Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
File: qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft (raw, json)
Hash identifier: CjuSAsUK1V8QavOAeIALjXYXvbyIS5Dc2toMeXOuCVU=
Subject key identifier: 96:F2:85:97:3F:F5:48:46:F4:2C:1F:47:0F:47:B4:E9:AA:2F:C0:AB
Authority key identifier: A9:D2:9F:70:3B:8E:C8:E9:3C:A4:84:05:DE:E4:73:0E:ED:93:C6:B2
Certificate issuer: /CN=a9d29f703b8ec8e93ca48405dee4730eed93c6b2
Certificate serial: 01963C8A3F7C7D2801AD5EEFCF02A8A507CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
Manifest number: 1351
Signing time: Wed 16 Apr 2025 03:00:15 +0000
Manifest this update: Wed 16 Apr 2025 03:00:15 +0000
Manifest next update: Thu 17 Apr 2025 03:00:15 +0000
Files and hashes: 1: bqwyrPoxmVXRueWqADmdY3mrGG0.roa (hash: DoTBiSo5d9SpNBc99v9ttgOOUKnC5aTKUP1YPPWUSbU=)
2: qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl (hash: ms/pgHmHRO/lfup2ZDX30HzHyCPnZQC9T9W4tul17C4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:8a:3f:7c:7d:28:01:ad:5e:ef:cf:02:a8:a5:07:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d29f703b8ec8e93ca48405dee4730eed93c6b2
Validity
Not Before: Apr 16 03:00:15 2025 GMT
Not After : Apr 17 03:00:15 2025 GMT
Subject: CN=96f285973ff54846f42c1f470f47b4e9aa2fc0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2b:5d:21:3d:5c:bb:5a:8d:66:e8:e8:1a:fa:
0e:c3:a1:80:3a:f4:9c:df:1e:e6:cf:b7:01:45:6a:
63:07:15:8c:fe:8d:e7:67:e8:7e:31:6f:9f:70:4e:
c9:a8:64:e2:14:dd:51:fb:ae:93:2b:b8:da:95:56:
01:65:da:79:9a:11:f9:ba:c6:5f:57:fc:60:06:b3:
35:43:8b:29:15:ca:b5:39:18:28:a6:37:5f:98:5c:
a3:2a:09:4b:66:66:4c:18:81:72:62:54:6f:7a:9a:
8f:f1:25:cc:e2:f7:20:bc:19:6a:1a:fc:c8:b7:3a:
a1:83:97:fd:75:82:88:11:a2:75:69:b7:24:b6:7a:
c1:95:58:1f:de:f9:04:01:7b:65:56:16:d4:87:1e:
69:6e:75:fe:7a:40:7a:d1:57:70:97:a8:f9:22:59:
0f:fe:65:00:9c:c6:60:94:dd:45:f2:83:b7:48:61:
ef:93:ae:93:84:a2:de:b3:00:4c:20:ea:c7:13:ae:
95:2e:f8:d6:fb:cb:b6:f9:0a:75:40:5b:34:d9:d8:
c2:51:7a:01:0c:f6:b3:a9:72:c3:c8:dc:e2:34:98:
38:c8:d7:87:c6:27:81:05:6a:5c:88:66:9c:c8:7c:
5d:63:ca:14:de:44:3f:36:77:0d:98:5c:e0:be:7c:
47:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F2:85:97:3F:F5:48:46:F4:2C:1F:47:0F:47:B4:E9:AA:2F:C0:AB
X509v3 Authority Key Identifier:
keyid:A9:D2:9F:70:3B:8E:C8:E9:3C:A4:84:05:DE:E4:73:0E:ED:93:C6:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7a:9b:3e:f5:72:21:e2:9e:6a:76:54:21:9e:d2:3d:b6:ef:
d0:58:5f:dd:7a:fd:70:91:f9:59:c0:ce:e7:8a:33:b3:18:a1:
45:17:9d:f1:2d:b9:d2:6b:39:56:84:b1:cd:69:d9:3e:03:36:
0b:94:d5:bc:dd:48:f1:29:1b:fc:9f:8a:c9:72:75:b6:3e:b6:
3e:fb:3f:9c:1b:80:7c:1f:a4:fd:76:d9:d4:67:43:92:d8:f8:
ad:45:11:e2:d4:22:50:6f:50:66:d4:ef:78:54:d1:22:2e:02:
7f:3c:bf:ad:99:8b:89:f4:43:22:e1:da:ba:e1:4b:b8:fb:c9:
fc:79:46:3b:7d:34:35:58:6a:9f:ba:5a:dd:48:f1:8e:82:a1:
b5:6f:44:a1:71:e3:d6:fb:c0:bc:1d:6c:4c:2b:af:ef:55:22:
c9:2d:b6:53:67:c5:8f:be:27:57:b0:bf:04:18:08:d3:af:ca:
7f:0d:ab:9d:98:a5:55:d6:1b:e5:52:40:8d:79:bd:79:b7:c5:
b6:38:a3:af:a3:07:c4:05:9b:8d:eb:98:1e:94:90:23:c9:23:
1b:c8:19:f5:f1:2f:61:26:b6:c6:f7:2b:48:50:db:f0:d5:5f:
0f:65:33:dc:d0:23:fc:76:eb:ff:e9:e2:6f:22:41:b6:c8:04:
88:78:2e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:58:54 2025 by rpki-client