Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
File: QEPj9wJFibliregc9EVjBvTTXmg.mft (raw, json)
Hash identifier: u8uLu0tKeq3Cl3EucZSFdf4lNr78lcOgyIh4CC+y4IE=
Subject key identifier: 0E:30:14:64:48:51:62:62:8E:11:07:89:7E:C1:85:16:75:C3:BE:00
Authority key identifier: 40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
Certificate issuer: /CN=4043e3f7024589b962ade81cf4456306f4d35e68
Certificate serial: 01965F4D81F07371477071B0CD34822F3F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
Manifest number: 11EA
Signing time: Tue 22 Apr 2025 21:00:37 +0000
Manifest this update: Tue 22 Apr 2025 21:00:37 +0000
Manifest next update: Wed 23 Apr 2025 21:00:37 +0000
Files and hashes: 1: 7347cFurkIFVNRTShqXtdTwOLOA.roa (hash: 81GL5pa945jQA5j8/X64fsQyRv+u1Eyr3yERMPF2bKE=)
2: QEPj9wJFibliregc9EVjBvTTXmg.crl (hash: kJ/FbNDcKQwvjLfHgQx+ECwOBtDDav6AX3fcg4MHVJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:4d:81:f0:73:71:47:70:71:b0:cd:34:82:2f:3f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4043e3f7024589b962ade81cf4456306f4d35e68
Validity
Not Before: Apr 22 21:00:37 2025 GMT
Not After : Apr 23 21:00:37 2025 GMT
Subject: CN=0e301464485162628e1107897ec1851675c3be00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:96:a8:9d:ba:e2:9f:bb:dc:79:c8:6e:f0:09:
54:a1:b9:90:64:f3:d4:9c:db:2c:a7:0e:c8:3e:0a:
c2:16:e8:dd:62:aa:c2:92:43:2a:d4:39:ac:f8:8d:
cd:7c:73:8b:31:03:c2:94:df:cc:87:60:d3:81:e6:
ad:07:37:70:57:b3:d8:ed:d5:f1:8c:40:3e:3e:c5:
b9:b2:7f:60:09:15:ee:42:5b:b8:88:5a:ae:5a:a6:
27:a5:cb:a6:bc:82:9e:e8:f7:ec:c1:20:b0:b5:f7:
18:52:36:46:ba:5d:5c:92:4a:99:26:f4:ca:4c:91:
6c:58:1d:8b:51:60:d8:c9:1f:6e:57:8a:13:83:52:
57:a6:a5:7e:70:9e:f2:c3:0d:10:f8:63:a5:3e:a0:
d7:1f:3e:de:9a:bf:20:0f:6d:10:c3:df:67:0d:61:
f6:db:01:a4:5b:38:48:f5:3b:30:21:79:8d:22:52:
7d:99:14:ec:c6:f7:b1:ab:b1:ba:a7:39:4b:80:d0:
a3:ed:f9:85:b4:e1:1a:8e:1b:6f:c4:15:23:43:35:
a7:15:c5:08:63:13:23:11:3f:c8:e3:fb:ad:f5:c1:
cf:65:4f:42:d2:a4:b0:10:ba:9f:1b:8c:10:bf:8a:
07:f3:c8:f1:0c:bb:48:cf:03:c7:45:c9:d0:21:a9:
a7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:30:14:64:48:51:62:62:8E:11:07:89:7E:C1:85:16:75:C3:BE:00
X509v3 Authority Key Identifier:
keyid:40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d4:22:a7:e0:00:e5:72:a4:c8:12:3a:ec:5f:f0:c3:dc:81:
e0:ed:d1:fb:45:b8:ea:a4:4a:b3:73:58:cd:fe:46:f6:d1:5f:
0e:3e:22:dd:2d:4c:85:79:bd:01:83:06:a3:38:33:97:e4:a1:
39:02:dc:48:1f:8a:59:e1:b8:34:93:7d:9b:26:74:a2:70:ed:
8e:ae:f5:ea:be:5b:07:59:97:a3:2a:0a:3c:32:a8:f2:98:00:
0f:86:f1:a8:e6:1e:17:73:c5:1f:c7:e3:62:aa:5e:a8:c0:15:
d7:8e:17:00:58:ee:3d:2e:39:e2:b2:b2:96:f8:0d:13:00:23:
f6:58:59:36:1c:f7:a8:b4:90:3e:13:58:1a:cf:5f:24:c3:33:
86:1e:fc:04:c2:a3:9e:19:e7:d7:e6:50:1d:19:bc:c7:90:94:
a4:44:98:5c:ab:53:d2:d6:ff:e9:e2:ef:14:b5:ac:e8:69:ff:
97:46:0c:06:86:2e:28:e5:a3:65:82:ca:3e:d4:57:77:13:0d:
75:74:6c:6a:75:ef:9b:63:78:d8:d9:50:92:cf:af:5c:19:f4:
3c:46:5f:a7:c8:f9:ce:f3:9b:ce:90:f7:84:b1:15:e6:b8:b7:
25:8f:ee:9c:bc:eb:2a:31:26:ad:87:66:fb:b6:41:93:d1:ad:
f4:14:54:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:20:39 2025 by rpki-client