9b:bb:5c:37:38:a7:31:1f:96:ae:53:41:77:95:05:
19:8a:6a:25:74:40:9e:ef:cc:1e:ce:68:6e:01:71:
9a:7c:f6:4f:00:72:ff:e1:59:13:d4:40:25:f7:dd:
4e:73:85:64:dc:92:9b:b3:c0:25:92:ea:d1:b1:11:
35:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CD:D8:7E:93:1D:20:17:DA:C1:5A:9B:56:16:EF:17:80:A6:8A:70
X509v3 Authority Key Identifier:
keyid:A8:70:76:79:22:3C:88:3F:ED:7F:7C:79:FF:2F:29:3B:FF:87:30:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHB2eSI8iD_tf3x5_y8pO_-HMLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:fb:64:f7:9a:2d:69:e6:8a:84:d5:50:61:b7:56:ae:a1:1e:
9f:9e:1b:ce:ac:b3:45:18:6c:5d:db:ba:a9:52:08:7f:fc:f6:
b6:b3:84:b9:14:3e:dc:d4:68:8e:0a:40:66:08:75:dc:76:bd:
ea:77:c9:30:d3:d5:ac:02:38:91:94:eb:5d:b1:28:b4:4b:4f:
8e:c9:c8:98:9f:21:c4:e6:da:3d:21:3c:9e:0b:f5:d3:9c:13:
77:00:dd:e5:db:94:a1:d7:69:ca:0f:4a:28:b8:52:15:9d:41:
a7:39:68:61:e7:c5:5f:81:03:93:6a:21:45:cc:70:ba:8c:e7:
14:00:7e:74:65:c6:e0:c0:f0:84:a2:f2:30:42:7e:b2:08:1b:
e3:46:92:64:54:8b:28:f5:f9:be:0e:9e:15:0f:d7:22:fd:46:
bc:d7:26:f2:29:54:a7:94:d1:61:9b:48:dc:b0:dd:b7:71:7f:
9d:9e:c6:27:18:95:05:a1:d9:db:1b:4f:25:86:f2:39:b5:e5:
9b:d6:f1:6c:8f:12:5a:cd:af:42:dd:ed:74:88:59:09:4d:63:
19:66:0a:7c:95:25:99:2b:49:de:59:2b:cd:51:80:cd:28:89:
36:7d:de:38:1b:5e:92:64:43:20:07:a2:02:37:71:84:19:bc:
12:99:fc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:20:01 2025 by rpki-client