Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
File: QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft (raw, json)
Hash identifier: Waio69p8doZPTXA10XbqsC0I90E4J3svrK4zIPISrDY=
Subject key identifier: E6:BF:AE:4D:83:3A:9D:29:F2:4B:84:84:76:B1:39:71:5A:46:AA:1C
Authority key identifier: 41:E2:39:2B:65:48:B0:9B:18:A6:4D:3E:50:80:BB:BB:92:79:31:0B
Certificate issuer: /CN=41e2392b6548b09b18a64d3e5080bbbb9279310b
Certificate serial: 01958B169A84ACF06AAAC231E58271BDFC42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
Manifest number: 0B7C
Signing time: Wed 12 Mar 2025 16:01:09 +0000
Manifest this update: Wed 12 Mar 2025 16:01:09 +0000
Manifest next update: Thu 13 Mar 2025 16:01:09 +0000
Files and hashes: 1: 2jf60Yjy6HLBv6d8yR7rie7dcvM.roa (hash: KUJJAA4N19gfVcdXpDwoxv1pVLrdLYxvm5tedzjrpBo=)
2: QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl (hash: Jf7yN6pyYbBrmPIERBnFNtx1l/lIcANrCYJzmqfrdg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 16:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:16:9a:84:ac:f0:6a:aa:c2:31:e5:82:71:bd:fc:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e2392b6548b09b18a64d3e5080bbbb9279310b
Validity
Not Before: Mar 12 16:01:09 2025 GMT
Not After : Mar 13 16:01:09 2025 GMT
Subject: CN=e6bfae4d833a9d29f24b848476b139715a46aa1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4e:7c:09:a3:e5:38:cb:02:40:12:34:fe:62:
91:6a:11:01:f2:a2:af:de:e3:37:bc:e1:11:07:f7:
4a:a3:cd:c4:61:92:85:14:ab:12:d0:0d:c8:2d:04:
aa:56:fc:8d:f6:73:d2:ef:08:df:ff:d5:d5:81:8f:
73:cb:95:dd:46:2e:21:08:20:55:fd:ab:7e:7b:dc:
ab:68:ad:dc:4c:97:ec:d0:22:db:13:b0:3e:10:de:
92:ab:eb:07:d2:4b:c1:59:b3:fd:a5:62:d5:1a:00:
1c:48:b8:60:e5:9c:19:33:39:45:21:d3:2f:36:ba:
c7:85:9a:65:47:e5:e2:7a:12:a4:03:13:71:2f:44:
17:b9:5e:c4:ec:f8:bb:7a:39:16:95:db:7d:49:13:
8c:d0:00:a0:2d:f8:dd:ac:31:eb:7a:8a:7d:ec:4d:
45:94:20:18:2f:64:66:c2:b3:88:80:d8:5a:f1:81:
96:b0:d7:ae:c8:41:eb:44:e8:93:6c:37:b9:c6:6a:
f0:d8:15:a3:fd:80:89:83:01:e5:59:b3:9e:bf:2a:
17:0f:de:7f:2d:c9:74:ff:29:13:dc:9d:e5:46:a6:
55:48:66:9c:88:77:74:62:47:78:7e:80:60:06:1d:
5e:b7:d4:19:3d:91:93:e9:12:94:0e:ee:a0:87:84:
46:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BF:AE:4D:83:3A:9D:29:F2:4B:84:84:76:B1:39:71:5A:46:AA:1C
X509v3 Authority Key Identifier:
keyid:41:E2:39:2B:65:48:B0:9B:18:A6:4D:3E:50:80:BB:BB:92:79:31:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:9c:34:c8:d7:fe:64:0d:58:78:71:5b:b3:96:dd:63:67:b1:
90:a3:09:2f:dc:a7:09:32:9e:21:b8:58:f6:5e:d2:2d:26:ee:
50:ce:2a:10:b8:68:d0:1e:71:22:b1:b9:8d:6a:1f:c3:2d:c8:
eb:ef:71:95:da:c2:83:83:09:31:39:95:91:ab:8e:a5:50:c1:
21:21:f6:11:61:f3:23:bb:f1:c6:6a:3a:46:33:1e:60:6b:9c:
4e:f7:52:98:a4:39:8c:89:b2:c4:c3:9a:40:39:6c:9f:45:87:
d4:cc:6b:1c:9e:be:c8:5f:06:62:d0:cb:e4:a4:a4:f3:64:08:
4c:dd:fe:6e:be:32:de:7e:19:7f:7c:8f:d8:13:bc:b3:ef:3d:
e6:ff:3d:b7:41:ac:df:87:e4:b1:46:06:7c:40:c2:36:e3:60:
d7:77:b5:1e:ab:c3:73:8d:e6:23:af:14:3b:a0:88:21:63:11:
11:e0:fa:39:b2:bd:0b:a1:19:75:c7:dc:cb:56:9f:a9:19:eb:
82:e7:3a:1d:09:9c:06:55:bb:77:2f:32:31:10:ab:f3:8c:51:
36:5a:3b:39:e3:ff:51:1c:f2:a7:dc:67:d7:66:f8:31:74:13:
57:4d:5e:ad:26:36:a9:dc:50:78:8d:c9:82:2b:6a:97:c8:07:
a4:34:fc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:50 2025 by rpki-client