Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
File: qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft (raw, json)
Hash identifier: WIdnz+3twjIiSw07Oc1ZK+7Mx8pWLpbUiofAUkMYPZY=
Subject key identifier: DE:9A:A6:EC:8B:CF:C5:82:BE:D4:23:DE:9A:E6:0C:02:74:00:65:D9
Authority key identifier: A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
Certificate issuer: /CN=a9d988d1df0a6ccab2e93614951059960bad4342
Certificate serial: 01962CAA4CBFE731EAF1E33050A3EA102208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
Manifest number: 12F3
Signing time: Sun 13 Apr 2025 01:01:20 +0000
Manifest this update: Sun 13 Apr 2025 01:01:20 +0000
Manifest next update: Mon 14 Apr 2025 01:01:20 +0000
Files and hashes: 1: NX8Ag0pA74LGhUL_oaE0Kzx7aAU.roa (hash: LYvjPxPyW03jv1kHAAP+K13/fh1ywtNoDmOlSYUCweg=)
2: gAnTD0iNr7m1r1pYRaaA5fXHh-s.roa (hash: Cw97eXSR4+iVCR14Tmpd8X95xlXnCaFcwxnubQAt8e8=)
3: qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl (hash: A5N20cfCof46kZ548NM0n8Qgpl/4KTfdeqX3NZjV5nA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:aa:4c:bf:e7:31:ea:f1:e3:30:50:a3:ea:10:22:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d988d1df0a6ccab2e93614951059960bad4342
Validity
Not Before: Apr 13 01:01:20 2025 GMT
Not After : Apr 14 01:01:20 2025 GMT
Subject: CN=de9aa6ec8bcfc582bed423de9ae60c02740065d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:41:bf:e9:76:e3:7e:a4:cf:4c:97:2a:e1:
db:86:9f:a1:03:e1:9e:4b:dd:59:ff:6d:f7:e2:d9:
25:7f:8d:6f:5a:c3:f6:b7:d0:22:15:86:51:2a:fb:
af:b3:a6:d9:7f:77:6e:1f:33:7f:3f:6b:79:df:ef:
89:02:39:b3:3b:51:3d:5a:31:03:b7:2f:c8:3e:91:
f5:9c:62:1a:0f:9e:51:95:c5:ac:44:4f:8c:d6:d2:
7c:0c:9b:2f:ed:4a:7c:43:c3:23:8a:18:dc:63:76:
7e:80:81:50:35:7d:1c:87:18:7d:85:2f:c5:b1:99:
ad:8b:6c:15:c6:61:c9:6a:09:7d:a8:c0:87:15:c3:
78:a1:2d:59:ce:0d:d0:89:ec:3b:7b:22:a0:bd:6d:
14:69:a4:7d:38:ed:ce:56:9a:6d:9a:e4:6c:7b:0a:
13:12:f9:bc:ce:54:f8:20:35:b5:04:6b:e0:2a:ba:
88:73:0f:dc:9c:92:7d:bf:cd:8d:21:bc:a7:16:d8:
69:68:96:e1:65:64:d3:3a:59:dc:83:01:a0:0f:ce:
6e:f9:ad:8b:f3:96:15:f4:4f:78:3b:cb:6a:6c:28:
0e:c6:28:20:a5:66:b7:36:be:46:5b:45:fa:9d:d0:
25:11:bc:95:8b:4d:1c:ed:07:e5:4d:57:f9:2b:b9:
ca:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9A:A6:EC:8B:CF:C5:82:BE:D4:23:DE:9A:E6:0C:02:74:00:65:D9
X509v3 Authority Key Identifier:
keyid:A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:5f:9b:11:77:0a:a3:3f:5d:a4:c2:2c:24:12:b9:5d:41:d7:
3b:34:d9:b1:de:b6:61:73:ef:58:b2:ee:5b:64:31:2f:90:17:
9c:72:35:b2:31:be:ec:bc:bc:4a:53:f4:25:a3:88:bb:f4:4b:
3e:0b:33:b0:d0:cb:6b:6b:e4:6d:5d:d6:0f:6c:1a:d3:eb:24:
06:9f:ea:5c:98:ab:94:75:9d:62:74:13:51:ad:e2:15:43:f3:
11:9f:aa:d8:f6:5b:c6:5b:f6:ab:7e:53:4c:16:e2:23:1b:ba:
5a:a6:96:4e:cc:34:0d:c0:14:db:51:d1:5e:83:b8:05:f0:92:
45:e2:b6:2d:81:25:86:71:7a:5f:88:c9:93:73:bc:94:28:fe:
9c:64:0f:97:aa:3f:f6:be:77:a4:22:26:82:de:20:eb:53:07:
69:75:70:53:4a:3d:87:36:09:19:da:eb:95:66:ac:e5:05:52:
fb:af:fe:f9:56:19:86:46:4c:1a:20:6e:0d:52:0c:ad:80:a4:
52:2b:f7:78:10:41:31:bb:08:67:65:5c:06:af:05:e2:f3:a1:
e4:fa:42:34:2a:4a:c4:0f:8e:2b:55:83:ea:3d:7a:e5:fc:00:
25:03:0b:71:32:80:67:83:0f:65:1c:a7:fa:17:af:70:cb:69:
94:5c:ea:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:00:29 2025 by rpki-client