Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
File: qmeVicHEiJfQmy1P7XpmBEqHbqM.mft (raw, json)
Hash identifier: U8hY/sMJhD3qq8h9OvPm7iCHFUg9GdMM1rmf+xZQUhI=
Subject key identifier: AA:0E:8D:04:7C:53:70:09:D6:E8:F6:83:B2:F6:0D:0F:92:BB:CB:B2
Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
Certificate issuer: /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Certificate serial: 019615465CD4977428EF95B7BDF465B78470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
Manifest number: 149F
Signing time: Tue 08 Apr 2025 12:00:54 +0000
Manifest this update: Tue 08 Apr 2025 12:00:54 +0000
Manifest next update: Wed 09 Apr 2025 12:00:54 +0000
Files and hashes: 1: 6ePgS-H7Yzuq3toYao1SpcCwfpw.roa (hash: 6wwpW2bNKeFKmlaR35jx40rgyoKDaJsTG+ac1jtGsgs=)
2: h7iUVsathfWiZn6MUEREGc5Lrns.roa (hash: 6VmzPFIIIU0V6MlQJOV1H1bykzKrpknx8IQ1i3Vq0eM=)
3: qmeVicHEiJfQmy1P7XpmBEqHbqM.crl (hash: 90bvEysTOMPMVNSHEO1KzVSSvWMMfxh1ZatcRDC7R0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:46:5c:d4:97:74:28:ef:95:b7:bd:f4:65:b7:84:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Validity
Not Before: Apr 8 12:00:54 2025 GMT
Not After : Apr 9 12:00:54 2025 GMT
Subject: CN=aa0e8d047c537009d6e8f683b2f60d0f92bbcbb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d3:f6:52:90:71:07:9e:98:6b:3a:fb:d1:dc:
aa:61:50:a8:98:f2:57:c0:e8:94:b1:84:c1:9b:cd:
09:14:84:c1:a2:18:e2:a7:7f:ee:a9:8a:02:1b:55:
6f:72:de:60:a6:d7:74:64:28:8f:04:01:02:59:2a:
69:85:07:c1:fa:2f:bc:d2:15:5f:1a:6a:3a:b7:7c:
ef:08:dd:ad:bf:f8:78:3a:52:7a:77:e3:ea:cc:7c:
29:6b:68:ff:46:5b:4e:dd:f9:ae:fd:38:99:bb:20:
a8:14:b3:41:03:e2:b0:c2:aa:04:01:b0:28:e7:91:
0b:d0:39:75:57:33:91:11:e0:09:b3:04:cf:0e:ff:
8f:4d:35:60:a1:66:5d:16:9a:53:13:3c:6f:c0:9f:
61:28:60:8c:05:97:f0:38:6d:65:25:ae:df:06:0d:
a1:6c:cf:ad:ed:68:d6:a7:63:57:6a:7a:5d:69:73:
ad:7d:7b:20:70:f0:d1:0c:0a:6d:2f:50:1a:57:c7:
98:a7:1e:c2:10:5e:ed:89:d3:f6:b7:31:70:35:63:
d5:ad:1b:be:73:60:58:7a:e8:27:54:00:97:16:bd:
f0:da:15:7f:32:ec:c7:95:b5:cb:3f:44:f4:bb:d3:
bd:84:83:c3:7d:f9:4d:9e:86:b5:a3:4d:d1:c9:52:
45:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0E:8D:04:7C:53:70:09:D6:E8:F6:83:B2:F6:0D:0F:92:BB:CB:B2
X509v3 Authority Key Identifier:
keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:98:a3:cc:39:62:47:bc:2c:62:19:98:94:39:fc:27:20:3f:
c4:43:df:19:b5:ce:1e:b0:13:a8:12:38:a4:f7:7e:53:ee:5d:
8b:df:5e:26:26:65:73:10:0c:a2:8f:40:5a:84:a2:ca:ec:e0:
42:4b:22:bf:0a:99:7f:e1:cf:65:ef:ad:9d:3b:68:4f:20:68:
18:c9:5e:e3:b6:b0:87:8d:2c:dd:07:2c:07:29:e0:b2:14:b6:
12:29:40:26:50:8e:f3:bd:90:68:5b:85:7a:bd:bd:63:69:7a:
7e:5f:68:fa:85:ed:e2:ad:e4:be:78:6d:8f:6c:e1:af:fb:89:
be:d0:bc:c2:fe:0a:29:42:58:83:22:37:80:c1:d3:fc:03:65:
d7:d5:a9:a5:53:eb:ea:80:90:03:99:58:dd:0b:7e:f3:f8:cc:
a8:fc:02:5f:ac:41:cf:f9:6c:6a:9c:07:4c:25:22:8f:ea:c6:
1d:06:48:27:d5:38:2b:63:f9:49:77:87:93:90:5a:f5:13:0f:
32:55:8c:df:13:f7:f6:3e:80:fa:b1:78:ed:f2:fb:48:e0:7f:
a2:5e:5c:f8:fa:ba:0c:f3:96:90:98:7a:61:d6:46:26:64:70:
28:ef:97:31:7b:87:17:76:97:36:5c:8e:ac:80:02:52:28:99:
de:d7:ac:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:02:14 2025 by rpki-client