
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
File: QM1aUDjV4S_hydn1yGZAdMPdCsc.mft (raw, json)
Hash identifier: +jA+17J0HUOMqNDqxdvF35GYSDrXWmNMRNJio0TkL0o=
Subject key identifier: 2C:80:58:35:FA:57:DD:07:97:DC:94:29:4B:A3:89:B5:05:21:94:5D
Authority key identifier: 40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7
Certificate issuer: /CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7
Certificate serial: 01962DF39790065A63152DF767FAC7A11E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
Manifest number: 0697
Signing time: Sun 13 Apr 2025 07:01:00 +0000
Manifest this update: Sun 13 Apr 2025 07:01:00 +0000
Manifest next update: Mon 14 Apr 2025 07:01:00 +0000
Files and hashes: 1: KVvOGYEyHhWhRHwS9LQjG3XK8EI.roa (hash: AFMADJ+EdA++truR6oHaQkzeXGaM562uJumCeUqnVzo=)
2: MHGZA5Y3PVpWBImn85tARMZRftQ.roa (hash: bnJhZwRrO7KGALVUCy1om+i/htb3dvM6lJ1uAmGl2G8=)
3: O1UMqFY4UYla6Wia0-cx5UTbNYo.roa (hash: yk9XmbWdQVbHd1Fk+ePRsax442yqoQX1eANsND8ceoU=)
4: QM1aUDjV4S_hydn1yGZAdMPdCsc.crl (hash: lnj3NaXLnltxFEsy6csh1Yl3nL0PlK3swoXgNhua+M8=)
5: TNSMUQvHGS8vGJs7QmyW0_jz86Y.roa (hash: qI6N5+Q6nkQDs5kBZ+Upq2gzqwGu3xE2kqSgmDsGATI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:f3:97:90:06:5a:63:15:2d:f7:67:fa:c7:a1:1e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7
Validity
Not Before: Apr 13 07:01:00 2025 GMT
Not After : Apr 14 07:01:00 2025 GMT
Subject: CN=2c805835fa57dd0797dc94294ba389b50521945d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b8:1d:7c:79:0b:8b:ca:c5:a4:a3:99:25:e1:
c1:a4:ff:a6:dc:be:57:fd:67:60:c6:41:49:53:b6:
ed:ca:31:da:3c:73:ef:8a:1f:fe:68:1a:bd:89:27:
11:a4:a7:58:77:37:be:58:f2:1c:c5:7e:34:b6:75:
6a:92:6b:2c:db:bc:1b:80:a2:bc:e3:03:9b:19:7a:
33:e8:73:f1:f3:11:96:84:9c:96:01:74:79:c2:c6:
4b:36:f3:0b:66:07:3c:02:c0:c9:9b:ef:51:da:83:
bb:e1:11:8b:29:dc:65:cb:53:1e:bd:ee:bc:dc:96:
b4:7e:66:cc:5d:cd:66:1a:c5:68:5c:20:0a:c5:ae:
12:9c:bc:db:85:d3:c7:60:8e:29:47:a7:fa:01:e8:
ea:65:78:59:50:87:cd:81:a2:8f:32:38:16:d6:e0:
25:f4:55:51:4d:42:90:1b:e0:2d:4f:8a:62:d0:8f:
d1:31:a8:b0:52:61:76:65:c5:ba:55:41:d4:aa:f9:
3b:30:15:40:e9:5c:90:d6:1e:7a:67:95:39:8d:fc:
46:0d:14:e8:bd:65:86:bd:e1:b9:0f:42:20:b2:b3:
0b:2c:79:5c:45:05:e3:f1:3b:00:b0:e1:3a:1a:a6:
4a:1e:05:c2:b0:5b:d2:33:7a:90:1e:bd:cb:6c:a1:
b2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:80:58:35:FA:57:DD:07:97:DC:94:29:4B:A3:89:B5:05:21:94:5D
X509v3 Authority Key Identifier:
keyid:40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:ed:39:de:90:45:36:bb:2e:88:39:5c:92:79:fc:2b:f0:18:
7c:f6:b0:71:b3:a2:31:35:b3:6e:43:69:f0:97:1a:57:32:22:
90:58:4b:8d:97:11:de:2c:57:c4:8c:c3:bd:4a:62:bf:df:e2:
b0:37:63:86:1c:b3:39:24:43:0e:73:cb:bb:c6:50:a0:e1:77:
90:47:52:df:cc:b5:85:c2:bb:68:13:14:18:d5:87:15:23:05:
df:15:06:6e:10:2a:8f:ba:13:a6:c9:b8:86:0d:2e:ce:aa:6b:
f9:b9:33:45:ee:7d:1f:63:08:97:ff:9f:03:ea:ad:18:07:a3:
99:b7:3f:cb:3e:d4:74:d3:47:a3:58:8c:f4:f2:0c:11:89:9f:
9b:4a:a4:a2:97:d5:37:92:60:3d:94:cb:11:1d:70:30:2b:ca:
03:f8:55:74:73:e4:21:e1:4f:e9:7e:3a:95:24:65:23:96:82:
bb:b3:81:69:f2:54:2b:85:7b:72:24:bd:78:1f:fc:66:25:d0:
ea:84:ec:52:74:f8:16:a0:bb:ee:96:8e:0d:8a:66:59:8b:32:
9c:95:fc:a0:99:70:e2:8e:9a:4d:94:52:70:28:8d:9c:84:3b:
01:1a:b2:c1:34:33:dd:b3:d8:55:3d:8a:64:86:4f:91:38:74:
87:05:a2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 16:37:49 2025 by rpki-client