Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
File: QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft (raw, json)
Hash identifier: XSvv1k0ul6VUMUR6YVGhyGnu4s7joauVP3rVSIG0fYs=
Subject key identifier: 3F:A7:07:A9:7B:BC:9B:FA:7A:98:13:81:A0:64:3E:B0:4A:36:67:34
Authority key identifier: 41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
Certificate issuer: /CN=4100e4b4a97882c1798c470e3abd805e325dd595
Certificate serial: 01958FCF362C9EE34C62AAFCE20755AFC02B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
Manifest number: 09A4
Signing time: Thu 13 Mar 2025 14:01:16 +0000
Manifest this update: Thu 13 Mar 2025 14:01:16 +0000
Manifest next update: Fri 14 Mar 2025 14:01:16 +0000
Files and hashes: 1: QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl (hash: ibmnOy/HvLH79oApA0Mcly0YhGmtuD4jgpA8kyobl7o=)
2: dKp1x4AjnPUcfIO_WrYQasCbX4c.roa (hash: BBLyfF5z+X1cauuxHi1cH0OZMMJW5dshnRCgSvteyno=)
3: uBNZ4MqXESz6xGHzQdhbKOD3CeA.roa (hash: Xvf1KJxZcyYU4khA0juJ7NXfjXv9HKqoCzWln+BqLrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:cf:36:2c:9e:e3:4c:62:aa:fc:e2:07:55:af:c0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4100e4b4a97882c1798c470e3abd805e325dd595
Validity
Not Before: Mar 13 14:01:16 2025 GMT
Not After : Mar 14 14:01:16 2025 GMT
Subject: CN=3fa707a97bbc9bfa7a981381a0643eb04a366734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8a:73:d1:a3:53:b8:60:b0:41:32:92:2d:98:
75:6c:e8:f6:59:65:f3:3c:f8:18:14:99:32:09:70:
95:3b:0d:de:c5:78:8a:1f:5a:b9:f3:c8:73:01:62:
9d:23:83:ad:28:6a:bf:26:ed:5b:52:77:f1:19:80:
bd:f6:bc:e9:e4:fc:bd:c1:9d:ce:7b:d5:39:17:82:
0a:f4:6d:ad:c6:70:5c:ff:12:03:e8:e1:47:b9:d8:
8c:31:81:93:5c:fe:49:8c:a4:7e:dc:0f:ae:7f:6c:
14:07:32:cc:e2:84:50:9d:54:cc:63:dc:52:08:6f:
c2:5c:f5:e8:b5:b9:de:26:84:5d:c4:87:f0:23:02:
4b:a1:24:69:25:68:35:de:6c:41:9e:c6:57:7a:13:
ee:ac:59:3a:b4:e1:d9:13:ef:54:82:74:ce:3d:fb:
5b:7f:98:c7:85:4d:ee:36:23:25:25:10:71:a7:c7:
08:23:c2:89:d4:45:85:d7:c8:46:f8:80:94:20:36:
d5:72:b1:9d:2f:f7:f8:35:58:b8:5e:bd:8e:8e:47:
4f:d9:97:81:5c:4b:f9:e4:63:6a:54:6c:66:22:40:
ba:de:66:ec:33:ab:15:8b:f0:35:4a:42:00:02:80:
c5:76:75:c1:02:9f:4a:8f:f9:14:a6:52:90:1f:bd:
02:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A7:07:A9:7B:BC:9B:FA:7A:98:13:81:A0:64:3E:B0:4A:36:67:34
X509v3 Authority Key Identifier:
keyid:41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:80:ba:91:08:dd:f4:c4:2f:4b:c9:8d:f8:42:99:0d:36:1c:
7b:fd:84:da:94:27:78:6a:54:58:7a:09:6a:04:64:4d:c3:3a:
10:41:64:b3:e0:b0:a0:b0:3a:14:97:79:c6:02:57:25:09:fe:
1d:e5:07:33:c1:fd:9f:e1:8e:b4:d0:a3:36:70:8f:d4:a6:40:
da:f9:b1:04:20:f9:1f:1f:95:5d:c9:29:74:74:4d:4b:a9:c8:
48:c4:19:1b:2c:7c:b2:83:48:0c:81:7a:fc:16:50:29:52:5a:
f3:fc:2c:7c:20:86:78:e4:30:03:fc:46:6c:bf:1e:ff:db:ef:
56:87:6a:5f:6e:ad:ef:02:27:4c:c0:ce:57:f2:0e:be:c7:41:
14:5d:67:d2:cf:ad:8e:62:6a:a2:3d:ee:6d:65:38:5b:cb:3e:
cc:80:b1:b9:ac:aa:bd:7a:c2:c0:6f:5f:44:2a:ad:da:d8:65:
de:30:e6:dc:d4:f9:10:f8:50:d9:83:45:0f:9b:9e:bf:f8:76:
e1:c4:e5:c3:4d:4e:b1:88:af:ee:8f:b7:d5:17:13:cc:84:c5:
88:91:b9:21:b4:a5:b8:a9:56:59:63:64:98:fd:df:53:48:6b:
e8:c2:99:19:dc:4d:d9:34:e4:b5:f3:f7:3b:36:43:ae:66:e1:
75:f9:29:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:59:42 2025 by rpki-client