Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
File: qERxpm95BxB-RTRxa_pCCNQGlp8.mft (raw, json)
Hash identifier: 53D0K6a+xy2MFNsnKHR5IfyIgoTyG82WwELNR5EyMt8=
Subject key identifier: 47:2F:95:31:34:31:0F:31:86:48:4F:02:98:15:2D:6B:34:76:BD:04
Authority key identifier: A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F
Certificate issuer: /CN=a84471a66f7907107e4534716bfa4208d406969f
Certificate serial: 01964D7DF2D860E9B182FC0817CE7D31EE4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 10:00:21 +0000
Manifest this update: Sat 19 Apr 2025 10:00:21 +0000
Manifest next update: Sun 20 Apr 2025 10:00:21 +0000
Files and hashes: 1: qERxpm95BxB-RTRxa_pCCNQGlp8.crl (hash: ksNIA6+EFBFC8PY2TAdwuNBLyg9urOTSXQHpXVunjYY=)
2: tcbbFJDqhBbRkJh6NDYN55iLfDE.roa (hash: vKEQ9e0Db9WBNbap5GYKx4PxGXK/ovDmh/isyYRiZ1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7d:f2:d8:60:e9:b1:82:fc:08:17:ce:7d:31:ee:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84471a66f7907107e4534716bfa4208d406969f
Validity
Not Before: Apr 19 10:00:21 2025 GMT
Not After : Apr 20 10:00:21 2025 GMT
Subject: CN=472f953134310f3186484f0298152d6b3476bd04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f6:37:36:13:a6:d8:4c:74:e0:21:87:3b:d3:
f2:10:0a:25:6e:19:18:65:2f:a9:bc:09:ff:be:4f:
83:14:4d:9d:9a:2a:1f:1b:06:d4:76:70:11:99:09:
57:36:54:02:45:5a:11:d6:35:3e:84:68:2f:76:2c:
cc:c9:9e:2e:a5:ae:ee:8c:17:be:2d:f8:03:36:88:
20:66:cd:bd:a9:43:5a:a3:d5:19:20:0e:d4:5f:55:
cc:86:78:45:83:d0:d4:f9:68:50:41:44:27:be:ed:
ba:a5:8c:da:45:2c:e3:f7:83:45:bb:e5:0a:75:95:
0a:fc:6e:30:8d:70:fa:fd:ae:6f:34:0d:17:38:f8:
83:70:6a:53:b6:04:27:73:bf:0c:50:b3:43:6a:96:
36:aa:2e:fb:fb:28:97:51:b3:80:d4:ad:46:43:05:
84:18:00:08:01:a1:5a:d9:f6:da:44:19:9f:32:f9:
4a:a3:aa:09:c3:17:ee:b0:00:7e:28:27:b5:db:57:
4b:44:36:c6:1a:10:4a:63:6f:e7:fa:5a:c2:b5:73:
cb:18:eb:82:5f:f3:62:df:77:19:9a:82:ff:0d:d6:
4a:8f:c7:b1:fa:f9:1f:ac:4f:d6:0e:a8:8b:3b:b7:
6f:b3:85:d2:da:8a:a5:6f:cc:97:a3:1e:a7:ad:25:
94:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2F:95:31:34:31:0F:31:86:48:4F:02:98:15:2D:6B:34:76:BD:04
X509v3 Authority Key Identifier:
keyid:A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:bb:7f:97:d9:37:25:98:c1:3d:d4:f8:eb:ec:7e:81:1c:df:
0c:f4:53:d3:63:1f:17:73:24:62:23:8f:e5:71:97:71:46:99:
28:27:f3:2a:02:d1:51:74:ea:83:3e:ed:d2:f5:00:ba:24:d4:
00:bc:74:ca:34:ab:b8:40:82:8a:b0:46:5f:17:2c:06:8f:5d:
9f:56:af:df:8e:87:ec:aa:1e:bb:6c:59:f3:09:29:ca:0c:48:
38:72:b2:4d:a5:45:7c:90:14:70:3e:98:50:61:49:77:3b:a4:
a0:3c:15:de:e9:a9:a6:c0:f9:18:f5:7f:59:5a:51:af:e1:bd:
00:ca:93:06:ad:25:66:cb:26:fa:59:59:1b:63:b2:30:c1:8d:
c2:91:e0:50:e4:8b:ce:a6:5d:16:ee:92:d2:96:e9:86:ea:00:
45:65:39:98:26:8c:10:99:64:50:fb:fe:c0:f3:d4:28:94:d5:
a4:9e:db:08:68:83:43:0e:d1:e8:0a:c3:25:dd:09:d1:d2:18:
57:d6:9a:4f:9c:92:83:59:0c:23:fb:33:0a:71:eb:d1:74:36:
7b:cd:fd:ec:85:0a:74:fb:20:f5:ac:a5:94:e7:9a:20:03:0a:
ca:9d:44:b5:cb:69:13:23:3a:7b:b3:a7:29:9d:3e:d5:cc:14:
96:98:f5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:22:56 2025 by rpki-client