Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
File: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft (raw, json)
Hash identifier: t051EXUAKge0T2x80a453ogyNLAtRLP9m5E2zqSB6IY=
Subject key identifier: F6:5A:11:79:24:E8:CB:0B:E7:28:63:30:99:D0:88:E2:13:9D:26:E2
Authority key identifier: 43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
Certificate issuer: /CN=43a8e2899693fca00bd8041ba8801f2d88869108
Certificate serial: 01965FF20DEB9CE41B45560F20DE7A9679AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
Manifest number: 1352
Signing time: Wed 23 Apr 2025 00:00:20 +0000
Manifest this update: Wed 23 Apr 2025 00:00:20 +0000
Manifest next update: Thu 24 Apr 2025 00:00:20 +0000
Files and hashes: 1: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl (hash: O4QDI5tCd31qp6rEeaGKHPRVo+4q1Ze8CAIFsOayYko=)
2: cIo_z6M4iUgSv6Rq-GH3zvKNA-E.roa (hash: uuzfvafFMiGynhqFG/8GblYil9CuUOOslH5kMNYMbzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:f2:0d:eb:9c:e4:1b:45:56:0f:20:de:7a:96:79:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a8e2899693fca00bd8041ba8801f2d88869108
Validity
Not Before: Apr 23 00:00:20 2025 GMT
Not After : Apr 24 00:00:20 2025 GMT
Subject: CN=f65a117924e8cb0be728633099d088e2139d26e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:35:0d:6a:23:ca:80:9f:01:a9:f2:38:be:be:
23:fc:df:d1:70:7a:18:dc:0a:a7:54:6f:97:53:9f:
0d:73:92:60:df:95:99:88:36:59:75:91:3a:a0:ff:
b1:34:df:78:ec:5f:4f:3a:8d:0c:59:72:cd:f3:d1:
12:22:87:a4:ac:aa:76:13:49:ac:f0:e0:7a:e0:07:
18:c3:4c:dd:b7:77:11:6c:42:3f:c8:89:bb:15:dc:
d5:b6:28:1f:df:11:85:b6:3f:91:19:e9:5a:cc:16:
57:df:4f:3b:a1:5a:42:e8:1e:5e:7a:26:e1:fc:7d:
69:48:6a:9f:19:88:2b:c1:de:14:e1:79:f1:39:77:
48:3c:59:52:c6:e3:39:7c:ec:79:cb:df:7e:cf:ce:
7e:b0:07:87:8f:b5:d5:65:18:e7:18:e3:47:38:53:
c3:c7:36:d3:62:90:05:ed:ef:30:14:b2:9a:6c:97:
3d:cc:68:b3:67:ab:55:39:68:5a:e3:a3:f6:bd:1e:
85:5d:54:9c:c3:84:89:ef:93:02:a9:b0:19:00:e3:
32:0e:26:77:34:60:bf:0c:3e:77:a3:17:e4:6b:6e:
d4:33:c4:3f:e9:2d:56:e4:43:04:1d:79:a0:10:05:
35:00:71:14:5a:4c:31:8d:db:ff:6a:0d:41:80:c0:
82:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5A:11:79:24:E8:CB:0B:E7:28:63:30:99:D0:88:E2:13:9D:26:E2
X509v3 Authority Key Identifier:
keyid:43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3f:5c:53:6f:a1:0d:50:bb:ab:f4:ad:9d:03:16:70:76:d8:
f6:bb:ec:fd:8b:40:83:47:45:9c:4d:06:1a:b0:a5:ac:55:ce:
20:1c:d7:a0:11:5d:ca:cc:ac:6a:df:e9:4f:93:87:1d:23:a2:
65:25:9b:4f:e1:e7:c7:88:36:26:0d:29:e8:2f:24:6d:46:41:
1a:2e:fb:3b:c9:eb:3a:3e:16:64:aa:7b:9c:b2:11:b7:90:5f:
e7:a9:4e:31:c9:55:d5:92:74:e6:a5:52:66:05:b1:3a:69:95:
9d:52:97:b7:a9:f1:71:0d:95:9d:24:3a:37:c5:4b:89:21:31:
75:99:d5:fd:a0:5d:5e:0b:13:45:af:44:a6:92:88:54:8a:4d:
80:1b:31:cb:f7:38:3e:37:db:6f:44:1a:7c:94:bf:70:52:3c:
0f:81:10:9b:43:8a:cf:77:7b:29:b7:ef:44:aa:37:34:90:42:
7c:8b:ef:a3:ba:db:0d:d1:b1:2f:15:60:57:b5:94:0f:b2:62:
b5:6a:34:02:42:c5:00:cf:fa:45:2e:64:e0:69:ba:56:fd:22:
be:9b:cd:e6:36:85:57:c6:70:54:17:45:40:fc:cd:4e:37:8f:
57:0e:c0:f0:f4:d2:93:f4:c6:39:e3:60:4b:9a:e9:60:e1:17:
2a:dc:f2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:17:41 2025 by rpki-client