Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
File: qgYKY9op1_lWF6b_u09RzMvHhlE.mft (raw, json)
Hash identifier: yEP9a2yw5H7Kz3POZLW6dqo+Ao1UcSxPyWuqKN1wfzQ=
Subject key identifier: CC:B8:3A:1B:B8:EA:01:AA:B9:DF:25:E2:EC:18:68:7A:FA:5D:82:38
Authority key identifier: AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
Certificate issuer: /CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Certificate serial: 0195903D333C13851397EBC7D7F83F1397CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
Manifest number: 1109
Signing time: Thu 13 Mar 2025 16:01:24 +0000
Manifest this update: Thu 13 Mar 2025 16:01:24 +0000
Manifest next update: Fri 14 Mar 2025 16:01:24 +0000
Files and hashes: 1: 6vC7E9fCr2S2YLpYl9NYikdwrIo.roa (hash: 0lbRVN/oMU6y83Ly4EI44/lCqnm0TAJ8jhFyCAz5oJM=)
2: VFWfa5gKi_WVASZxLKD5EBmR-Vk.roa (hash: uLbbbwsMWu+2oa981JmoBqRGb6E5FUC1zqcIAUYzCRg=)
3: qgYKY9op1_lWF6b_u09RzMvHhlE.crl (hash: vHNDUh1Wh2fFAfjmO8O5eHQAw/94AQMCRfxXIM7nR/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3d:33:3c:13:85:13:97:eb:c7:d7:f8:3f:13:97:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Validity
Not Before: Mar 13 16:01:24 2025 GMT
Not After : Mar 14 16:01:24 2025 GMT
Subject: CN=ccb83a1bb8ea01aab9df25e2ec18687afa5d8238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:81:15:14:5f:55:a4:d1:43:45:8a:f9:74:48:
8d:a5:46:17:ad:02:40:80:69:bd:fa:89:d3:78:1b:
76:1a:a1:28:55:2f:9c:b6:67:57:ff:22:c9:c5:fd:
10:1a:4f:72:ae:9d:15:76:42:30:f3:47:8f:fe:4b:
ef:a8:37:f0:e1:35:4d:28:64:c5:d3:d1:75:0d:ee:
44:d9:c1:e6:24:c3:7a:49:bc:88:a7:8c:8f:0b:38:
bb:90:b1:10:9a:d3:ad:38:70:04:89:06:f6:ff:9a:
3a:f0:94:39:e4:1e:18:97:52:f3:77:7c:f5:02:8b:
f1:82:9f:ad:97:5a:d1:ea:df:66:01:e9:b7:51:54:
56:4a:5e:19:94:58:34:be:51:fd:a0:ff:3f:22:f9:
d1:06:76:e5:c2:49:b7:1e:84:ab:9b:89:fe:46:90:
c3:ae:0a:10:77:ba:9d:1e:b8:e7:8d:ea:81:ac:62:
73:36:db:15:a5:bf:bf:53:0e:8b:4f:e7:f1:5d:cc:
85:40:e5:34:2d:31:2f:86:de:dc:74:a4:fa:91:48:
f1:70:50:9a:b3:1c:f1:52:f1:b2:0e:72:05:1c:06:
21:8a:ff:78:40:21:ee:1c:f7:02:79:3f:18:72:bb:
2e:7f:73:a4:62:c0:8a:64:d4:a8:ca:01:5e:17:4a:
12:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B8:3A:1B:B8:EA:01:AA:B9:DF:25:E2:EC:18:68:7A:FA:5D:82:38
X509v3 Authority Key Identifier:
keyid:AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:01:fe:1a:a8:36:e9:3f:46:4a:65:69:1d:ea:5d:a6:c1:01:
aa:c6:5c:87:78:eb:2e:26:ef:98:83:ff:f5:a2:42:c7:c4:12:
73:b7:0a:8c:c7:24:ec:6f:f6:c8:a9:f7:63:b7:30:7c:dd:7b:
81:d1:50:ba:68:8e:68:2d:f1:a8:18:a8:bf:67:81:36:9b:e9:
3b:7e:a7:76:c1:3f:50:6c:82:40:0d:fd:91:39:2a:12:da:7a:
bc:0b:2f:9b:ca:69:24:74:9f:f3:98:e8:d9:c6:5e:6e:95:74:
e7:7e:c3:14:24:dd:e8:83:ab:88:7a:8b:94:44:0f:da:e8:c2:
81:ce:64:79:34:f9:37:e8:52:96:db:f0:c5:39:1f:42:48:4e:
04:b0:3b:89:af:38:a0:02:70:b3:3a:46:38:f5:2f:2f:32:09:
5f:af:38:93:2e:87:2f:c5:2b:3e:1b:0a:bd:32:c4:eb:12:dc:
21:26:ee:1c:9a:8a:57:da:bf:af:d9:3e:60:12:86:cc:8e:b5:
51:d8:37:3f:4d:2c:51:3b:e7:df:e4:65:0f:fd:27:37:5e:25:
ee:31:58:b2:52:a5:ef:91:18:69:b3:db:42:e6:53:d4:03:9f:
b9:cf:84:ca:7c:e6:d6:4d:cd:54:8c:48:97:8a:85:95:16:fb:
9f:d1:df:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:02:53 2025 by rpki-client