Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
File: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft (raw, json)
Hash identifier: NdDPGhSb1lrhcuYrzjJrb8R1EymNhJG/lbANctg2hpg=
Subject key identifier: 9B:4D:14:EE:2B:11:66:6B:45:2A:4F:F6:EA:F6:61:87:36:7B:E6:A8
Authority key identifier: 42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
Certificate issuer: /CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Certificate serial: 0196056576ABCC3A8102B79AEF187BBC0DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
Manifest number: 14D5
Signing time: Sat 05 Apr 2025 10:00:57 +0000
Manifest this update: Sat 05 Apr 2025 10:00:57 +0000
Manifest next update: Sun 06 Apr 2025 10:00:57 +0000
Files and hashes: 1: QTfS1SFb7VGTiGiN2dDueV3na8U.roa (hash: PLx/8DSVxOYWpxQe9zNuM4NTWNV61RdgV2qLjo81Rz8=)
2: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl (hash: 5hrEhtYreVj/cclinIA9Y7hvPvD5MnZFDGG/UTeGkBE=)
3: TeM9OzX8sQpqWpDItBlSbfU5TWA.roa (hash: GQ0DaMaVE4ZcrNCViKsSogvmznrtITdeEy+eY3JUQMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:05:65:76:ab:cc:3a:81:02:b7:9a:ef:18:7b:bc:0d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Validity
Not Before: Apr 5 10:00:57 2025 GMT
Not After : Apr 6 10:00:57 2025 GMT
Subject: CN=9b4d14ee2b11666b452a4ff6eaf66187367be6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:47:8e:4c:40:21:6e:ff:61:96:82:25:38:8b:
34:89:43:50:a8:1b:a6:1d:28:34:29:20:74:5b:01:
4f:94:68:b3:ed:3a:14:c7:cc:ee:e5:1f:95:87:0c:
5d:95:d0:c2:f0:9c:43:ff:3f:c8:3b:03:c7:30:e9:
e8:08:56:cf:6b:c8:89:3a:4e:59:7b:c6:3e:8b:c4:
f6:9b:8d:03:3b:1c:e8:20:32:04:d0:3d:b2:63:31:
33:06:84:99:2c:00:c6:06:f7:2e:aa:b9:c5:95:4a:
bf:bc:eb:38:ff:5d:75:d0:da:f6:ee:56:62:a5:0d:
7e:8a:bc:75:17:b1:56:41:2d:27:ff:b5:9f:8b:cc:
d4:af:bc:d5:e1:cd:84:92:73:20:0b:68:39:b0:cd:
3e:31:8b:0e:fb:7a:96:2c:d3:04:0d:04:2c:06:e7:
68:29:23:26:16:a8:af:0b:3a:48:bc:79:66:e9:03:
da:0a:77:47:86:65:2f:c5:94:4a:6e:ce:75:8a:75:
3b:a7:86:5d:a3:42:28:e9:b4:68:7b:9a:7d:e3:fa:
15:92:24:fe:1b:d3:8e:ae:84:87:28:6b:12:1a:f5:
38:e9:54:c9:14:f9:0e:99:16:04:d2:f3:90:db:8b:
15:5b:8a:77:f2:24:4b:66:86:d8:2e:6f:22:1c:d1:
d9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4D:14:EE:2B:11:66:6B:45:2A:4F:F6:EA:F6:61:87:36:7B:E6:A8
X509v3 Authority Key Identifier:
keyid:42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e7:70:cd:79:34:0b:4b:49:11:50:82:91:e1:9e:e7:90:9f:
0d:b7:f3:d6:52:e1:13:1a:2b:85:70:4e:51:34:67:25:ef:a2:
dc:10:44:66:bf:20:0e:53:5e:25:ff:30:f4:f5:47:0f:5c:7d:
20:5c:36:16:64:69:98:47:31:37:c2:37:f6:3f:09:e4:1d:82:
3f:01:c5:5d:2f:65:fb:8b:8f:5e:87:74:0a:69:81:f5:4d:26:
99:a7:41:f5:d5:89:6d:10:67:76:53:f9:4c:3e:3f:13:12:17:
75:be:27:af:5f:56:6e:be:0b:fc:1c:b9:cb:52:1a:77:61:d4:
d2:5e:ac:7d:f3:8f:43:35:2e:85:48:c0:26:89:67:1d:62:58:
69:02:b8:4a:e5:27:2b:b7:1a:63:b8:5c:8e:58:9e:66:03:60:
5c:99:dc:f7:d5:4c:61:aa:c6:b4:c4:71:e6:2e:51:35:fb:93:
28:b7:4d:60:2b:8a:7d:be:8a:bf:bb:6f:bd:1d:69:65:5d:17:
14:b7:9b:c5:dd:55:5d:6c:88:f3:d7:25:15:42:a2:25:2d:f9:
86:75:3f:ae:0a:49:6c:e9:32:f9:11:ba:a9:62:40:91:60:c7:
b3:b6:be:1f:d6:c8:93:1c:cf:eb:ff:c3:fa:c3:98:47:81:cf:
a0:96:a5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:14:43 2025 by rpki-client