Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
File: Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft (raw, json)
Hash identifier: jQxN/X81cVlHKdmGxeXs6NqXeFuvQ4amXBw6OHQ7PgE=
Subject key identifier: 0D:58:57:CF:F3:B7:A4:4C:7A:0B:ED:EF:CE:55:A9:02:48:88:11:15
Authority key identifier: 42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16
Certificate issuer: /CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
Certificate serial: 01965D5F316B2B7C09CB26A2C10DD80806B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
Manifest number: 1502
Signing time: Tue 22 Apr 2025 12:00:41 +0000
Manifest this update: Tue 22 Apr 2025 12:00:41 +0000
Manifest next update: Wed 23 Apr 2025 12:00:41 +0000
Files and hashes: 1: 83F_Jp7hhNkTyKzmQu0uAqQ-Hug.roa (hash: /GIKVjlq0TkCjqFIvHfnkG7+yghgu5kkQctxwrpV6qw=)
2: Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl (hash: dMjiimicXPsNY9UnCqSbWgvMVYONZjz/EhJ9/ds4/N4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:5f:31:6b:2b:7c:09:cb:26:a2:c1:0d:d8:08:06:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
Validity
Not Before: Apr 22 12:00:41 2025 GMT
Not After : Apr 23 12:00:41 2025 GMT
Subject: CN=0d5857cff3b7a44c7a0bedefce55a90248881115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d0:9e:b3:a0:9f:d0:d0:89:ea:6c:f0:e1:d0:
bb:89:3b:2f:33:57:29:8d:e0:8b:8c:ba:4f:ff:78:
40:85:9a:7d:8a:b2:ad:e9:18:eb:1d:1e:74:47:e8:
ae:5d:c9:4a:39:72:6d:f6:ce:e2:9d:ee:23:64:31:
90:fa:ef:0d:c6:f9:fc:2e:f5:67:eb:4a:17:4e:bc:
0f:a4:b7:8a:0d:66:d0:b8:b0:5f:a5:b0:dd:92:6d:
f9:e6:79:1e:f5:4d:4e:fd:6f:02:2d:c0:bc:6d:c3:
81:90:04:94:79:33:6e:b2:c7:85:0f:04:3b:1c:62:
d0:51:6b:03:e8:71:78:df:78:2f:2c:0d:eb:81:57:
60:b7:67:31:06:0c:fd:07:89:86:47:d4:43:8c:15:
a3:12:c6:fa:eb:a5:69:37:ae:f7:33:fc:7f:ba:cf:
e3:0c:df:08:30:45:32:f6:1c:d8:23:87:c2:68:75:
2a:a4:4d:43:2f:1c:0c:b7:d4:c5:eb:25:c3:d9:5b:
a5:9f:f1:53:e0:36:3f:f1:e8:42:86:df:46:3e:c6:
49:cf:e8:da:77:cd:33:58:3b:e6:42:2d:18:f4:c1:
72:f1:3b:1e:9e:09:18:be:93:38:ac:d8:59:a2:b8:
f8:b3:43:16:47:22:54:28:6a:8d:6e:04:5a:6a:60:
c7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:58:57:CF:F3:B7:A4:4C:7A:0B:ED:EF:CE:55:A9:02:48:88:11:15
X509v3 Authority Key Identifier:
keyid:42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e0:b9:21:9b:42:1b:f7:78:fa:37:d1:c2:16:11:46:72:7a:
10:d8:df:a1:cf:86:6a:a0:9f:c3:64:48:cf:5a:3b:22:af:31:
38:12:d0:f8:72:25:43:c9:b9:d5:b0:63:3b:b0:0a:e4:dc:15:
7c:2d:62:a1:18:4f:7d:8c:2f:30:4a:10:27:9b:97:fe:89:76:
7e:82:37:b3:6b:3b:92:dc:f7:57:d6:f7:f2:87:6e:5a:90:f1:
51:cc:af:10:db:62:9c:8f:77:f5:cb:a9:e3:d7:da:b2:9b:69:
d0:30:21:20:a1:59:5b:76:8e:86:28:3b:c4:71:aa:6d:29:df:
a7:b5:a0:e2:dd:17:55:92:50:7c:57:a6:c1:83:eb:1b:14:bc:
3d:34:d4:f6:f6:4c:8e:1d:39:af:40:ed:41:80:9b:de:c7:18:
2b:bc:2c:c2:65:2d:1c:c3:c7:22:2b:0f:de:37:c5:9a:2f:27:
89:be:49:2f:b9:49:e7:7d:6d:b7:45:65:9d:3e:21:42:b2:09:
4a:85:65:1e:58:d9:96:b3:0c:2a:8f:1a:e0:a9:e9:60:2e:38:
61:db:13:03:ff:fe:b0:03:c5:10:aa:b4:1f:96:be:90:66:b6:
81:6e:a5:76:67:5a:76:6e:13:13:65:af:9d:52:cc:a2:51:39:
27:c6:ee:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:05:09 2025 by rpki-client