Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
File: qTnMFiHuMBCumOEnvSVKeDP9KCc.mft (raw, json)
Hash identifier: tXfH0pJVP1Vy5h2JrrwqpjYohqgpzI2QdCIh69nFnSY=
Subject key identifier: 5C:37:CD:53:3C:4F:09:BC:6C:2C:9D:53:F6:1E:E2:63:8E:A6:CE:75
Authority key identifier: A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
Certificate issuer: /CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Certificate serial: 01964BFDBA0F6722D3ADFB1C6BE60B8DBA96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
Manifest number: 0E16
Signing time: Sat 19 Apr 2025 03:00:41 +0000
Manifest this update: Sat 19 Apr 2025 03:00:41 +0000
Manifest next update: Sun 20 Apr 2025 03:00:41 +0000
Files and hashes: 1: I8M09wEb8pPy5aE1tmLVBA1QjII.roa (hash: H2KzL98idyYXiGDF46vhI9MdVSfKRRTkQwlTKnfvbNE=)
2: kE5clAT_On1-sKoap2EGHHtO9ks.roa (hash: 2Gqvz4gyypjZzZQdA4iyMYqLbiLT02xiEIZm2TleSrU=)
3: m8QWxGjBijSQKviqiwGPDVQObsM.roa (hash: 0nynt3B6pt+z65wp6r175QdY0trgb8BxBMo+4Klvl7g=)
4: qTnMFiHuMBCumOEnvSVKeDP9KCc.crl (hash: U4zMNgCmm6mM2RyzymfrGl32CIt+AGvc8ZnSKWdD9RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:ba:0f:67:22:d3:ad:fb:1c:6b:e6:0b:8d:ba:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Validity
Not Before: Apr 19 03:00:41 2025 GMT
Not After : Apr 20 03:00:41 2025 GMT
Subject: CN=5c37cd533c4f09bc6c2c9d53f61ee2638ea6ce75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f0:39:83:f7:af:d2:03:2a:c3:66:72:ac:87:
03:c2:7a:ad:b5:05:de:79:47:1c:e1:e0:aa:6d:e6:
d4:10:be:4d:bd:81:0f:7c:55:da:6e:1e:95:ee:4f:
d6:5d:f2:a3:e0:4f:06:7e:4a:56:05:56:ff:4c:ac:
ea:1b:cc:30:61:cf:16:2c:b6:07:1a:b0:ff:d9:b3:
45:f5:d1:55:13:fb:5f:26:ff:b0:85:74:e3:b6:95:
a9:9c:6f:23:9d:c7:60:16:40:51:20:cf:ec:77:13:
ea:b4:a3:46:b0:af:bd:f4:87:e4:c7:98:d0:bc:df:
97:ef:f8:37:13:b6:d5:e5:0d:0c:42:1c:cd:dc:04:
56:80:0d:32:36:dc:9f:6b:0b:14:2e:da:27:ee:7d:
45:39:9f:ca:73:0c:3f:ef:08:e3:ac:d2:d5:f5:4a:
fd:29:6a:aa:7d:ba:04:52:f9:56:12:9a:30:26:3e:
16:9d:5f:9c:05:c9:0e:b2:ab:17:81:da:0d:de:a9:
4e:b9:14:1d:e4:e2:1f:e5:1b:6c:73:9b:e4:44:2c:
47:76:9e:d6:3e:3e:2d:71:30:88:7c:de:87:57:7b:
78:d5:80:a9:09:bc:4b:61:18:d4:15:0f:dc:3b:0d:
f4:fa:8f:42:ed:f0:fb:7b:f9:ce:5d:d6:f0:44:91:
58:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:37:CD:53:3C:4F:09:BC:6C:2C:9D:53:F6:1E:E2:63:8E:A6:CE:75
X509v3 Authority Key Identifier:
keyid:A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:bb:4c:66:51:6a:ec:cf:55:4e:19:2c:53:37:78:32:31:ea:
a8:71:cc:5c:9b:8a:82:62:88:9f:28:a6:b0:50:63:23:df:83:
4e:36:1e:40:8c:e3:f0:a5:8f:99:d0:40:6e:25:9b:fa:0e:2c:
44:f5:48:5b:72:e5:74:63:24:24:c1:85:41:34:4d:b2:87:d0:
be:4f:83:da:3f:aa:b4:06:d3:ff:12:1b:1f:83:b1:54:44:df:
2e:d0:b0:8e:bb:d5:5d:f5:83:3d:cd:c4:d6:7b:5f:51:d4:fd:
fb:97:1d:04:6b:1a:af:f9:83:e4:14:2b:1b:e5:66:9f:1d:43:
97:af:98:4a:4b:62:95:ca:0d:db:33:20:b7:22:e3:a5:00:cb:
0e:fb:07:1e:34:54:c4:f5:32:57:dd:b1:8b:4d:b9:17:2b:3e:
61:39:4d:33:66:fa:6b:18:1c:97:cd:fc:32:c5:20:5e:5d:55:
03:cb:94:40:5c:87:13:3f:1b:8b:7e:c6:6d:79:25:35:45:1e:
16:9d:e5:aa:65:f2:db:dc:bb:0e:78:e5:e1:21:53:63:8d:fa:
cc:a8:3a:4e:96:20:30:5d:34:8e:88:65:9f:e5:00:f2:cd:96:
47:fd:98:ab:f1:46:df:e1:62:29:f0:41:63:0c:84:8c:95:3b:
4d:6a:53:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:19:45 2025 by rpki-client