Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
File: QXQcBdStftaQ5XHvXtD4dSLaR9c.mft (raw, json)
Hash identifier: mf0Za+hF6lzmfrEDA1p6OfpKvPwNHbm7tSHtdhOS1IM=
Subject key identifier: BA:C8:9E:DD:39:C9:3E:F9:D9:95:90:6C:CE:CD:F5:58:F6:3C:B8:E3
Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Certificate serial: 019629E0275C83C2F123BB977E40F02A66E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
Manifest number: 108F
Signing time: Sat 12 Apr 2025 12:01:17 +0000
Manifest this update: Sat 12 Apr 2025 12:01:17 +0000
Manifest next update: Sun 13 Apr 2025 12:01:17 +0000
Files and hashes: 1: QXQcBdStftaQ5XHvXtD4dSLaR9c.crl (hash: hiWQH5rqbpy6BvBSZNshPoHdrwUatwfr3YWDxy0N9wA=)
2: zKB5P57_JFOmPOkzrUulhGBC8DI.roa (hash: h7EFcyZ6LShlPLoYWIs86uc36W4TF89jakB1BT9rojo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:e0:27:5c:83:c2:f1:23:bb:97:7e:40:f0:2a:66:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Validity
Not Before: Apr 12 12:01:17 2025 GMT
Not After : Apr 13 12:01:17 2025 GMT
Subject: CN=bac89edd39c93ef9d995906ccecdf558f63cb8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0f:c4:e5:1b:e4:40:4f:9e:d8:c7:0c:22:8a:
71:df:69:ef:1d:18:d9:52:a0:98:3c:ab:1b:cd:62:
12:80:45:14:d7:46:39:d8:ae:9e:66:56:0c:2c:59:
90:04:f4:23:d4:f8:42:9f:2a:84:d6:05:39:7d:74:
ff:47:71:bb:ed:4a:1a:9f:25:f0:48:b9:e9:03:2f:
89:28:87:71:fb:b7:67:cd:ca:53:2f:e1:3c:13:d8:
d0:51:5e:ef:95:e7:df:9c:65:29:34:b4:d3:bb:61:
1e:fc:0f:63:b3:7e:4f:d0:2a:a7:a3:a0:61:ce:bd:
ea:ff:89:27:14:66:20:0a:80:f6:66:cb:7f:3f:b9:
fc:9a:37:60:c6:fe:fb:a2:81:17:8b:47:82:fe:a0:
b9:db:39:29:1d:37:ee:59:62:86:e9:60:2b:a7:ff:
38:ce:eb:17:e3:77:b9:4e:9f:16:da:f9:ff:46:2e:
f2:65:0e:de:9b:d5:b1:a9:e2:66:03:c2:4c:89:b5:
ed:b6:b2:05:45:64:17:c3:ab:c9:6a:c0:02:3f:c2:
33:af:16:18:15:39:10:c0:57:2a:9a:bb:35:b0:75:
0c:d9:dc:fb:5f:75:c2:60:f6:69:9d:9c:40:c5:31:
2d:23:b0:c3:36:8d:f8:cc:75:ee:32:3d:72:1d:59:
7c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C8:9E:DD:39:C9:3E:F9:D9:95:90:6C:CE:CD:F5:58:F6:3C:B8:E3
X509v3 Authority Key Identifier:
keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f6:81:0e:a6:dd:2b:64:1a:28:94:d5:a3:4c:e5:78:1f:de:
08:36:3b:b5:da:ca:31:a2:89:50:bb:db:88:dc:d6:6c:40:74:
fb:67:0a:0f:ea:35:74:55:b2:91:ac:e5:2a:f0:5d:b9:50:bd:
f5:74:5b:2d:ee:fc:95:30:75:08:3b:3f:d6:6a:d9:99:62:2e:
cb:61:87:57:dd:46:63:f3:ec:6b:ba:ca:ef:53:1f:d3:cd:f8:
7e:68:be:f4:95:7f:fc:fa:b1:65:12:bd:e2:9e:c1:9f:36:76:
93:67:f0:40:2f:9c:3b:ab:7e:c8:2c:57:f6:92:e5:c6:c9:e7:
9b:23:89:e2:22:82:14:2e:dd:2f:23:2f:55:67:69:f8:16:c9:
cb:b2:47:b5:8d:5d:d2:cb:54:48:78:83:38:fb:21:c2:74:b0:
92:6b:a6:9a:6b:df:3c:80:82:4b:6c:08:23:53:64:2b:58:0c:
61:9e:bd:7f:78:33:2f:0e:59:28:22:8c:86:7b:1f:d2:54:d0:
1d:b6:a6:54:17:af:bd:fc:6b:e3:b8:f9:01:3e:75:13:61:e5:
89:c9:87:06:17:df:8b:fe:0c:75:b0:54:2b:bb:88:1c:a4:44:
ad:96:27:1e:a7:d9:24:db:a9:f6:55:5d:cb:e6:e8:56:16:36:
bd:0a:63:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:01:17 2025 by rpki-client