Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
File: qQYfL0mm16-epna60D3xzi9QJg0.mft (raw, json)
Hash identifier: y96TRNGrewbMn7AJc3HiPiOXomv75hBQIqVxKTUQvpw=
Subject key identifier: 68:D9:5D:78:4C:DE:95:83:14:20:7D:81:58:06:C6:31:DE:A6:AB:AE
Authority key identifier: A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
Certificate issuer: /CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Certificate serial: 01962C05E4C2D5308461E65FFAD98CE626D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
Manifest number: 08D9
Signing time: Sat 12 Apr 2025 22:01:45 +0000
Manifest this update: Sat 12 Apr 2025 22:01:45 +0000
Manifest next update: Sun 13 Apr 2025 22:01:45 +0000
Files and hashes: 1: hILMU0qMjMm6bmWNobLKh35z6fg.roa (hash: tRLWcg9XAdmGTHy58HB7PkQi1r29x3Hn5q5I5oWT1hs=)
2: qQYfL0mm16-epna60D3xzi9QJg0.crl (hash: bJW1ErOQJy8wsTMB63rOUhiaYEzvM6bH/RHJSeI2ag8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:05:e4:c2:d5:30:84:61:e6:5f:fa:d9:8c:e6:26:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Validity
Not Before: Apr 12 22:01:45 2025 GMT
Not After : Apr 13 22:01:45 2025 GMT
Subject: CN=68d95d784cde958314207d815806c631dea6abae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:33:e4:7b:64:63:e8:ea:f8:3e:5b:3f:ed:59:
ce:41:ed:52:d6:4a:97:7b:76:15:1e:cb:f5:74:16:
42:66:78:71:16:77:3f:bd:31:df:f5:53:3c:2c:a0:
b2:e0:28:d3:30:ea:0f:6d:27:19:90:5a:38:a2:b7:
ee:27:6d:35:4e:82:41:fd:96:74:3e:ff:40:17:5e:
bc:a4:98:88:e4:a2:b8:03:8e:03:92:8b:30:00:8e:
a5:44:8d:63:8e:a3:1e:b9:98:c6:c5:4d:2a:6b:81:
89:0d:8c:bd:66:ff:ac:f9:8c:d6:fd:7c:c1:5f:4e:
09:4f:41:62:9c:58:ea:e1:87:4e:dc:61:20:dc:47:
9e:6d:0e:45:f2:5e:49:31:87:48:11:a7:d6:2b:3e:
4f:4a:6e:0d:61:c2:7d:c5:75:e2:b4:dc:84:4c:9c:
93:ed:20:0c:34:df:a0:68:8d:fc:c6:f8:b6:49:4d:
c0:5a:a7:ac:63:0a:52:36:c5:18:86:12:ec:5a:66:
8b:e1:3e:9f:fb:f8:b5:ba:ee:2f:db:ea:dc:97:ac:
a6:c5:52:22:c5:7f:40:15:32:18:91:bb:50:6d:e6:
77:35:c9:af:03:85:05:ba:95:58:20:39:8e:34:ef:
9c:b1:54:1d:b8:cc:19:0a:50:f6:db:13:24:51:dd:
b3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D9:5D:78:4C:DE:95:83:14:20:7D:81:58:06:C6:31:DE:A6:AB:AE
X509v3 Authority Key Identifier:
keyid:A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:04:4a:26:28:cb:7c:2e:7d:33:a4:76:ff:97:cc:cb:ae:7d:
0f:99:bd:ca:e0:b8:43:53:f8:aa:31:cb:b3:93:16:3d:03:3e:
99:8a:ee:99:b8:4c:8a:c7:fc:0a:7d:29:81:61:42:bb:70:89:
9b:f8:ac:e6:6d:d3:3d:56:36:ac:10:97:33:f7:d3:27:38:5d:
04:59:91:f9:69:9b:2e:b5:ac:1a:cd:20:10:a9:16:fa:12:03:
a8:74:81:57:5d:59:cb:9e:ac:49:7f:72:e0:f4:0f:e5:a8:c7:
99:44:2b:9d:7a:22:fd:c4:b7:ef:ed:82:b7:d1:51:c0:e2:8b:
6d:9a:6c:ab:6f:4e:20:05:37:60:8e:8c:4d:4e:67:4f:50:50:
60:c6:b4:da:ca:74:ec:5c:5e:06:84:bd:b9:b8:fe:37:91:f6:
39:10:c3:a8:7f:0b:c0:a5:31:17:aa:6e:4e:e9:29:da:19:bb:
89:a8:0a:01:7d:1c:b4:f0:a6:af:b2:f9:d8:f1:12:91:66:d3:
be:0d:3b:c5:95:82:cd:d9:c6:3a:96:b2:76:be:ca:0b:bf:80:
34:b7:78:38:c2:9f:38:3e:3d:d5:fd:6b:9f:33:d4:e1:fe:91:
c0:b8:c3:0a:a9:39:b3:85:c3:06:d2:a6:a8:f4:69:42:fd:22:
22:61:24:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:02:37 2025 by rpki-client