Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
File: qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft (raw, json)
Hash identifier: kqCRWBHImcNtSbxguEWpVmyEY+DvEnWLA8ToSOVkLMY=
Subject key identifier: 70:4F:86:18:1C:40:B2:96:B9:CE:33:4E:4C:BD:A9:65:27:AD:F5:DB
Authority key identifier: A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6
Certificate issuer: /CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
Certificate serial: 01964C6B6D6A64C50A93F2FE33361B13831B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
Manifest number: 0FDC
Signing time: Sat 19 Apr 2025 05:00:30 +0000
Manifest this update: Sat 19 Apr 2025 05:00:30 +0000
Manifest next update: Sun 20 Apr 2025 05:00:30 +0000
Files and hashes: 1: 1-AU6Gnoq31NHxflgGui7pQnafXQ.roa (hash: EGLLwW1ofOs0SYvfXY13qswF8cFAf0RF4OYVmpVNmog=)
2: JyKT5t-tp9Ns-zQBDf52afbSU90.roa (hash: vZDex2xJzEBhdxg8YwQEm5MoYizntTQWWZeFLfZB0Ls=)
3: qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl (hash: txdBg+SZ0PvwMv6EWi5JijPK8hxwK61RU5RKAc6LXRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:6d:6a:64:c5:0a:93:f2:fe:33:36:1b:13:83:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
Validity
Not Before: Apr 19 05:00:30 2025 GMT
Not After : Apr 20 05:00:30 2025 GMT
Subject: CN=704f86181c40b296b9ce334e4cbda96527adf5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4b:9f:0a:a3:71:2a:92:60:07:d6:32:89:d1:
25:bd:b6:fb:64:e1:40:74:11:26:62:e7:fa:85:1f:
7a:2e:15:cb:6b:e3:34:40:32:04:35:d6:d1:3f:53:
01:64:e2:c7:ca:23:7f:a2:ba:4b:ba:c6:ec:ab:55:
c2:70:fc:b4:22:91:6d:17:b2:20:d7:17:1b:66:b6:
21:a6:41:29:db:87:4e:af:89:c3:ef:cc:7e:13:ed:
f0:56:c8:90:2d:2f:f0:db:66:a9:7c:ea:f4:e3:27:
4c:fe:35:7a:4a:c6:b1:80:1c:51:9c:0b:75:69:2e:
b1:b0:1b:e1:ae:24:43:09:ad:31:0c:75:95:6e:81:
4b:5a:ed:8b:db:c9:33:45:a8:b6:40:b5:b5:7c:b1:
51:71:86:dc:d3:e0:d8:66:07:ac:04:77:8e:f1:17:
8b:74:81:ae:3a:85:64:9c:29:63:e9:02:87:8b:31:
de:6d:53:9c:74:c6:22:cb:8c:e3:02:18:be:a3:34:
e8:2b:48:95:90:af:1a:c6:eb:ea:76:59:e1:c3:e1:
a0:c1:44:21:12:0c:22:38:34:c3:95:a7:ea:a0:28:
f3:38:d9:63:2d:dc:ce:8e:34:3e:d7:61:7f:5b:1e:
00:c2:c5:51:f9:dd:47:85:45:7f:be:93:bf:1f:b4:
ff:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4F:86:18:1C:40:B2:96:B9:CE:33:4E:4C:BD:A9:65:27:AD:F5:DB
X509v3 Authority Key Identifier:
keyid:A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:63:ac:5e:03:02:07:a9:3a:d1:91:c8:00:54:bb:71:22:5b:
d3:56:bc:fd:b4:9d:21:f7:9c:54:ee:9b:0d:2a:1d:9a:c8:3e:
b4:76:fb:60:5e:74:20:6e:82:16:c1:02:c3:a2:bc:20:a7:03:
44:23:e3:24:b2:90:08:c7:97:cc:05:8a:f6:6b:8b:d1:ac:da:
39:a0:c3:7c:a5:b8:94:50:ad:65:30:49:47:9b:d0:e7:1c:af:
b3:0a:98:26:9f:54:36:c4:04:9d:78:f4:68:ad:b1:bf:46:19:
80:f3:d3:58:9c:e1:11:c6:88:b2:9f:cb:17:60:f3:d0:17:3a:
54:ec:56:68:a0:5b:91:84:18:59:6b:8b:c3:ed:bc:55:1e:bd:
73:c7:e2:91:b2:4d:17:ad:59:a0:ed:83:5e:1f:4a:e7:3d:8d:
f6:21:16:72:3c:6e:5e:76:65:dd:1a:56:0e:5e:4f:25:18:20:
6f:de:dc:96:b5:c8:91:1c:a2:ce:7b:4c:b4:6a:96:f4:72:73:
c0:68:74:cc:cd:00:e9:93:3c:37:53:5e:f9:f6:67:3c:3b:bd:
2f:8f:1d:ae:2d:7a:9d:0d:58:76:13:fa:c5:4b:40:fb:c0:99:
a3:ae:22:0a:c5:87:f7:18:1c:16:a7:52:3a:5b:87:79:f0:4e:
db:2a:da:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:24:52 2025 by rpki-client