Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft
File: QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft (raw, json)
Hash identifier: UDUVY12kejJwQ1ltQIJoCrRAX70ZheJmrhd3VdJkaog=
Subject key identifier: 5B:48:E9:7C:1F:DD:97:6F:DE:42:ED:FE:94:EC:EA:FE:65:C3:64:42
Authority key identifier: 42:00:EB:2F:8F:D0:13:8C:43:77:F5:40:00:6C:FC:8B:76:5C:4A:76
Certificate issuer: /CN=4200eb2f8fd0138c4377f540006cfc8b765c4a76
Certificate serial: 01964B901ECA8614B1764CB8317E9A8440F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft
Manifest number: 0AF8
Signing time: Sat 19 Apr 2025 01:00:58 +0000
Manifest this update: Sat 19 Apr 2025 01:00:58 +0000
Manifest next update: Sun 20 Apr 2025 01:00:58 +0000
Files and hashes: 1: Pi86dWn6x9Vtc8GH3REzDrMrSX0.roa (hash: geFyDSt8c1EYU/IR6IGQVBM3q8GhN/Mt5BfwBL1upLs=)
2: QgDrL4_QE4xDd_VAAGz8i3ZcSnY.crl (hash: 1XriINE8fBxeO5kWUhagukK7ltaZZWAbKcr45S2OGPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:90:1e:ca:86:14:b1:76:4c:b8:31:7e:9a:84:40:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4200eb2f8fd0138c4377f540006cfc8b765c4a76
Validity
Not Before: Apr 19 01:00:58 2025 GMT
Not After : Apr 20 01:00:58 2025 GMT
Subject: CN=5b48e97c1fdd976fde42edfe94eceafe65c36442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:da:28:4c:28:8b:bc:0f:9b:67:18:96:9d:38:
6a:13:24:f3:a8:d0:f6:c3:6f:26:11:d4:fa:d6:aa:
ae:ca:1f:52:c2:95:70:8d:7a:8a:2b:2e:f9:10:62:
2c:e9:8a:54:57:2b:88:08:68:61:d4:fc:d7:aa:ba:
ac:a0:c3:90:a6:46:15:a2:0d:d7:9a:41:18:16:03:
1d:68:67:83:68:d1:d0:3c:25:e7:c1:7c:5e:cd:e5:
53:dc:35:46:d5:2f:52:3b:c4:15:0c:83:c1:69:bd:
78:72:b6:bc:68:36:d4:a7:39:77:18:a1:09:39:91:
1c:3e:70:52:4b:1c:52:ba:95:98:1e:bf:e2:70:30:
32:d8:af:51:a2:38:44:48:b1:30:61:36:9e:cf:fe:
65:b7:61:b5:d2:26:6c:76:25:ff:9d:be:a7:4b:3b:
59:c6:a8:2f:c1:30:ce:1e:4e:92:bf:a1:96:dc:83:
27:82:fb:65:ee:a5:5b:6f:5f:ad:8b:e9:90:94:dd:
df:1d:3a:70:a6:c9:39:ad:38:ea:2e:58:23:30:67:
f1:1e:0e:49:93:71:10:12:f7:1b:aa:de:6e:a8:1f:
1c:ef:1b:9f:a6:37:51:39:f6:57:fd:67:02:d4:d2:
5f:13:60:e8:25:2a:a9:a8:64:05:66:7d:71:34:1e:
7d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:48:E9:7C:1F:DD:97:6F:DE:42:ED:FE:94:EC:EA:FE:65:C3:64:42
X509v3 Authority Key Identifier:
keyid:42:00:EB:2F:8F:D0:13:8C:43:77:F5:40:00:6C:FC:8B:76:5C:4A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:6a:3b:b7:d5:1e:dc:8e:72:5f:fe:65:47:ac:96:1a:5e:75:
e4:93:09:41:05:cb:7e:8d:44:dd:46:0f:a1:25:d0:e0:14:27:
4f:f7:de:8a:e1:02:56:db:6a:64:f4:41:fd:22:1c:71:ee:6f:
4a:5e:7a:b2:0a:2e:53:73:97:81:8d:8c:a7:e7:cc:c7:b8:b1:
a0:aa:f8:63:db:46:d2:5b:d5:71:4a:35:a2:40:a7:10:57:98:
95:4a:aa:1d:1e:7a:96:16:e1:21:2f:fb:1e:17:80:68:46:16:
b0:ec:98:8b:bd:6a:78:1f:e0:8a:92:13:8b:76:9b:16:c2:4f:
cd:dd:73:ff:9e:d9:96:83:77:51:f9:0e:cc:bb:ee:a6:03:44:
f2:e9:19:7d:26:43:cd:10:5a:f2:e0:d3:20:a8:6e:9e:8d:fa:
bd:35:7a:ca:37:fa:f5:14:31:ec:74:5b:ce:07:98:41:97:0d:
2b:21:4d:e0:8b:c6:6a:79:9e:fd:c0:a4:31:44:86:a7:9f:4b:
77:4c:02:de:ab:77:3a:33:6c:3c:a8:2e:d0:a8:75:d9:ac:8c:
b4:60:7c:40:69:74:e8:d4:f8:be:07:b5:44:9a:b8:5c:ff:71:
c4:38:21:3e:7c:ae:0b:fe:be:1f:8f:0c:5d:2d:b5:4a:3a:78:
59:72:e7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 09:47:11 2025 by rpki-client