Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
File: QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft (raw, json)
Hash identifier: p2BzLhCwwpx9bQHlHJGbhjRpsS6U8kMGfct0c9Z5YLo=
Subject key identifier: 89:60:07:17:F8:8A:FC:B0:FD:77:E6:3F:B3:1D:03:DD:8E:19:55:C9
Authority key identifier: 41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8
Certificate issuer: /CN=411952046770f54e8be1fd7d673132265ad70fa8
Certificate serial: 0196556EB257B5BCCF45322D3022CCFA0A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
Manifest number: 0BBD
Signing time: Sun 20 Apr 2025 23:00:39 +0000
Manifest this update: Sun 20 Apr 2025 23:00:39 +0000
Manifest next update: Mon 21 Apr 2025 23:00:39 +0000
Files and hashes: 1: QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl (hash: fZQmykV3SOO0654NdG7GG/nt6MVwlBQ4i/pVGQOlhME=)
2: Xpf8O2DfxtSRMYLfH4Jhe7jGcr4.roa (hash: mr8J89/SuXN+JPAXQsryCuEFWqmHZudkRiHUpBMVGnw=)
3: qliDDfSLIfyZKuJ9vwyYrHItz_k.roa (hash: D8mFTN20TsuGjGw8I0yHs9/gZXV7jBDiD7YQatfWrpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:b2:57:b5:bc:cf:45:32:2d:30:22:cc:fa:0a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411952046770f54e8be1fd7d673132265ad70fa8
Validity
Not Before: Apr 20 23:00:39 2025 GMT
Not After : Apr 21 23:00:39 2025 GMT
Subject: CN=89600717f88afcb0fd77e63fb31d03dd8e1955c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:b2:ca:1b:cf:1f:41:04:6c:0f:a2:94:e4:
c4:ac:e4:b7:57:3a:b8:bb:d0:cc:3d:b9:7e:5b:55:
99:b4:f4:3d:b6:8c:aa:6f:df:f0:b8:96:3b:dd:0e:
9d:c6:e7:16:7d:7c:2a:3b:a9:2e:2f:53:7e:da:68:
09:b7:1d:81:01:54:ce:1e:11:bd:4c:13:a7:09:79:
f6:08:45:82:10:63:54:1c:ac:1e:c9:18:41:d3:2f:
79:c9:8c:43:3d:5d:86:60:7c:b7:64:15:94:a9:de:
a4:76:ea:1f:8b:97:1a:7e:c9:e3:50:86:2d:46:42:
91:73:00:a9:5f:a4:21:1e:0a:36:8b:23:58:94:37:
44:ac:fb:db:1d:72:8c:47:45:f0:e9:ec:42:4c:94:
c6:12:d7:fd:bf:c9:76:91:80:45:ca:13:ec:c3:c9:
79:2f:14:77:9b:18:b8:25:4b:42:ad:8b:e5:24:2a:
fc:d7:cc:4d:55:7e:2c:27:02:9d:75:40:aa:b0:50:
66:47:d6:d1:a6:f6:d7:f5:5d:1a:98:c3:1f:46:a4:
7a:b7:bb:91:d9:69:38:bf:47:7c:2c:0e:28:b4:cd:
3d:2f:d2:9f:b6:a7:77:c6:ee:86:40:0c:e7:15:83:
f2:01:c6:73:1e:29:b9:ff:3f:d9:dc:08:82:fb:4f:
ed:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:60:07:17:F8:8A:FC:B0:FD:77:E6:3F:B3:1D:03:DD:8E:19:55:C9
X509v3 Authority Key Identifier:
keyid:41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a1:0a:fb:48:fb:53:2f:a1:99:a2:05:89:21:09:4a:8b:0c:
e1:da:e1:44:4c:36:3b:bf:2a:f2:88:61:86:86:7c:ad:ca:23:
34:18:ee:9b:1b:41:e7:1b:76:d8:fd:d1:24:4f:18:bb:4b:09:
0d:92:4c:89:2b:09:70:4b:28:e9:55:3b:db:c8:5a:a0:fe:94:
2a:88:c8:2f:f1:84:84:2c:06:cd:23:01:b4:b1:1a:67:94:bd:
39:d4:33:bb:e5:00:ed:94:a0:60:c7:7a:bb:4b:10:04:2b:f1:
9c:ed:f7:d5:13:84:f1:99:30:df:9e:9c:9c:da:cb:b1:8d:84:
60:9c:b0:44:e2:2a:d4:f0:6d:76:d3:1f:58:f7:30:1b:7d:77:
84:8f:df:10:0b:9d:e5:d6:fc:49:32:3d:af:a5:3c:c1:8d:7d:
3b:ea:f7:7a:65:86:8d:93:aa:86:e1:16:e4:b2:f1:b6:34:29:
08:6d:ab:5b:0a:2a:ea:9a:44:1e:90:76:d3:7e:98:b0:a7:a4:
ae:22:7c:0d:05:b7:50:74:74:9b:98:76:3a:01:a9:f4:7a:54:
b9:d8:90:8c:1b:0d:fc:eb:40:5a:01:27:eb:8b:ff:0c:3b:3b:
4b:2e:cd:d7:d3:29:6a:e6:62:58:5c:bf:60:7d:8b:77:2d:33:
70:dd:90:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:08:11 2025 by rpki-client