Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
File: tQALgentSypwKh71-FLg52nuEOI.mft (raw, json)
Hash identifier: mWBA2VmCGrZzVImjYFEg3ei5e4q/e7aFJiFkwfdy5kk=
Subject key identifier: 05:80:67:11:B2:E3:B7:E2:DC:46:76:2C:CB:4C:24:E2:DF:1F:B7:93
Authority key identifier: B5:00:0B:81:E9:ED:4B:2A:70:2A:1E:F5:F8:52:E0:E7:69:EE:10:E2
Certificate issuer: /CN=b5000b81e9ed4b2a702a1ef5f852e0e769ee10e2
Certificate serial: 01964F6D5CEC1D6210EAB309AE0F92A4D701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
Manifest number: 0D99
Signing time: Sat 19 Apr 2025 19:01:29 +0000
Manifest this update: Sat 19 Apr 2025 19:01:29 +0000
Manifest next update: Sun 20 Apr 2025 19:01:29 +0000
Files and hashes: 1: AoPTcwy6H2m6XsU7z7Y2AN7ROE0.roa (hash: EkcAF/FP1ByxQSttbvF051kXzqctUYj/EMjpBXkG1v8=)
2: tQALgentSypwKh71-FLg52nuEOI.crl (hash: tuV/pk0YIQPM3Va75wZud7rzZ6epjAu04n85Ni/P/fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:5c:ec:1d:62:10:ea:b3:09:ae:0f:92:a4:d7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5000b81e9ed4b2a702a1ef5f852e0e769ee10e2
Validity
Not Before: Apr 19 19:01:29 2025 GMT
Not After : Apr 20 19:01:29 2025 GMT
Subject: CN=05806711b2e3b7e2dc46762ccb4c24e2df1fb793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ca:2e:bd:3d:04:e5:89:90:98:f2:32:bf:53:
6b:cb:f7:bc:c5:67:ad:43:1c:96:30:35:ac:4d:54:
b6:68:9b:03:9e:74:ed:78:c6:9a:f4:00:e4:e9:68:
a5:1f:04:c8:28:93:8e:2e:13:76:eb:b0:8d:b1:b2:
9d:96:f7:78:1a:79:e6:6d:25:1f:94:7b:f7:00:bc:
97:d3:29:2c:4d:70:f2:5d:42:03:5b:e7:e2:1c:41:
27:cf:d9:8d:48:ce:31:8d:ce:60:86:ad:9d:dd:9a:
0b:99:20:cf:48:f2:3c:da:5c:bc:b7:6d:64:4f:be:
24:54:6a:66:dd:90:72:79:47:be:84:6f:f0:d6:f1:
6a:e0:09:44:72:d9:4d:c9:6e:3e:81:06:18:e5:52:
7b:e2:06:57:67:30:61:89:c0:3a:25:11:23:ce:6c:
4b:87:ef:67:81:82:05:20:5c:73:b3:fd:ba:be:67:
05:fa:ce:52:82:28:e4:3c:45:1c:a6:6d:a6:eb:85:
ea:78:b7:04:1a:e7:d9:b2:1b:a3:78:b2:e5:87:cd:
07:06:6b:6c:8c:97:f8:ad:97:64:ce:e9:bf:91:db:
a0:0b:0a:cd:4e:44:76:80:34:2d:9c:9b:05:f6:6a:
1e:19:a9:b5:8c:33:18:41:8c:fb:78:4b:30:5a:8f:
0d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:80:67:11:B2:E3:B7:E2:DC:46:76:2C:CB:4C:24:E2:DF:1F:B7:93
X509v3 Authority Key Identifier:
keyid:B5:00:0B:81:E9:ED:4B:2A:70:2A:1E:F5:F8:52:E0:E7:69:EE:10:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:30:0a:c6:e8:52:a3:b4:41:ed:7e:e2:e3:cc:c8:54:54:71:
fe:6c:55:15:33:fa:c5:c8:39:68:f4:70:bb:7f:27:c6:c1:83:
11:f1:33:3a:47:d2:2f:17:ac:1a:d5:d1:64:24:d0:fc:5d:82:
5c:bc:fe:f5:0f:02:5e:cf:b1:51:8e:df:0f:20:d0:1a:ba:79:
08:72:2f:3d:f4:23:23:f6:3a:60:75:00:75:e4:3a:93:e7:6d:
2e:dc:4c:ba:76:34:2c:c6:95:70:f1:b7:2c:e9:56:59:a7:bf:
4a:c1:b0:34:a4:b8:7c:e0:c9:10:34:46:a3:1e:46:b9:19:1c:
65:22:88:b1:c9:33:ee:fb:01:c6:61:c9:39:0f:14:06:f4:ea:
9e:25:dc:e2:1f:e8:a5:13:e1:65:72:d5:02:f9:38:22:33:02:
55:fa:04:6a:0e:ff:cd:00:83:56:03:34:fb:54:ca:38:12:2f:
c9:d1:c4:03:9c:6b:7d:d3:0d:55:f5:6b:cd:9c:7e:85:b5:4a:
5e:a9:0a:df:4e:0f:b8:26:39:4c:b4:f2:52:0e:1a:3c:4d:12:
ed:24:a9:a7:c9:fb:e4:1a:9f:92:7c:ec:28:4e:09:96:fa:1c:
c2:91:6e:69:e6:7e:93:cd:ca:15:30:fb:3f:81:ea:65:f8:4c:
aa:e2:3d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:28:13 2025 by rpki-client