Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
File: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft (raw, json)
Hash identifier: IRYLe7tQPSE1Os2bRFggNxbhu8BD2kCZczgRKmtGXZQ=
Subject key identifier: 6C:39:65:15:68:F8:48:8B:E1:E0:A8:CF:68:1B:DC:65:2E:40:19:80
Authority key identifier: A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4
Certificate issuer: /CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
Certificate serial: 0196A209514627FCF817CF8B93E6C2ED03B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
Manifest number: 037C
Signing time: Mon 05 May 2025 20:00:41 +0000
Manifest this update: Mon 05 May 2025 20:00:41 +0000
Manifest next update: Tue 06 May 2025 20:00:41 +0000
Files and hashes: 1: 2U9_DlkXgIcp2fqTIjSzc96XjLo.roa (hash: AqnnBs4DF+DHHSE1BOafxKA5wB2i7dk/ZwYwgXHHS/Y=)
2: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl (hash: am3ybRwa+exPo2zpDRCiET7AUI/rLIfPAlxLps4c7hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:09:51:46:27:fc:f8:17:cf:8b:93:e6:c2:ed:03:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
Validity
Not Before: May 5 20:00:41 2025 GMT
Not After : May 6 20:00:41 2025 GMT
Subject: CN=6c39651568f8488be1e0a8cf681bdc652e401980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c3:eb:ce:42:28:ae:7a:10:1f:e7:eb:88:c4:
00:32:5f:fc:4f:b1:01:fa:f1:4e:57:ca:6d:c7:52:
ac:90:c7:93:1b:be:68:30:cf:bd:a3:ee:88:a2:ce:
fc:ad:d2:64:a8:c1:b7:e0:77:6f:e7:26:fe:8b:04:
71:a1:29:70:e5:47:56:b4:1d:18:02:86:6d:dd:6a:
17:da:55:78:81:ef:02:b2:54:ce:98:d8:8e:f1:ad:
e3:04:d2:c6:e7:0d:66:69:76:6f:ae:0b:12:a8:f8:
a8:a1:64:6e:71:42:15:79:d4:c6:75:99:da:bb:b5:
44:f3:e9:69:25:3a:24:04:04:c8:f0:0f:df:10:51:
50:2c:17:e6:a0:d5:ec:69:ed:80:9e:5c:75:86:a0:
05:ff:c0:a5:33:85:a0:7e:6f:8a:ec:ae:ac:b7:46:
dc:13:36:9b:6b:a9:3d:6a:90:67:95:b7:b9:27:cb:
5d:31:75:26:f6:56:13:0b:91:cd:cb:ae:36:e6:3c:
8d:06:a9:60:43:f3:2d:70:9b:73:4e:f1:ca:78:9f:
98:9b:45:21:9e:80:b4:67:81:99:ca:c9:0d:0f:f2:
af:f3:90:8c:a0:d8:e7:27:36:b2:10:f7:8c:20:3d:
da:32:c4:f9:e9:4d:32:e6:18:22:42:e2:7d:8e:be:
de:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:39:65:15:68:F8:48:8B:E1:E0:A8:CF:68:1B:DC:65:2E:40:19:80
X509v3 Authority Key Identifier:
keyid:A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6f:7d:d1:e6:75:78:dd:e5:96:db:95:86:27:0a:82:a5:02:
db:71:da:80:a6:b2:b2:1c:b0:80:9b:8c:1e:5a:e5:5a:21:5c:
07:dc:5d:d8:eb:84:82:7d:44:e7:ff:73:49:be:c3:22:35:2b:
ef:7c:59:cd:a6:31:4f:ef:56:b9:b0:15:df:b3:0b:3b:26:60:
31:79:d6:15:6a:39:e4:8b:90:9f:b4:8c:ac:47:27:04:47:a0:
31:0d:63:37:5c:c9:83:95:c3:11:12:c8:12:62:b1:e0:42:27:
84:ad:33:25:81:d1:6e:63:6a:a4:bd:6e:84:ee:fc:1f:ee:fe:
b7:cf:78:59:1b:93:c0:e7:e6:40:70:30:32:78:2c:fa:ea:87:
e3:42:77:7a:c8:4f:23:b1:9f:42:41:53:f0:f5:38:05:c5:f3:
16:94:89:81:4f:d3:34:53:ff:65:63:fe:86:ef:67:4c:23:6e:
01:ef:4b:86:ac:34:a3:04:ed:b2:87:a8:ad:75:c9:44:ee:e1:
f0:c2:9c:55:a3:26:4f:b9:1a:8c:ca:8d:dc:3b:a9:e3:59:92:
66:64:79:e4:b2:e4:a7:eb:fe:bb:0f:ab:13:6f:37:61:9e:c0:
d8:25:ed:b8:77:5c:5d:33:1f:d5:d6:0d:93:6f:3c:73:34:3c:
b6:2e:80:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:44:59 2025 by rpki-client