Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.mft
File: qnARDTDVLoppaViLP2IUFrzfZEs.mft (raw, json)
Hash identifier: VO5WvOYm9VO0zCx6ScuqLMY0PYZJNtGTsRZX5O4ASXA=
Subject key identifier: 10:FD:0A:9A:A1:5A:31:2A:C2:BE:85:CF:2C:B8:AB:98:06:16:46:E4
Authority key identifier: AA:70:11:0D:30:D5:2E:8A:69:69:58:8B:3F:62:14:16:BC:DF:64:4B
Certificate issuer: /CN=aa70110d30d52e8a6969588b3f621416bcdf644b
Certificate serial: 01965123D46B77BF0B105BD83962831B40C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 03:00:24 +0000
Manifest this update: Sun 20 Apr 2025 03:00:24 +0000
Manifest next update: Mon 21 Apr 2025 03:00:24 +0000
Files and hashes: 1: AJtxlRhC18CSM9vDFJ0bVbhxN3Y.roa (hash: fBqbrVqiGsFpDlku7pjNXfyrY6CdOCxCpNnDRdqo0xM=)
2: hFPPHhOMQW_4XkqhjXSBTCjwlfs.roa (hash: 4m3xa6SKPtpxIGZbIvqkpRqzc55Dx3AnOKG3Nnp54nM=)
3: qnARDTDVLoppaViLP2IUFrzfZEs.crl (hash: vn/4SSAdQzAz1zx/yfwR2X2Y15ZgmNo6ETi587gyV/U=)
4: z9pLNQSZNKFYtIVw9GxMfA_dzlc.roa (hash: ceBAqvnBw6p+b98UNKLSzZv2TyxRWLOoeu9xMf4knvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:23:d4:6b:77:bf:0b:10:5b:d8:39:62:83:1b:40:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa70110d30d52e8a6969588b3f621416bcdf644b
Validity
Not Before: Apr 20 03:00:24 2025 GMT
Not After : Apr 21 03:00:24 2025 GMT
Subject: CN=10fd0a9aa15a312ac2be85cf2cb8ab98061646e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7b:da:6c:55:03:9d:bc:b7:25:6d:dc:5a:0d:
1b:b3:db:d0:c2:2e:94:79:0a:92:1c:e7:94:71:04:
cc:b2:50:c8:f0:f3:1e:98:e3:e2:62:3f:c5:7d:ab:
7c:39:4b:ee:2a:d3:c8:3c:b9:7c:1e:19:7e:08:6a:
4e:f9:8b:b4:e7:31:23:a1:8f:72:ee:64:be:34:da:
91:e9:f0:69:6b:13:c0:9e:3b:94:8b:60:38:f2:98:
e1:ff:59:f7:6e:c3:7c:cd:c2:81:86:ac:a0:f5:47:
54:fe:b3:8a:9c:cf:4c:6a:da:08:cc:88:95:42:4f:
31:d3:1e:0f:bb:9e:cc:8b:17:15:a8:d1:99:68:19:
35:0a:83:5d:a6:c2:31:24:2f:ca:fc:14:ed:ce:45:
28:8c:6a:8f:94:8d:04:73:38:2b:ea:85:b8:fe:78:
36:fb:76:33:a0:2d:2b:0e:5f:35:3d:d7:7d:ce:7c:
5c:66:7f:ea:3d:4b:db:10:a7:6f:96:0d:ac:5e:c0:
8f:03:8a:e9:60:9a:06:62:da:7d:0b:95:7a:cf:be:
9e:bf:28:c8:09:59:cd:c3:42:86:e6:25:1a:8d:70:
3b:55:53:4d:75:41:6f:9d:8d:e4:c6:29:2b:7c:53:
f4:f8:af:9b:a7:85:f2:c1:3f:18:dc:e6:d1:3c:7f:
28:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FD:0A:9A:A1:5A:31:2A:C2:BE:85:CF:2C:B8:AB:98:06:16:46:E4
X509v3 Authority Key Identifier:
keyid:AA:70:11:0D:30:D5:2E:8A:69:69:58:8B:3F:62:14:16:BC:DF:64:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c4:0a:a4:ca:ad:3e:fb:39:56:07:12:cc:a0:f6:03:ff:da:
0c:62:5a:fc:d1:af:92:5c:1b:c0:6e:93:be:71:1b:0c:55:c3:
98:6d:cc:84:24:f6:27:cc:4a:49:12:72:c1:b4:8d:ce:26:e3:
5a:d9:d1:3b:70:b0:05:2f:49:5b:06:ff:ba:d4:f5:b2:6d:f2:
22:2d:a2:2e:15:eb:fc:eb:82:71:e2:1b:5e:a2:f7:b1:e2:14:
79:84:5a:e4:14:d2:8a:3a:4e:69:a8:bc:ad:38:40:44:93:69:
ba:90:38:1e:91:d2:d5:c6:92:0e:56:66:db:c5:ec:08:f0:58:
92:38:e6:bc:59:37:91:da:54:9f:9a:af:95:41:c5:c4:df:67:
29:2b:b5:c2:31:9a:69:aa:e1:a6:0e:08:e3:d3:25:dc:d8:73:
dc:fa:82:f8:ce:f9:11:08:48:c5:63:b8:6b:ef:71:6d:47:30:
96:a6:0d:41:29:3a:46:d1:49:13:c9:26:50:3b:67:a0:f6:7a:
4b:1f:09:61:1c:5c:e7:19:17:c7:61:ce:73:2f:23:e6:fe:eb:
b4:5d:9d:ae:cb:9c:ad:be:3a:f8:34:f0:b4:35:b4:f0:a4:82:
48:f5:d9:87:48:37:7b:e7:ab:b3:4b:c2:53:bc:73:5e:d9:fc:
df:7f:1f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:12:22 2025 by rpki-client