Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft
File: qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft (raw, json)
Hash identifier: to48w8HrjTjDElFZvuDu+o/mtIxTZh148wkBKQvgUTA=
Subject key identifier: 39:63:CB:92:10:E2:69:D7:64:2D:6A:A7:36:9A:06:C4:F9:29:B7:75
Authority key identifier: AA:4D:72:EC:DC:15:37:8B:E7:17:BB:4C:A0:97:10:70:D5:76:49:A3
Certificate issuer: /CN=aa4d72ecdc15378be717bb4ca0971070d57649a3
Certificate serial: 01965B70C4AA888DA59B997CD2D3EEDE4584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qk1y7NwVN4vnF7tMoJcQcNV2SaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft
Manifest number: 03BA
Signing time: Tue 22 Apr 2025 03:00:39 +0000
Manifest this update: Tue 22 Apr 2025 03:00:39 +0000
Manifest next update: Wed 23 Apr 2025 03:00:39 +0000
Files and hashes: 1: dr0aQwlMd5wprYGuM-4A6wgZRyk.roa (hash: 5kfUYUIepAA22bF94//hZe6cokijIGlywb6OIAlIy1Y=)
2: qk1y7NwVN4vnF7tMoJcQcNV2SaM.crl (hash: 5rTqFsN9a+HsZYsg0MSRuvhGCFQjMv0HDQc+bfCLTaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qk1y7NwVN4vnF7tMoJcQcNV2SaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:70:c4:aa:88:8d:a5:9b:99:7c:d2:d3:ee:de:45:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa4d72ecdc15378be717bb4ca0971070d57649a3
Validity
Not Before: Apr 22 03:00:39 2025 GMT
Not After : Apr 23 03:00:39 2025 GMT
Subject: CN=3963cb9210e269d7642d6aa7369a06c4f929b775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:89:3f:9c:9a:16:22:ad:b6:73:d5:8f:67:b2:
45:35:8e:94:54:d1:a3:9c:ee:10:d8:8b:d0:b7:3d:
bc:b8:49:de:3b:09:9c:81:58:f9:c5:48:8e:da:34:
56:b8:30:7b:08:3a:8a:74:11:4f:72:c0:61:ad:26:
38:cf:e9:50:f1:da:3a:11:03:f4:ee:c3:83:d3:33:
7a:10:2e:29:3b:3e:f8:5c:05:dd:82:38:fb:5e:44:
03:b6:44:fb:2d:e5:13:66:5d:20:d6:7e:8e:1b:39:
cd:77:7a:26:5b:e0:08:02:12:99:69:42:14:0c:f3:
f3:c7:6f:ef:6b:69:ba:ed:8c:3a:94:55:12:67:c8:
df:9a:bb:db:36:f1:af:eb:2b:5e:f4:47:6f:0f:2d:
ea:b4:9f:50:bf:89:ce:0a:c4:f3:12:97:c7:51:56:
e3:b1:64:0e:03:bd:ce:db:e7:77:8f:11:0b:1d:6c:
de:e0:ac:b2:2b:cf:7c:dc:68:de:dc:3a:b9:31:e2:
b0:f3:12:f7:4a:c1:2b:ef:c1:52:c8:c3:b0:5a:7c:
ab:e7:76:73:8c:00:5e:65:e9:46:15:b4:ff:b9:07:
5e:8c:6c:45:5b:1e:88:8b:26:1b:3b:7b:0f:a7:ce:
da:42:97:ee:c3:9b:de:6b:7e:11:f9:06:3e:b1:23:
a9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:63:CB:92:10:E2:69:D7:64:2D:6A:A7:36:9A:06:C4:F9:29:B7:75
X509v3 Authority Key Identifier:
keyid:AA:4D:72:EC:DC:15:37:8B:E7:17:BB:4C:A0:97:10:70:D5:76:49:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qk1y7NwVN4vnF7tMoJcQcNV2SaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:aa:19:ec:69:6c:f8:e3:e6:09:14:48:1e:3d:19:cb:7f:87:
3b:39:16:43:2d:f5:84:ce:44:0c:bf:ab:b4:f0:04:a5:db:78:
46:4f:f0:5f:af:7e:75:07:0d:7e:29:44:04:89:81:f9:a7:3e:
58:c9:b1:ca:80:48:48:41:d9:7a:1c:ab:ee:ea:82:fd:70:fb:
e4:e5:cc:d2:58:44:36:4e:9f:b4:c9:11:04:da:c6:81:7f:ba:
9b:b3:e2:a9:27:f5:0e:a4:d5:0a:8c:3d:47:a8:27:3d:f9:05:
26:9e:c0:cc:34:3c:57:ba:ec:d5:18:bf:48:ff:a1:94:46:3b:
9f:55:19:7d:77:76:b0:b0:ae:66:65:2d:23:53:1b:2b:4e:ba:
80:75:03:79:c0:b4:21:a0:4f:02:98:7d:34:ef:63:4e:9a:8e:
25:00:c9:ac:0d:df:14:94:a9:2f:9b:5e:50:53:ba:d4:5a:0e:
91:52:96:94:3f:3f:97:b5:df:88:c3:4f:4e:f2:14:6a:e6:c0:
f9:bc:a8:ae:a9:35:a1:67:00:bd:5c:b3:e5:81:6e:40:41:85:
d7:89:f8:e5:33:fa:46:8a:18:a3:1f:f1:5f:ff:78:9e:a3:fb:
b8:f9:c4:cd:98:9e:7c:6a:92:c7:cb:6c:05:f8:83:81:a0:92:
a1:dd:45:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:36:08 2025 by rpki-client