Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
File: qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft (raw, json)
Hash identifier: MkRxyWm6ktdW4bZqMz8oDbLH387m8dSUb+m1I6bxAd0=
Subject key identifier: E9:44:C7:6B:E1:AC:E3:F3:4B:AB:6B:7E:4C:F7:1E:34:BA:E4:B1:C9
Authority key identifier: A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
Certificate issuer: /CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Certificate serial: 019638AE31CDE8CCE4601F21E774FE85D949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
Manifest number: 05D8
Signing time: Tue 15 Apr 2025 09:01:02 +0000
Manifest this update: Tue 15 Apr 2025 09:01:02 +0000
Manifest next update: Wed 16 Apr 2025 09:01:02 +0000
Files and hashes: 1: 8CcKJiF0r4FrDqB9K7MCSFJJvag.roa (hash: oH5satYFVvZ45Q+JWd3Hf90Jew1mrnQWjIvCBL11FrU=)
2: qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl (hash: wHNKwze5GX5nVZNkBOu/tJzYyMcXWhxTLDr0l/BlVYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:ae:31:cd:e8:cc:e4:60:1f:21:e7:74:fe:85:d9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Validity
Not Before: Apr 15 09:01:02 2025 GMT
Not After : Apr 16 09:01:02 2025 GMT
Subject: CN=e944c76be1ace3f34bab6b7e4cf71e34bae4b1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fa:8b:16:72:1f:8f:23:9f:8c:72:63:41:ec:
55:2a:02:5b:a3:5b:16:48:22:c4:7d:2f:1c:34:f4:
92:ea:39:b5:de:84:f2:96:a7:f4:e9:c2:d7:1d:a9:
71:8b:b3:6a:fa:b1:7a:f5:f8:63:c4:2a:6c:8e:76:
9c:2d:93:5c:6a:63:e3:cf:db:5e:d0:e8:35:7d:46:
a6:59:2d:c8:ba:83:58:c5:cb:a4:40:19:e6:90:fd:
76:80:5a:c4:04:e1:bb:d6:a7:f3:25:02:2b:9d:c9:
54:1d:ce:51:25:d5:af:ff:01:32:1d:81:8b:16:1e:
cd:f4:bf:59:32:75:cd:89:20:04:74:8c:b2:04:a1:
8f:ca:16:5d:f9:ae:05:36:02:36:60:79:b1:6c:92:
28:2f:69:4e:1b:6e:79:67:6d:c9:8a:aa:4e:59:5e:
8e:fa:69:73:98:53:47:a3:b1:ef:b0:ab:25:8c:8f:
5a:28:f5:29:ff:a3:49:88:ed:c3:10:0c:56:7a:df:
3f:ec:16:53:b0:5e:86:97:a8:ca:24:5e:23:6b:3f:
13:0c:df:b8:0c:ff:89:40:65:ce:ca:2d:f6:a2:ac:
a1:ae:5b:4e:c4:ae:43:e7:5b:24:50:18:60:f9:a0:
5c:e1:70:8e:d2:d1:72:a9:b1:1d:99:f5:e5:94:bd:
32:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:44:C7:6B:E1:AC:E3:F3:4B:AB:6B:7E:4C:F7:1E:34:BA:E4:B1:C9
X509v3 Authority Key Identifier:
keyid:A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:7e:2d:7d:ab:6d:7e:81:c3:d0:01:5e:0a:17:c3:d5:b4:66:
2d:1f:e0:0d:31:e6:9f:b8:a3:1b:9b:8a:d5:8b:f5:18:8e:9c:
72:fa:fe:be:02:fa:55:2e:a9:28:b3:e6:20:36:1c:4a:e4:56:
66:ce:b3:d3:89:da:ca:b7:4f:f1:81:d5:82:9e:df:e7:b7:ad:
39:67:19:bf:14:a3:18:b1:77:13:2c:72:d6:ff:fa:82:0a:d0:
81:de:b0:55:9e:d7:d7:b0:9a:96:b1:ee:ee:f7:d6:a4:6f:4d:
2b:4b:54:b5:63:4b:01:3a:85:dd:4c:5a:db:c1:2d:ae:2a:e7:
ce:24:70:1f:9c:74:2b:2b:37:48:d6:55:b8:28:0d:ed:da:30:
9f:e6:e6:66:e0:18:87:f5:a4:6f:13:a6:d7:e5:26:da:5e:dc:
3e:af:53:60:02:13:91:eb:c8:95:88:9b:e6:78:a0:2b:91:84:
da:94:d4:00:38:34:1f:af:a6:78:72:13:da:63:a0:e6:67:1f:
d4:25:84:26:d3:6c:19:17:2e:72:9a:01:0c:85:4f:61:47:86:
22:7b:6a:02:5f:7e:54:7c:da:ca:da:d6:67:d3:0e:0c:f9:bf:
f3:e7:74:e2:54:80:de:21:cb:0d:32:98:65:0d:32:c3:87:aa:
80:41:8d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 12:38:10 2025 by rpki-client