Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
File: QdoQ1mXBDhy27GwhUOPmAkBFudo.mft (raw, json)
Hash identifier: 1GteeQI+BayRagoaIIucQZDXH+lGI9XAfrmGAK15lHw=
Subject key identifier: 50:A0:1D:2C:29:DD:3F:1A:84:0E:95:E0:CC:50:89:2A:6B:C5:62:1C
Authority key identifier: 41:DA:10:D6:65:C1:0E:1C:B6:EC:6C:21:50:E3:E6:02:40:45:B9:DA
Certificate issuer: /CN=41da10d665c10e1cb6ec6c2150e3e6024045b9da
Certificate serial: 01965E3AD7F9771DBA1A73E7B580D5461305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
Manifest number: 0E36
Signing time: Tue 22 Apr 2025 16:00:36 +0000
Manifest this update: Tue 22 Apr 2025 16:00:36 +0000
Manifest next update: Wed 23 Apr 2025 16:00:36 +0000
Files and hashes: 1: QdoQ1mXBDhy27GwhUOPmAkBFudo.crl (hash: HKmkqccvocFKgO7cRGKFCMgz6eoOeRBS3r19EOPXW4M=)
2: j3zO5OguCGwVjS4_cTve-Ba-iMs.roa (hash: djJiO0HYB1/EJ/pv3egGmNDFEP34QgqPKHUoq0TwlWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 16:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:3a:d7:f9:77:1d:ba:1a:73:e7:b5:80:d5:46:13:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41da10d665c10e1cb6ec6c2150e3e6024045b9da
Validity
Not Before: Apr 22 16:00:36 2025 GMT
Not After : Apr 23 16:00:36 2025 GMT
Subject: CN=50a01d2c29dd3f1a840e95e0cc50892a6bc5621c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1a:5d:66:e5:5a:8f:75:d6:cc:97:4c:c5:4d:
b3:bd:72:23:0f:c4:fb:3e:9a:b1:dd:67:95:f0:2a:
62:d9:7d:86:10:d4:ed:e4:6e:f8:31:4e:c8:03:66:
e6:17:e0:2f:49:79:76:d6:10:9d:1c:e8:cf:59:f0:
db:f0:37:96:c7:bf:c4:8b:9a:bc:59:b6:5e:6e:1a:
49:f7:bb:bf:8a:b1:99:bc:52:8c:a2:7d:18:59:a2:
29:a8:ab:7b:0f:fe:4f:96:b3:6c:17:f0:6f:39:47:
e3:cf:7a:83:36:bf:4b:4b:71:63:ea:a9:47:13:21:
e8:15:3b:8f:5d:db:2e:68:6c:26:4d:b4:e6:f9:6c:
28:f6:cd:3a:9f:6f:e1:f6:18:ea:75:82:04:05:d7:
66:ad:dd:65:2e:9b:4d:a4:cd:d2:41:7e:aa:99:de:
81:f1:df:41:98:95:85:86:e5:c0:ff:9c:54:62:e3:
8a:aa:fa:33:e8:7b:54:48:9a:cb:73:7e:52:cc:d5:
25:64:bc:8c:2c:58:e5:ef:73:6d:fb:50:03:a8:16:
b1:98:e7:81:e3:1d:35:4d:84:f6:4e:81:c6:15:f4:
77:4b:88:4e:4c:8d:26:79:5a:aa:b2:21:28:e3:84:
5e:68:0a:fa:e6:84:d1:34:d2:a9:96:99:6d:d3:01:
18:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A0:1D:2C:29:DD:3F:1A:84:0E:95:E0:CC:50:89:2A:6B:C5:62:1C
X509v3 Authority Key Identifier:
keyid:41:DA:10:D6:65:C1:0E:1C:B6:EC:6C:21:50:E3:E6:02:40:45:B9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:fa:84:8e:71:22:dc:c7:cf:f3:6a:05:7c:d1:b4:82:fa:51:
41:60:14:7f:94:6d:69:be:dc:14:b7:a6:c6:13:f1:f2:11:bf:
97:5d:b0:7f:02:51:8a:6b:a9:43:72:c4:03:39:e9:3b:79:ac:
c5:cd:36:46:74:ba:0a:f6:d8:47:d2:c1:95:1b:fd:e3:72:a8:
c4:c9:5f:05:73:85:ca:cc:a4:49:8e:8c:39:ae:e8:bb:68:a6:
57:66:2e:7b:2d:12:09:2f:be:10:1c:7f:3c:31:9b:a2:ca:2d:
04:50:ae:20:0d:c9:c8:bc:82:8f:d1:56:a9:47:74:c4:87:38:
a9:e0:de:9e:01:3b:52:66:da:12:62:5e:fa:58:cc:d2:de:38:
b9:4f:57:6f:e7:cc:3c:58:3d:32:cb:08:c2:bb:7e:ab:35:2e:
9d:5a:57:d7:83:77:47:59:2c:25:02:12:af:71:fd:7c:a3:09:
e7:ff:c5:20:fd:bd:be:59:2c:25:aa:6b:6a:5e:a4:0c:5d:dc:
c7:8e:06:9c:74:14:30:ca:98:05:b9:8d:35:a4:bf:cb:7d:58:
f4:89:dd:27:59:e3:86:6d:e8:fa:92:84:8a:c5:1d:51:03:21:
ad:1b:59:cb:81:a5:60:11:50:7a:2b:80:62:2c:d3:26:73:22:
f0:e4:30:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:48:51 2025 by rpki-client