Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
File: QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft (raw, json)
Hash identifier: Ai/+55d5ou6+wiN/YpWsc08+auMdkTi2sO9ORRDDjbs=
Subject key identifier: 76:F2:34:5C:E4:E5:D7:65:53:A6:F2:1F:3C:77:38:F8:5F:5B:49:35
Authority key identifier: 41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
Certificate issuer: /CN=4100e4b4a97882c1798c470e3abd805e325dd595
Certificate serial: 01963F8BA4B85059BB7B2051D5A0D689E868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
Manifest number: 09FF
Signing time: Wed 16 Apr 2025 17:00:38 +0000
Manifest this update: Wed 16 Apr 2025 17:00:38 +0000
Manifest next update: Thu 17 Apr 2025 17:00:38 +0000
Files and hashes: 1: QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl (hash: qme/8oZtgJptqslpjxj9adONi56c7mXfMMc1inPWOy8=)
2: dKp1x4AjnPUcfIO_WrYQasCbX4c.roa (hash: BBLyfF5z+X1cauuxHi1cH0OZMMJW5dshnRCgSvteyno=)
3: uBNZ4MqXESz6xGHzQdhbKOD3CeA.roa (hash: Xvf1KJxZcyYU4khA0juJ7NXfjXv9HKqoCzWln+BqLrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:8b:a4:b8:50:59:bb:7b:20:51:d5:a0:d6:89:e8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4100e4b4a97882c1798c470e3abd805e325dd595
Validity
Not Before: Apr 16 17:00:38 2025 GMT
Not After : Apr 17 17:00:38 2025 GMT
Subject: CN=76f2345ce4e5d76553a6f21f3c7738f85f5b4935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2e:76:9d:ef:ea:e5:de:c1:f5:2f:93:83:7b:
7e:88:26:e7:e5:75:96:99:1e:23:5c:ce:3d:6d:b1:
db:5c:e5:e9:c0:12:3c:32:e0:f8:19:b0:5b:f0:31:
bc:c9:d2:b8:58:3e:66:4b:aa:37:ab:68:48:e6:83:
3a:34:93:2f:29:58:74:ab:6f:df:d1:ac:9d:98:5f:
3c:b8:a4:25:15:49:5c:c4:96:a9:53:e7:64:70:aa:
9b:9f:72:65:b0:0a:12:b0:5f:21:96:a5:00:32:f9:
4f:cd:61:03:0c:6e:66:12:99:18:a4:b1:85:c9:56:
32:17:7e:e2:13:7a:1a:3e:96:e6:82:d8:cd:ee:ef:
da:e6:81:95:cb:d2:d5:ce:c7:a4:fa:43:fe:25:77:
f7:19:20:4e:e7:4e:1b:72:43:59:77:f3:2f:62:93:
fc:6d:c5:55:ab:7f:40:d9:ca:cb:53:86:e4:e7:1e:
94:18:99:0b:9c:cf:98:64:36:47:b2:ee:4e:27:f4:
3a:65:58:d5:8a:0b:e3:99:9d:75:ef:18:50:1c:01:
bf:18:d4:3f:d8:2d:f8:3b:4b:bd:39:1e:05:b0:22:
64:bc:a9:63:0d:ca:81:5b:fb:d1:73:0c:eb:6f:45:
b0:96:cf:0d:ed:9a:cc:e5:40:f1:ad:a2:1f:4f:7a:
4a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F2:34:5C:E4:E5:D7:65:53:A6:F2:1F:3C:77:38:F8:5F:5B:49:35
X509v3 Authority Key Identifier:
keyid:41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e0:b0:69:57:61:61:36:28:f9:03:65:c2:99:86:21:b9:c9:
14:9e:b0:ad:f1:c7:ef:75:63:e0:83:e4:74:c2:83:39:35:14:
48:7c:93:57:d1:f6:38:86:9c:0d:44:56:fd:b1:65:a1:12:a6:
c7:08:9e:ff:2b:69:55:e0:d7:6e:f4:dc:8d:1f:83:89:38:f6:
94:29:ea:ae:99:0b:e6:3e:9f:08:66:ba:0f:f6:5e:7b:3f:48:
09:d1:58:5f:8c:c7:9d:e6:e6:65:3e:9c:f7:b5:1d:0f:63:b1:
aa:96:ee:69:ac:7a:3f:2b:6b:81:db:81:98:37:bf:21:f0:6a:
85:17:10:1d:37:a2:ff:78:3a:13:e7:e1:06:c1:89:97:53:ad:
b3:f7:9f:a3:cd:ae:67:cc:30:61:23:90:68:ec:83:32:7b:76:
61:92:fe:4d:e6:10:7f:60:30:0d:91:72:af:92:e8:76:a5:d6:
28:3e:44:25:82:d4:18:f0:5a:28:90:a6:5d:02:14:51:58:00:
f2:81:51:e4:5c:57:d7:db:63:f5:9d:dc:24:8d:31:2b:ae:78:
66:8b:45:67:24:52:68:30:92:fb:18:18:1b:f9:23:8c:6d:7d:
02:85:fd:6c:0e:e7:6b:c4:c9:87:df:cb:d1:ab:2a:cf:a6:8a:
ba:b0:66:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:50:00 2025 by rpki-client