Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
File: QmstdED7eIRM8BNexRgrP294OoY.mft (raw, json)
Hash identifier: DBzNZ+bduUU/3DZmSYSO6vqPgnNpNVeglvKn59hqWdg=
Subject key identifier: 4A:1F:EA:84:B0:C0:B6:59:A2:DA:F6:1A:A7:19:5B:3A:68:A5:46:D0
Authority key identifier: 42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
Certificate issuer: /CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Certificate serial: 0196409E4C37C6308F65F9EA1BF6173FD068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
Manifest number: 06B8
Signing time: Wed 16 Apr 2025 22:00:37 +0000
Manifest this update: Wed 16 Apr 2025 22:00:37 +0000
Manifest next update: Thu 17 Apr 2025 22:00:37 +0000
Files and hashes: 1: QmstdED7eIRM8BNexRgrP294OoY.crl (hash: PzPZDYGmMrMebFkYdM8n+JS2oNyf8dlLzRNcXMtvCg0=)
2: z1aZ7-bmH6l6J7mLCP5moL6leU0.roa (hash: yKL3bhklKR6G8Kxo3AuOxdxqmVoJuUJSKeF/iJ4ql/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:9e:4c:37:c6:30:8f:65:f9:ea:1b:f6:17:3f:d0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Validity
Not Before: Apr 16 22:00:37 2025 GMT
Not After : Apr 17 22:00:37 2025 GMT
Subject: CN=4a1fea84b0c0b659a2daf61aa7195b3a68a546d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:57:fd:47:f7:b0:26:9e:58:15:e9:ef:ec:89:
22:e4:1e:bd:b5:e8:8f:0a:fb:ee:65:f8:f5:c0:2c:
87:8e:26:9e:58:f9:00:e6:b1:92:f6:26:6c:74:7f:
2e:ba:50:73:78:08:d4:b0:7f:ce:8d:e1:74:f2:39:
da:d0:73:d9:45:b7:99:20:34:b5:95:4b:e7:f5:63:
2e:79:03:16:ae:28:81:22:c5:72:24:f5:38:27:7e:
a8:82:0a:7b:52:63:df:ad:4b:ed:53:79:00:68:51:
d8:86:02:92:46:07:06:18:c1:ef:14:34:b9:25:d5:
33:3d:b9:45:6a:f6:ac:3b:bf:03:00:60:97:d2:4e:
5d:62:ff:eb:eb:87:68:4c:54:1b:0d:9d:41:37:fc:
43:b7:e5:c3:59:70:ef:15:b7:95:d5:f2:eb:83:95:
f9:bb:d0:1d:20:76:f0:72:dd:6a:84:cb:41:a3:e7:
23:12:76:1a:6a:30:f7:3e:2a:32:98:c8:0a:9b:c5:
b2:8c:88:7d:08:c2:a7:7f:bf:3f:00:e0:c0:38:3e:
2f:db:9a:58:1a:69:ee:39:ac:d0:a9:ae:9b:56:90:
10:4c:93:73:35:84:c0:d3:c3:68:da:a6:99:cc:23:
ff:5d:5c:58:7b:98:ce:02:a1:96:9e:c9:d9:8a:64:
82:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1F:EA:84:B0:C0:B6:59:A2:DA:F6:1A:A7:19:5B:3A:68:A5:46:D0
X509v3 Authority Key Identifier:
keyid:42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:49:1e:55:06:c7:cd:de:34:b5:7d:19:db:c1:94:18:7e:fc:
af:51:1e:7e:45:e3:0c:1b:18:7e:23:c7:5e:49:b9:89:a8:78:
54:4d:2b:f9:3b:da:c1:fc:0d:e6:1c:14:98:a8:34:8a:9b:98:
63:eb:ad:f3:25:88:59:c7:99:6f:e5:0b:a2:87:27:8d:62:5e:
2c:c7:12:82:e4:48:c7:6a:22:fa:4a:34:6d:b9:11:70:b1:b4:
bb:e9:d6:5e:00:b1:8a:e9:ea:e9:c5:4f:e4:92:97:37:9b:8a:
62:9c:c7:a9:5b:7f:62:cc:a6:e0:e1:70:2b:da:4c:7d:57:49:
c9:d7:fd:f6:0c:e2:0a:1f:e8:32:6a:89:21:b4:50:7f:a4:93:
eb:0e:8b:0b:60:85:65:a8:8b:9e:87:56:0f:e2:8c:cf:57:aa:
f8:61:7f:79:ad:57:24:0a:8c:c7:f1:18:90:f2:54:d9:8a:36:
76:d5:41:d4:da:31:8c:7f:c2:d3:0a:d9:7a:60:ac:22:e1:d5:
35:1c:f3:24:a1:48:ea:83:0b:69:ee:c6:b9:d4:02:4a:6c:94:
cb:04:88:58:b2:94:bb:87:4a:9f:e7:ac:15:3b:7b:5d:41:e2:
5b:02:99:db:41:ad:3e:ab:ad:45:7a:d2:d8:45:fb:d8:0b:48:
d2:4e:59:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:29:09 2025 by rpki-client