Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
File: QHznj0rDupAqDDjcAaDF8hJlGbA.mft (raw, json)
Hash identifier: 8yQp3LTQctu6rk5VBbVElD0Gw0RAZ0o5H/jZu4cA5F0=
Subject key identifier: DF:82:6F:64:F2:D0:29:DF:7C:89:B6:FE:89:C5:2A:A2:24:C8:65:17
Authority key identifier: 40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
Certificate issuer: /CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Certificate serial: 01964D4715FE0E3DAC41338068678434700F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
Manifest number: 0968
Signing time: Sat 19 Apr 2025 09:00:26 +0000
Manifest this update: Sat 19 Apr 2025 09:00:26 +0000
Manifest next update: Sun 20 Apr 2025 09:00:26 +0000
Files and hashes: 1: QHznj0rDupAqDDjcAaDF8hJlGbA.crl (hash: Y90AYgOCFph5d9qc8rrsX0V6gjDRps4FWi/bncNEi/w=)
2: UJVJt5_Arh5oP7MnvKcbCGODOc4.roa (hash: cSJe9mPxkDM+ny/+GoKSWRH8dkU4qbTNsxlZ1deFGeo=)
3: epRoE1oSS28-kMoVUvbovqDaftI.roa (hash: vf7QEJn0ywPdqhUagZXAfAdq0fp3vefGorgZKG9IKIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:47:15:fe:0e:3d:ac:41:33:80:68:67:84:34:70:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Validity
Not Before: Apr 19 09:00:26 2025 GMT
Not After : Apr 20 09:00:26 2025 GMT
Subject: CN=df826f64f2d029df7c89b6fe89c52aa224c86517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:59:96:7e:18:ed:c1:a7:b0:66:5c:4f:2f:11:
c1:bb:b1:44:5a:d8:21:01:85:96:12:6d:1e:e4:a1:
a9:b4:94:24:d5:47:13:27:2d:1d:80:c8:65:ae:47:
97:3d:69:70:bd:48:08:7e:50:72:48:31:9c:06:80:
cb:be:74:6e:6b:ec:ff:ea:b7:0d:49:23:57:57:c4:
75:35:5f:40:05:95:93:55:1e:dd:e3:11:d4:5c:0c:
86:70:60:73:1e:3f:48:4f:8a:37:52:7e:ca:45:36:
1e:d7:6b:b6:a0:d0:ea:a7:ca:8a:4e:08:29:1b:f2:
5a:6b:0c:ec:92:35:48:bd:c8:76:da:c8:a9:b6:78:
71:e8:3c:68:ab:11:71:de:fd:e7:25:90:78:4e:42:
15:a6:f6:a2:41:d6:02:22:97:df:40:9d:31:64:7c:
49:fc:b4:73:79:9b:bf:be:6c:09:a5:c5:1a:12:ba:
f4:d2:03:0d:97:d6:0a:85:aa:da:93:b7:6f:26:fc:
fa:f8:05:cc:91:34:5b:2e:45:24:6b:0c:8d:e5:12:
ab:7c:fd:20:d0:04:5d:2b:bb:fa:dd:c8:db:7b:1b:
68:75:a6:b5:b3:ee:e8:26:50:f7:7f:46:57:dd:80:
ad:34:08:7e:ad:90:dc:17:26:0c:38:2d:75:ab:b4:
c5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:82:6F:64:F2:D0:29:DF:7C:89:B6:FE:89:C5:2A:A2:24:C8:65:17
X509v3 Authority Key Identifier:
keyid:40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:89:97:66:b6:9a:d5:ea:f4:e6:db:f0:f2:80:9e:9b:ce:6e:
40:8f:fa:02:8b:e5:6c:07:67:d4:b7:ca:64:ab:73:d9:a5:89:
52:73:ba:a2:a0:c8:24:8f:20:51:1b:fe:b5:5e:15:9f:08:e9:
09:16:a9:bb:70:f8:f1:5c:a8:7e:16:e5:02:3f:36:a5:cd:36:
d4:63:f7:77:56:cc:be:a8:63:42:ae:dc:b5:8c:7e:28:f9:09:
3e:cb:e9:a8:a3:b8:55:5c:ad:a6:30:cd:5f:72:fe:b7:32:65:
11:a4:8a:34:0a:fd:c9:88:ab:3e:8b:28:8d:98:86:2a:a1:80:
66:3f:08:12:71:88:82:89:18:29:ff:39:e6:83:c8:fc:a3:75:
c5:aa:e4:49:53:81:71:be:55:5f:75:6a:cf:61:e7:09:3a:3d:
cf:ae:8a:2b:b9:d6:73:d2:66:33:fb:7f:ff:3a:1c:a8:46:89:
4d:cd:bb:f6:6e:f3:4d:64:02:98:d0:73:b0:13:9d:0c:77:7d:
02:9f:d7:7f:8c:cf:b3:db:d5:e2:16:17:76:a8:50:d2:f8:bb:
f3:db:6b:82:13:6e:76:48:35:ad:6c:e4:f6:33:14:e3:92:c2:
05:e7:97:83:ac:3a:4f:0a:a0:4c:35:a2:fb:86:fc:d7:bd:c9:
d8:5a:ef:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 13:57:21 2025 by rpki-client