Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
File: QvUa6vd0tjOkf5YKcImxWzWxpMs.mft (raw, json)
Hash identifier: GbiARRqEBJrx30PKoCeq7dvbEyYE6tKwEi+KRQfoF+U=
Subject key identifier: D5:CE:6A:BF:C9:89:BB:28:9A:69:A0:A6:DA:4D:55:CA:83:87:40:3A
Authority key identifier: 42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
Certificate issuer: /CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Certificate serial: 019630F4CD30BBCB42616D265CF5DEE89E75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
Manifest number: 05B1
Signing time: Sun 13 Apr 2025 21:01:11 +0000
Manifest this update: Sun 13 Apr 2025 21:01:11 +0000
Manifest next update: Mon 14 Apr 2025 21:01:11 +0000
Files and hashes: 1: QvUa6vd0tjOkf5YKcImxWzWxpMs.crl (hash: 3iPyw/1VTKLmlXc5WAIEu5Q7BO21bnntSHFus+jfbe0=)
2: t9VupHYPOlXRe5J5x5F4CIePTBk.roa (hash: Fm6IUpzI362dwSd1jnTljFQdqkkno6k0hmV6iA3oMoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:30:f4:cd:30:bb:cb:42:61:6d:26:5c:f5:de:e8:9e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Validity
Not Before: Apr 13 21:01:11 2025 GMT
Not After : Apr 14 21:01:11 2025 GMT
Subject: CN=d5ce6abfc989bb289a69a0a6da4d55ca8387403a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:64:35:cd:30:05:b3:57:00:f6:b8:ba:67:64:
52:f1:0e:08:41:bf:7c:3f:3b:9a:52:a0:82:d8:a6:
e3:18:17:d8:50:9f:7d:c1:1c:c2:29:f8:16:54:fd:
b5:9b:8c:ac:6d:68:54:57:ca:d9:2f:3f:a4:12:e6:
0e:ab:e4:55:db:37:7e:50:c1:3c:a6:6a:f1:4f:1d:
e5:fb:71:88:ed:a8:e7:1d:4f:11:cd:57:bf:08:56:
36:aa:7f:a8:cf:f9:15:56:b0:00:03:2a:7b:15:ac:
60:2e:05:d4:d6:94:bf:4f:a1:be:fe:33:dd:76:eb:
e8:1f:3b:38:2c:d4:b2:4f:78:5b:20:c2:72:c6:e6:
20:2a:d3:8f:01:9d:9a:c0:47:a5:89:ba:16:6d:81:
af:a7:35:14:55:d0:c8:f3:e4:1d:bf:33:e5:da:b6:
67:d7:e8:4c:6c:b9:77:a2:3e:88:86:de:7c:9a:6a:
95:40:54:e3:17:51:92:4a:8b:89:df:8e:09:6b:c3:
a8:0b:5c:af:d7:81:2d:bb:fe:cb:c2:18:75:68:61:
cd:d8:63:c9:27:b7:f5:86:75:39:f6:ff:3d:25:26:
4d:94:18:0c:d5:28:1a:32:b4:18:61:2f:58:64:22:
75:ec:3e:ef:8a:0e:45:c8:28:7e:6e:ad:cf:93:b1:
17:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CE:6A:BF:C9:89:BB:28:9A:69:A0:A6:DA:4D:55:CA:83:87:40:3A
X509v3 Authority Key Identifier:
keyid:42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d2:a0:1c:75:0b:54:10:3c:1e:6b:c2:97:d6:52:1c:8d:a1:
bc:7d:c2:29:e5:06:5e:54:0e:f9:67:54:1d:04:cb:74:3d:b7:
2a:45:e5:90:fd:76:2f:09:bb:85:70:47:7f:6d:78:1a:60:b2:
b9:14:63:6b:0e:f0:88:b1:54:dd:5e:25:69:bb:b3:c3:fb:d0:
a1:6c:21:e5:73:a7:d0:f4:74:37:9b:b0:aa:a6:5a:f1:a6:c7:
9c:33:d0:9e:cd:6b:af:e8:73:96:be:04:91:3b:9a:27:f1:93:
7d:7b:db:21:e7:57:48:a5:c3:d9:24:17:98:b0:a5:60:76:2f:
41:c2:30:8f:1e:e1:5d:70:7e:8d:52:31:38:b0:50:b4:35:e9:
c6:d1:45:4a:72:8b:67:d5:3e:d6:dd:91:b8:48:0c:a6:bc:1d:
ca:b2:f2:8f:3d:51:74:bc:dd:8a:12:3d:4e:8f:66:6a:dd:25:
b4:8f:95:08:12:6d:26:0d:98:e8:23:94:ea:3e:e0:d1:3c:4f:
59:3e:33:4b:6a:38:51:41:cc:03:53:60:de:7a:25:a4:77:56:
07:01:4c:9b:da:de:96:47:d9:6f:d0:0c:0a:c6:0f:ca:38:12:
14:8b:b5:16:83:dd:75:be:de:31:d9:ff:4a:40:25:16:85:c4:
c1:68:37:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:36:36 2025 by rpki-client