Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
File: qOdYAufvuGU-OvWcvxvAZTi8pnE.mft (raw, json)
Hash identifier: Ec0bA+RK3g9Xm2TA0cnN1khqtvoht84z69YIv9yUfIQ=
Subject key identifier: 35:04:CA:6B:68:3E:C5:BE:CA:DF:C8:1A:E7:62:05:00:4D:51:F1:17
Authority key identifier: A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
Certificate issuer: /CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Certificate serial: 0196470DE26FC8A5EDF3B3B989B68AFDCCDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
Manifest number: 132C
Signing time: Fri 18 Apr 2025 04:00:14 +0000
Manifest this update: Fri 18 Apr 2025 04:00:14 +0000
Manifest next update: Sat 19 Apr 2025 04:00:14 +0000
Files and hashes: 1: cl6-xP7qlNVenXtKej75GmET20w.roa (hash: FpmDKBHZRHAtEaN6sVmPZOXv3BRnJ5M9K7h5rDJV66Q=)
2: ftPX6ru82FwqHJ4CTaIfY0kPRSU.roa (hash: iKc9aP9F91n3SzRk10qNjCoKwRfXAgJ0qpka/jBdSo4=)
3: qOdYAufvuGU-OvWcvxvAZTi8pnE.crl (hash: GVCwDTWkBgzdjNdqa2+QidvnMvsy6rDJPF/ELMgNrd4=)
4: tJWty-Myp1bMv-YOuzd4M1wDOVI.roa (hash: g/a3N7RSWTo3iJRyoUMcVa6AkUH9ej5k+J2S9ybi0Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:0d:e2:6f:c8:a5:ed:f3:b3:b9:89:b6:8a:fd:cc:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Validity
Not Before: Apr 18 04:00:14 2025 GMT
Not After : Apr 19 04:00:14 2025 GMT
Subject: CN=3504ca6b683ec5becadfc81ae76205004d51f117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5f:cb:7e:bd:9e:4e:b1:53:af:26:72:6f:6c:
0b:af:d0:fb:fa:98:dc:62:f5:88:ca:5d:e2:e8:99:
f1:51:74:60:4e:ea:2a:38:c5:81:17:4c:74:e3:2e:
95:f8:e3:29:84:b0:66:9c:62:01:24:b7:0b:1d:d0:
6d:11:d1:41:21:87:9c:79:c2:cb:89:3f:bb:26:72:
eb:54:ab:c2:1b:03:1f:5f:ae:36:18:6b:e1:cd:da:
07:81:ad:5c:fd:ac:93:b6:8f:c6:fc:f8:c4:dd:8b:
8b:b3:90:72:82:51:2d:e4:6b:4a:fa:95:cf:6d:9d:
c2:05:96:de:b2:ea:7d:76:b8:56:c7:b9:4a:7d:6b:
2e:85:6d:dd:06:60:00:42:1a:82:8c:b9:bf:f2:fe:
00:fe:ca:60:6e:50:46:d8:f9:6a:ea:55:84:c7:19:
de:fd:bf:ed:05:67:79:33:3d:96:5b:6d:29:8e:43:
c3:e0:87:d1:35:74:ec:dc:f6:c5:01:e4:23:f0:28:
27:ba:6a:ad:4b:00:9c:e8:67:3f:11:bc:6b:d9:df:
79:74:44:70:7a:92:52:ed:7c:fc:b1:cb:1f:ce:69:
ae:9b:2c:67:97:9d:ff:22:23:3a:6f:49:b1:f5:01:
69:d0:37:8f:e8:b9:51:c5:ea:06:1b:37:d4:42:41:
4c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:04:CA:6B:68:3E:C5:BE:CA:DF:C8:1A:E7:62:05:00:4D:51:F1:17
X509v3 Authority Key Identifier:
keyid:A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a0:40:dc:7e:a2:67:1b:85:25:63:0c:6a:68:5f:41:fa:6d:
dd:1e:a5:c6:de:a3:b8:3f:b9:6e:e2:53:cd:99:48:8a:e4:2c:
74:75:44:91:83:8d:f2:05:e7:b3:20:65:0c:53:a1:a3:80:21:
ac:b8:53:73:ed:33:30:62:c9:12:5f:a1:9e:dc:00:ba:c4:64:
67:ea:aa:9f:ac:17:5f:0f:45:2d:af:87:bd:67:0c:9e:74:65:
d8:2c:49:d9:4c:2b:40:4d:34:51:84:6a:eb:06:d8:46:51:3f:
f5:c0:a5:e0:30:0e:a5:a0:f2:72:87:49:10:23:b7:50:29:50:
af:20:2d:72:3d:ad:06:ba:ab:1f:b4:c4:90:ac:26:4d:90:c8:
79:76:a2:c1:36:4c:32:aa:31:de:9c:36:a4:6e:e3:12:14:11:
58:82:b7:54:b1:5c:b6:37:13:5f:37:c0:81:3b:1d:d3:4d:cd:
01:82:dd:1d:a9:1a:87:44:f1:4c:42:b8:2a:c3:d7:e0:0e:39:
49:02:38:3f:96:48:2a:4e:2f:b0:bb:91:fd:f5:42:2d:2b:bf:
db:02:8b:4f:67:92:34:a8:34:9e:ca:20:70:60:21:81:be:c0:
a2:67:6c:77:45:e0:73:1e:41:c5:f4:32:fb:e2:ef:2d:c3:c1:
59:a9:2a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:53:12 2025 by rpki-client