Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
File: QiF6LVE6n7D84aHPwrPAXAGL2ME.mft (raw, json)
Hash identifier: PIv3uneuOGxrj5ime4DC3GxwMEpF8GOaIGjy2E+Qqcs=
Subject key identifier: 19:A0:A5:D9:ED:E0:37:D5:A0:85:DD:A1:A3:63:BD:D3:29:26:00:98
Authority key identifier: 42:21:7A:2D:51:3A:9F:B0:FC:E1:A1:CF:C2:B3:C0:5C:01:8B:D8:C1
Certificate issuer: /CN=42217a2d513a9fb0fce1a1cfc2b3c05c018bd8c1
Certificate serial: 019639C06E172DC2D20022CD77F5A00C6F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
Manifest number: 0879
Signing time: Tue 15 Apr 2025 14:00:34 +0000
Manifest this update: Tue 15 Apr 2025 14:00:34 +0000
Manifest next update: Wed 16 Apr 2025 14:00:34 +0000
Files and hashes: 1: BF1OaGyaTyDLCWSklyxgYbn9nEs.roa (hash: AVER/BhL6ABrbQlRM/PyN/xXO4yBqy6qEwfqfNZn84A=)
2: QiF6LVE6n7D84aHPwrPAXAGL2ME.crl (hash: LX+fIeFEDqUjMDX4uZI99DOo1QSLZNIorVYJWMPr6TI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:39:c0:6e:17:2d:c2:d2:00:22:cd:77:f5:a0:0c:6f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42217a2d513a9fb0fce1a1cfc2b3c05c018bd8c1
Validity
Not Before: Apr 15 14:00:34 2025 GMT
Not After : Apr 16 14:00:34 2025 GMT
Subject: CN=19a0a5d9ede037d5a085dda1a363bdd329260098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:00:68:d8:d5:5c:42:57:8a:fe:47:8c:08:ad:
d1:a8:2f:54:f6:2a:e2:98:5b:66:c3:a9:98:e9:5e:
50:13:d3:20:62:a7:82:d7:04:84:eb:d0:40:3d:0d:
f1:84:2f:42:5d:77:59:aa:0f:89:90:7c:7c:26:ff:
6f:dd:4b:24:5a:73:e0:93:69:df:ec:29:2b:62:34:
68:d4:36:78:22:a0:9e:26:2d:4f:55:15:c6:c8:60:
54:9a:e3:9d:5c:56:68:fb:53:ca:e7:ae:70:65:d1:
de:b1:4e:af:74:a4:82:0a:5b:f1:82:61:39:29:ac:
0b:f9:d0:d8:55:38:70:d4:32:c6:a0:36:2a:07:c5:
4f:58:b2:bb:07:45:53:d0:a4:58:bd:ef:5e:25:96:
c8:d5:72:a4:65:7e:e0:78:06:07:d2:73:0a:81:19:
87:37:2b:dd:3e:8e:0a:4e:94:8d:5b:03:b9:65:b0:
08:69:b4:d8:5d:d2:ae:60:b7:79:14:b4:05:10:84:
0d:ee:bd:f5:05:6e:11:41:34:8c:65:0e:1e:f9:a1:
84:50:89:b5:7e:fe:bd:f2:04:d6:73:49:a4:e5:00:
3b:a8:06:59:87:0d:45:c5:15:3e:8b:83:f8:e0:37:
71:ac:93:d1:82:ab:f0:a0:ab:de:c5:06:7b:ae:ff:
51:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A0:A5:D9:ED:E0:37:D5:A0:85:DD:A1:A3:63:BD:D3:29:26:00:98
X509v3 Authority Key Identifier:
keyid:42:21:7A:2D:51:3A:9F:B0:FC:E1:A1:CF:C2:B3:C0:5C:01:8B:D8:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e7:b0:60:2d:1c:9e:42:2c:b8:f1:1d:36:21:31:90:cb:21:
9c:95:d2:fe:68:9a:9f:b6:48:34:d8:82:e1:e4:b0:0f:bf:20:
c7:cd:77:20:68:db:2e:e2:a8:5e:07:09:82:2b:6a:76:91:bf:
41:ea:29:01:96:d5:de:3b:32:75:0a:ea:5f:35:86:51:0d:b7:
4d:33:bf:66:df:9f:7a:44:e3:27:03:cb:1e:4b:85:aa:26:26:
1f:f6:a9:68:b6:e3:81:2e:54:85:db:ba:ed:66:96:9f:c4:7d:
75:45:7e:51:cb:fd:a9:dc:2e:24:4d:9c:69:f9:3a:58:14:5b:
ce:e1:30:0e:06:79:20:d8:b2:a5:c9:11:6e:dd:6c:1a:e6:69:
2f:48:31:0e:24:ad:53:f4:62:d0:9d:30:81:af:1d:32:7d:f9:
f4:b6:55:d8:eb:b3:5f:e2:9c:20:a2:88:c1:6e:ca:6b:4e:9d:
fd:f0:f2:f1:3e:25:38:d1:9f:86:82:d1:de:52:8a:6e:0e:73:
65:7e:0d:f9:1a:a6:84:36:4d:56:b4:ef:2f:27:7d:ac:3c:c9:
ce:89:79:a5:cf:e9:14:ef:77:62:6d:9c:3f:38:80:5f:8d:ea:
5e:c6:38:a0:3a:a5:49:29:77:f0:6e:5c:4d:cb:1a:a5:a0:49:
50:ec:34:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:19:22 2025 by rpki-client