Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
File: QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft (raw, json)
Hash identifier: pvQPxgh8/3L0m1j/ynTkbfAiT/jAZnM4vucx4T5Ykk8=
Subject key identifier: 5B:63:D0:05:77:67:9E:46:E8:FE:79:0E:23:89:9C:55:C4:17:20:D0
Authority key identifier: 42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
Certificate issuer: /CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Certificate serial: 019629E029C9A169110A631EEA4F3984ACB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
Manifest number: 127C
Signing time: Sat 12 Apr 2025 12:01:18 +0000
Manifest this update: Sat 12 Apr 2025 12:01:18 +0000
Manifest next update: Sun 13 Apr 2025 12:01:18 +0000
Files and hashes: 1: PHhq7bUnGcZX4y_ykkmnYZLunMM.roa (hash: LoLkLVHGuU31zRjTVmAdVTtSVPzxLCqr19G9NEBPRqg=)
2: QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl (hash: x92b+wgBAKUI5QhJqY8PGLsjXoDrTi9gXIWpeKidLyk=)
3: ZHuGa1b5EE3BXDt8zUZ6H71dsTI.roa (hash: c5Q65E0/2d2vtEwjuw2BN9yFwucni9qkVj/W8ITRCHA=)
4: mbmOrU1gpeptZI3HpUCwe4-8PxQ.roa (hash: U1SXSUwkwzX7zwHV3CIwtefKowszejuGaOw7kehwc7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:e0:29:c9:a1:69:11:0a:63:1e:ea:4f:39:84:ac:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Validity
Not Before: Apr 12 12:01:18 2025 GMT
Not After : Apr 13 12:01:18 2025 GMT
Subject: CN=5b63d00577679e46e8fe790e23899c55c41720d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b6:c8:07:64:73:93:1c:12:05:dd:a9:26:6b:
7c:3a:2d:9e:ff:4c:b7:98:5d:8f:4f:06:ac:8f:02:
f1:9c:96:b3:59:c0:98:d4:f9:7b:1e:39:78:b3:f1:
71:0e:64:d3:93:5a:c3:2b:21:2a:52:f9:2b:8d:cc:
9e:32:07:70:f0:ff:6a:9c:9f:d0:b9:8b:d9:81:06:
95:0a:e1:6d:7a:e4:ed:31:82:bb:cc:0b:2c:44:ae:
20:32:95:f1:36:58:f7:42:a0:58:c4:fc:5e:40:27:
17:e6:3a:58:ad:3b:52:df:7c:b0:bc:01:3a:38:f5:
16:fb:08:56:64:fa:1c:a6:3b:8c:15:3b:16:1d:15:
dc:81:ab:de:c9:34:14:29:75:e3:e4:52:d5:78:0c:
55:74:36:04:d7:a2:25:fa:ef:fa:a0:f5:2a:8d:df:
85:9e:c6:74:25:ae:56:64:4d:d1:a8:1d:86:01:19:
37:97:16:07:bb:9b:88:5f:94:5a:26:f7:c7:88:a3:
24:52:84:a8:f5:59:75:78:a3:d0:fb:1c:d5:d6:99:
83:e6:fb:c8:62:48:04:f2:77:84:f4:18:96:cc:78:
63:93:04:41:05:43:5d:f1:3f:67:ee:76:c9:69:af:
83:54:dd:eb:73:cd:cc:f6:3f:f6:61:6f:63:82:97:
0c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:63:D0:05:77:67:9E:46:E8:FE:79:0E:23:89:9C:55:C4:17:20:D0
X509v3 Authority Key Identifier:
keyid:42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:1d:8a:6e:12:86:4c:ba:ed:9b:97:01:e9:5a:d1:56:b4:64:
a7:9c:48:67:36:55:0d:18:75:96:7c:bf:0d:49:f5:f2:10:63:
c5:78:23:86:6e:bd:4c:96:9f:84:a7:d6:a4:f4:09:bd:c8:77:
38:44:bd:f3:07:a9:02:be:68:9d:94:99:8d:ce:79:fb:79:20:
e4:e8:9d:25:4c:74:32:43:76:c7:02:7f:84:a3:57:46:1d:4d:
75:a0:f7:64:32:5f:f1:7a:7c:f5:cf:cc:c4:f3:09:3a:84:90:
ff:e8:7f:0c:3c:0b:4c:d7:70:6b:2e:c7:a8:a1:5d:e2:25:a9:
d3:a3:c4:db:56:5e:87:45:2b:91:ab:a8:eb:2d:13:df:1b:ba:
12:71:9d:6e:60:27:61:9e:b5:01:14:b9:19:e0:bf:da:43:0b:
d6:89:b4:25:9a:ae:12:31:43:fd:6b:24:ae:a6:1d:44:44:87:
b5:5f:99:28:d2:a8:aa:0c:c0:ee:47:24:4b:96:ce:2b:fe:ac:
b9:14:b7:9d:8b:cb:89:16:6f:58:48:57:3f:25:01:9c:fd:c4:
f4:d7:51:da:e3:3d:02:95:5a:a8:49:b5:59:f2:4e:1a:f4:83:
e0:c5:51:89:29:e1:9c:1f:55:de:cf:b6:a1:31:f7:3f:e5:df:
b9:71:2a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:48:22 2025 by rpki-client