Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.mft
File: qGBXhZ0WYOjYcpee5tamssQzowU.mft (raw, json)
Hash identifier: /jlk2+LiBLwljno11bWTwkTIrKn5lI3Q5kCLRZZh2RE=
Subject key identifier: F9:46:61:C7:C5:12:80:4B:3A:FD:53:19:13:5F:F2:2A:9D:B8:CA:0B
Authority key identifier: A8:60:57:85:9D:16:60:E8:D8:72:97:9E:E6:D6:A6:B2:C4:33:A3:05
Certificate issuer: /CN=a86057859d1660e8d872979ee6d6a6b2c433a305
Certificate serial: 0196556E64CBDAC3CB69EF27AEECB531AC9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBXhZ0WYOjYcpee5tamssQzowU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.mft
Manifest number: 1501
Signing time: Sun 20 Apr 2025 23:00:20 +0000
Manifest this update: Sun 20 Apr 2025 23:00:20 +0000
Manifest next update: Mon 21 Apr 2025 23:00:20 +0000
Files and hashes: 1: PW17_Y421OHbEdWMpqGOAItDAMQ.roa (hash: L2gpot5aAwJ9/O+fD4LlOhf1tqLhMij+IcuFZyDR7dA=)
2: qGBXhZ0WYOjYcpee5tamssQzowU.crl (hash: eQ3fX7SR1qig5BqN9qbt2MtKmftsVr/X4/3zsRVGXOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGBXhZ0WYOjYcpee5tamssQzowU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:64:cb:da:c3:cb:69:ef:27:ae:ec:b5:31:ac:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86057859d1660e8d872979ee6d6a6b2c433a305
Validity
Not Before: Apr 20 23:00:20 2025 GMT
Not After : Apr 21 23:00:20 2025 GMT
Subject: CN=f94661c7c512804b3afd5319135ff22a9db8ca0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:7c:ab:a5:f9:16:1b:6b:39:9b:15:2b:f5:
ef:af:dc:68:e9:16:4a:3a:89:f7:e9:8c:f9:06:a0:
12:a1:79:5e:a9:a0:c5:16:1e:04:2a:5d:71:2e:c5:
06:72:98:62:e4:e8:e2:44:59:9d:06:a1:a1:42:da:
79:8b:31:94:28:f5:9a:93:78:e7:aa:77:84:5d:7c:
74:fe:c7:1b:e8:50:41:96:b1:12:18:88:da:78:f6:
24:ef:c7:16:7e:b5:91:09:b3:52:17:0e:8f:dc:0d:
2d:e6:71:6c:0c:cd:70:4a:a6:32:d5:25:70:31:d1:
83:37:42:aa:61:1a:d4:88:bb:4f:63:2e:a0:16:35:
e2:e6:88:a7:15:67:8b:89:22:a3:25:ac:df:40:16:
db:68:5b:37:0b:67:a0:a0:f8:b9:cc:77:ec:42:83:
5a:92:48:aa:c0:91:6b:c4:b9:50:fb:64:41:eb:ff:
18:6a:51:ea:85:c7:ef:1b:d3:91:eb:96:d3:b4:82:
df:39:c1:09:6c:5a:9b:c9:ae:b6:27:cd:46:d8:8d:
e3:e3:7e:4f:e6:c3:fa:30:38:6a:ba:4e:ff:b0:7f:
7c:3e:69:dd:fa:7b:7a:eb:be:99:70:e7:c2:ab:2b:
95:05:7c:96:79:24:a9:f1:3e:b0:94:32:e9:40:94:
c3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:46:61:C7:C5:12:80:4B:3A:FD:53:19:13:5F:F2:2A:9D:B8:CA:0B
X509v3 Authority Key Identifier:
keyid:A8:60:57:85:9D:16:60:E8:D8:72:97:9E:E6:D6:A6:B2:C4:33:A3:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBXhZ0WYOjYcpee5tamssQzowU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:82:9b:c1:2e:1b:e8:2b:f9:81:6c:29:d3:4e:0a:d2:38:d3:
dc:79:2c:43:2e:16:02:d5:b7:70:af:99:4f:ab:d5:6c:ce:5a:
9f:2a:fa:be:f4:54:3a:a4:d7:46:8e:f0:64:26:b3:c4:c7:10:
b2:08:db:4c:af:62:10:3c:b9:2b:e4:1a:23:ea:f1:7b:fa:d6:
28:6a:a5:ef:eb:7b:08:b5:2d:ba:2d:9d:53:dd:2b:9c:8a:39:
f1:01:7f:24:ea:15:ef:4b:4b:56:f5:f1:55:37:c7:17:7c:67:
58:f9:a6:05:c9:6c:81:20:ed:a1:0a:76:97:41:ba:4e:63:e2:
13:9a:80:16:3e:d6:d9:32:bf:d1:bc:8d:ba:3e:83:17:4f:02:
e2:e9:d6:ac:1d:cd:09:fd:1d:ec:ac:5c:c3:2e:6a:60:9a:d4:
86:33:04:0e:b8:ab:96:8b:64:08:ae:bf:49:b4:eb:5e:e2:a6:
a4:ae:90:97:87:7b:06:06:63:89:a6:9e:1f:62:ac:08:ac:2d:
95:6c:4e:6e:03:0d:55:f5:20:5b:e6:d9:b9:2c:94:85:ff:7d:
79:36:b4:47:42:c5:5e:8e:3f:e7:56:c8:8c:d3:02:a7:e5:ad:
d4:72:9a:b0:92:f3:22:44:6d:72:1a:1c:4f:3b:d5:af:0d:3b:
9f:12:68:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:53:45 2025 by rpki-client