Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
File: qmffuIKufY5V0lhlF0L05s5DcBk.mft (raw, json)
Hash identifier: 3fLEKc+3S4Qwd9yybZYL+bDrjkDQEz++Yv+NPvkDQCw=
Subject key identifier: F9:BF:D9:2A:10:33:52:9D:34:43:2A:1C:FA:00:BC:5F:FD:0D:F2:60
Authority key identifier: AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
Certificate issuer: /CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Certificate serial: 0196391B7F94841279349F60BF307D98AFF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
Manifest number: 14EE
Signing time: Tue 15 Apr 2025 11:00:25 +0000
Manifest this update: Tue 15 Apr 2025 11:00:25 +0000
Manifest next update: Wed 16 Apr 2025 11:00:25 +0000
Files and hashes: 1: qmffuIKufY5V0lhlF0L05s5DcBk.crl (hash: M3KZVEIK4AXQyfLhilagcOFpfLI8KW1pakc6J6QBhEw=)
2: sEET-ptT1wSBoWPjjCsZ2dSnAsI.roa (hash: f9CQV7WSxI4NmikFhldnkXK2NLP+yhZAq8+zP2dx5cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:39:1b:7f:94:84:12:79:34:9f:60:bf:30:7d:98:af:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Validity
Not Before: Apr 15 11:00:25 2025 GMT
Not After : Apr 16 11:00:25 2025 GMT
Subject: CN=f9bfd92a1033529d34432a1cfa00bc5ffd0df260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:61:bb:90:4d:67:54:6a:e4:08:ed:5f:89:d4:
54:09:35:d6:34:3a:b1:bd:59:05:79:bd:3a:82:28:
e8:df:a7:3f:60:c1:9d:95:55:25:d0:34:16:79:86:
c9:51:6b:77:d3:36:99:d9:dc:4e:36:d6:d0:18:7d:
54:30:88:19:1c:74:87:ec:5e:f5:0f:ca:62:25:c9:
35:f7:2a:20:5a:b2:cf:ac:3b:ce:90:3d:c5:c3:5e:
bd:0c:08:14:31:d1:7a:99:76:25:e0:da:e1:3c:45:
92:0a:2c:42:e0:d9:fd:48:d6:84:23:36:c5:02:3c:
ad:47:27:a3:cb:9e:f7:26:05:2d:cb:d5:9d:3b:e6:
b2:b7:1a:bd:bf:e8:dc:19:93:c0:03:4d:ff:f8:cb:
ba:5f:6f:1d:77:d8:c4:03:cc:83:70:e9:e5:b0:f8:
a1:ee:92:33:87:83:8a:06:ec:52:aa:4b:ba:04:7f:
bc:8e:30:60:78:25:6d:dd:a5:50:0b:fe:54:cb:9f:
92:14:53:5c:d0:20:de:f8:e0:98:f7:ee:07:43:a2:
b8:17:6c:d1:e2:06:53:9d:2d:ba:e8:0d:9b:80:59:
cb:64:3f:0b:95:25:d7:c9:e1:c8:dc:15:7a:11:5d:
26:85:6d:59:58:7f:eb:5e:52:dd:1f:91:12:06:88:
b5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BF:D9:2A:10:33:52:9D:34:43:2A:1C:FA:00:BC:5F:FD:0D:F2:60
X509v3 Authority Key Identifier:
keyid:AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f4:eb:98:ed:fe:ae:c2:6a:9a:b0:fe:84:e8:6f:7d:22:a4:
a3:10:dd:ea:be:5c:9e:1e:08:71:66:a6:eb:e0:93:19:d7:bb:
8b:fd:a4:b1:3c:26:3d:eb:5d:87:7b:06:da:75:42:45:74:66:
6d:b7:5c:8c:e5:51:b8:ac:51:4a:44:8b:be:62:11:cf:23:ac:
dd:f1:d1:4b:f5:7c:a2:95:24:73:15:33:c1:ac:be:08:07:cb:
6c:6a:28:65:28:59:0e:f3:6d:d6:df:ca:b3:c9:66:78:b0:9e:
8c:e1:38:ae:1a:ac:57:d8:11:0a:43:72:34:28:06:46:90:91:
b8:e6:b7:bf:3e:a0:f2:96:3c:81:86:52:43:b0:a4:66:af:2b:
3c:56:06:32:5c:69:41:8c:48:3f:4f:8b:85:50:77:8d:92:ba:
10:2c:d1:8d:1a:77:bc:4b:82:6e:d9:d1:ed:88:93:b9:d7:eb:
ed:60:02:88:f2:fc:35:2e:55:ae:c2:01:b7:e3:39:e9:78:dd:
09:5d:e9:ab:34:15:00:a8:99:4f:90:5a:68:36:1a:40:95:80:
50:15:56:d7:85:7a:c0:e4:4d:56:5c:38:84:9f:30:79:13:c7:
18:54:cf:2d:63:1c:e8:f8:02:55:eb:ee:11:52:27:b1:cb:6d:
7b:91:af:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 17:18:12 2025 by rpki-client