Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
File: QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft (raw, json)
Hash identifier: Bsd+fNCWqP+gDQbgVRBtaAlDnLSj6qVS8mZZ/sEc3/E=
Subject key identifier: B3:E1:BE:81:98:ED:55:43:2E:53:20:77:12:F6:E9:CD:56:3A:F8:9A
Authority key identifier: 40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
Certificate issuer: /CN=40339d304499d069aecd8bd0e8fba02e522f576a
Certificate serial: 0196507F16265986C9EE1B4B17B08419670A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
Manifest number: 148F
Signing time: Sun 20 Apr 2025 00:00:27 +0000
Manifest this update: Sun 20 Apr 2025 00:00:27 +0000
Manifest next update: Mon 21 Apr 2025 00:00:27 +0000
Files and hashes: 1: HM44YU_keUzYw0-k8-_A-z_iUEg.roa (hash: SXS4UlPdGWp6+QLYLhTDdcpIKj693zGOOUmfQDbJfCI=)
2: QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl (hash: +YRpoZZQ6TN6mQxkUx0hD0T14tcvlFWwn0eU94IYkNA=)
3: kh936l2vxgccX_jvVlzYGLxpdnk.roa (hash: 1aSc0Ne3PFeWf8CzHXerC/R90wO3YKjdcfKwJxtbP2I=)
4: yR56vcKwFBMaxDiG7yY2cvJ4n0Q.roa (hash: iQ1t4A53B7El/PSKuRvXWWegJvuT/fcPU9ZHNFZ4LFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7f:16:26:59:86:c9:ee:1b:4b:17:b0:84:19:67:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40339d304499d069aecd8bd0e8fba02e522f576a
Validity
Not Before: Apr 20 00:00:27 2025 GMT
Not After : Apr 21 00:00:27 2025 GMT
Subject: CN=b3e1be8198ed55432e53207712f6e9cd563af89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a2:f5:db:c9:03:b6:b6:0f:23:1b:a8:f2:c5:
21:54:17:61:88:e3:38:72:de:b8:96:22:49:d5:71:
42:8d:22:c3:df:e6:a1:21:d7:38:96:1a:d5:55:82:
74:de:17:b5:c6:6f:73:14:69:64:26:1d:f8:d4:cf:
c7:e2:70:4e:7a:6f:cc:50:7c:f6:78:7d:9c:5a:08:
e2:93:5b:4b:c9:ba:fb:61:62:f9:df:38:17:fa:29:
b9:68:0a:d7:68:2b:de:3b:71:62:ab:06:d0:cb:91:
33:86:4a:65:86:bb:02:ed:5d:a6:cd:de:96:ae:83:
91:d3:74:57:b5:4e:42:5d:b5:7c:29:21:e0:7d:4e:
66:d3:06:6c:bb:29:87:b0:04:ca:65:5d:77:a9:c9:
64:62:c2:b4:6d:22:5b:f6:46:8b:e9:a6:7c:f2:e7:
cd:22:11:30:f2:7f:64:fd:3b:ce:0f:5e:4d:e3:e1:
da:84:1a:a6:0c:81:d0:2a:d7:62:ec:05:b5:f7:b0:
14:a6:7a:3b:df:4a:f0:e5:35:e3:1c:35:77:18:68:
e5:e3:dc:9e:f6:71:12:7f:4e:de:63:d5:f0:2b:df:
79:a8:04:61:0c:01:76:8b:f8:82:ea:c7:5c:cd:f2:
94:64:33:4e:2e:ea:bc:24:6e:80:d9:ad:cc:11:54:
0d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E1:BE:81:98:ED:55:43:2E:53:20:77:12:F6:E9:CD:56:3A:F8:9A
X509v3 Authority Key Identifier:
keyid:40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:3c:7b:32:99:ca:33:dc:f6:83:14:1e:d4:29:de:96:5f:c4:
e5:e9:eb:ce:df:c5:a1:f8:cb:8f:3f:f5:a2:7f:37:32:0b:27:
5f:4d:26:1f:3b:cf:01:3f:38:1d:bc:e9:a5:cb:c4:e0:4d:03:
f4:e7:9c:5e:18:f2:51:84:4c:41:03:40:86:b9:5d:9e:69:9e:
44:fc:cd:f4:de:90:bd:80:47:de:39:0e:22:74:f3:e6:f9:c1:
9b:0d:0d:0d:93:29:15:a5:ef:50:19:72:1d:30:d8:bb:b9:a7:
0e:bd:7e:1e:67:83:87:24:e9:fa:97:ff:2f:ee:27:ee:8f:61:
15:e9:bf:9e:27:c1:51:2d:55:6b:2d:61:f5:d5:d1:d9:bb:f0:
69:20:c9:b0:b9:3b:12:9b:99:d9:b9:46:53:99:90:e3:22:e5:
01:1c:e0:37:9b:be:f0:69:72:bb:2b:f9:01:2f:7f:67:4f:07:
58:8a:50:be:c8:f4:7d:aa:c4:7b:04:1a:4a:dd:46:30:2a:5e:
bf:cb:37:23:af:82:85:d7:95:65:ea:b6:8d:e9:01:cd:ba:29:
a9:07:06:32:88:2f:93:4d:58:fa:5b:bc:77:75:7c:86:25:16:
66:be:9e:59:68:8b:e5:28:cb:0d:0b:a4:83:c9:4b:1f:98:31:
0f:77:7f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:36:16 2025 by rpki-client