Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
File: qzCSHSjHjt6BhC9xLmz3K95aYIA.mft (raw, json)
Hash identifier: 5xvXybrz4YeNeHVNUzFBQnsQJa84t2FRRJbk4qzaffI=
Subject key identifier: 1F:9D:FB:13:97:C6:04:40:CF:B9:F9:89:DB:9F:D8:A7:3D:0A:92:37
Authority key identifier: AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
Certificate issuer: /CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Certificate serial: 01964AB4004709B6B2576126E57C0A54EFBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
Manifest number: 0FBE
Signing time: Fri 18 Apr 2025 21:00:32 +0000
Manifest this update: Fri 18 Apr 2025 21:00:32 +0000
Manifest next update: Sat 19 Apr 2025 21:00:32 +0000
Files and hashes: 1: WRJMUYeRixw27CAPxZImqPYkDlU.roa (hash: i28cVSRe5f6zxa7/1YaErFOEzE3A0YFcGcdJGku5uCs=)
2: jGJqFQVdzPNIuq__x_RJveRfPgI.roa (hash: l/kSncaCyGC+QqprUZGRI2OdInXO3OkPgy+W2EUBUIg=)
3: qzCSHSjHjt6BhC9xLmz3K95aYIA.crl (hash: 1TEA4QseyJqypONRPUzXdxdtFqFRm6ZECd8eptbrShQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:b4:00:47:09:b6:b2:57:61:26:e5:7c:0a:54:ef:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Validity
Not Before: Apr 18 21:00:32 2025 GMT
Not After : Apr 19 21:00:32 2025 GMT
Subject: CN=1f9dfb1397c60440cfb9f989db9fd8a73d0a9237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ff:54:6e:e4:79:02:0c:b9:81:23:90:dc:39:
f9:c4:73:e7:cd:23:76:fc:b5:94:0b:c3:f0:64:35:
60:74:9a:18:d3:e2:a0:58:9a:da:3b:6c:78:e4:64:
c4:4b:5b:02:9b:b6:5e:ae:ef:d4:a0:49:17:43:50:
da:f0:7c:48:17:ab:cb:30:5c:86:e9:6a:63:a5:f8:
97:e2:6d:36:03:74:dc:20:f3:08:91:f3:eb:cb:6c:
c9:c4:cd:75:b6:59:dc:97:3b:4b:de:36:de:4d:e5:
6c:78:de:1c:09:87:25:c8:1c:84:77:d2:08:96:87:
b7:c1:a2:06:6a:cf:20:6b:0f:8a:da:e7:fe:15:bf:
36:fe:09:4c:70:f6:92:91:e9:d8:87:a5:ae:0d:fd:
06:ff:7a:33:35:d7:8f:57:08:76:52:75:6f:4b:44:
8e:8c:ac:20:73:d0:bd:06:52:70:32:a4:b4:0f:be:
67:76:89:aa:62:76:90:31:6d:21:12:cc:02:48:d4:
ee:b5:33:a1:d1:a5:57:cb:c4:e6:60:b4:19:fc:15:
c2:63:b3:25:14:65:a1:f1:a1:76:ed:db:47:82:ef:
58:e0:b2:dd:28:ee:58:99:fb:0d:86:29:e6:39:56:
25:e5:eb:d2:0d:7b:f7:7b:ad:12:b3:58:9e:57:af:
ac:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9D:FB:13:97:C6:04:40:CF:B9:F9:89:DB:9F:D8:A7:3D:0A:92:37
X509v3 Authority Key Identifier:
keyid:AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:e0:de:1c:25:50:2d:ea:80:d5:73:eb:fd:e4:4c:86:62:cd:
4b:e2:ff:ba:16:17:19:3a:07:eb:48:6f:dc:0e:98:81:9a:8b:
34:22:2c:9a:26:1e:41:e6:2a:85:f1:bb:96:92:cd:94:c1:3e:
17:d7:18:a6:c2:43:81:e8:11:b5:a5:b4:f6:07:d4:04:35:fd:
5d:7b:a2:ff:46:c9:f1:98:cf:f0:27:29:1e:dc:9e:ff:20:29:
80:26:97:d1:2e:96:74:80:e2:69:19:75:c6:18:0e:32:01:ab:
61:b8:12:47:09:21:30:b4:6e:8c:6f:22:22:d6:f1:4f:73:20:
3b:57:cf:36:fe:87:ba:af:e2:96:e9:07:42:50:10:b1:52:45:
b7:be:e0:34:c2:f1:f1:97:db:d4:e4:1f:33:e8:4d:e2:ec:e2:
88:0a:9b:76:b5:73:ad:ce:59:5d:7a:4d:66:18:98:6e:cc:ec:
e8:1f:c2:11:c3:34:3a:1f:f8:02:4f:a3:45:5d:96:1b:fd:1c:
32:ae:f1:1b:35:fb:4f:7d:73:b8:e7:2e:80:d4:d6:58:14:01:
9d:57:50:0a:07:ca:04:78:da:12:85:e1:01:93:27:de:6c:f7:
03:18:22:60:14:5a:b3:2f:d6:be:16:c7:bf:31:dd:da:87:ce:
b9:7f:2e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:10:31 2025 by rpki-client