Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
File: 1-qe1orkHCRPTSTKBX-tH42Mf318.mft (raw, json)
Hash identifier: SVyqxha1zobCe4HYNQN1KSSSonDMjd8JFgY4WNUBRNI=
Subject key identifier: C8:CC:8C:C3:DA:36:3A:DF:BC:E3:14:90:F0:56:30:CD:03:08:33:2E
Authority key identifier: FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
Certificate issuer: /CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Certificate serial: 019640675F7962AFED944E41D965A255E6AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
Manifest number: 12CE
Signing time: Wed 16 Apr 2025 21:00:38 +0000
Manifest this update: Wed 16 Apr 2025 21:00:38 +0000
Manifest next update: Thu 17 Apr 2025 21:00:38 +0000
Files and hashes: 1: 1-qe1orkHCRPTSTKBX-tH42Mf318.crl (hash: Ys+QYH5XuHnwnOQOAocK3GrTePBSG2P2LgA8Yq6zUoI=)
2: gHlRquCMx6iwfFhK1AbziJf-SOA.roa (hash: vGvXkm75uZ6w5eWBxSl4fiUVkztcBJ6xWRWL2h8kjfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:67:5f:79:62:af:ed:94:4e:41:d9:65:a2:55:e6:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Validity
Not Before: Apr 16 21:00:38 2025 GMT
Not After : Apr 17 21:00:38 2025 GMT
Subject: CN=c8cc8cc3da363adfbce31490f05630cd0308332e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8a:76:c4:05:e7:16:99:99:57:00:84:8e:36:
31:89:3c:92:af:92:5b:4c:d1:4f:4e:e2:f8:38:84:
3e:9a:44:7d:f8:6a:93:be:13:5d:7a:ea:d1:f8:aa:
4a:c4:b6:3f:c7:9b:f3:c9:ac:f3:7b:44:91:25:2a:
dc:57:53:df:09:71:a2:4b:45:68:3d:ee:04:e4:fe:
b9:df:92:e8:0a:ac:2d:44:fb:ae:39:92:9f:0a:1a:
7b:46:81:93:64:69:fc:ee:e9:72:c5:1f:95:73:03:
a6:ff:7d:19:bf:b6:3d:f5:db:e2:8c:65:2e:09:f6:
cc:81:63:b4:ec:7b:45:30:49:55:b8:85:db:78:e5:
10:b9:62:ae:d6:a5:3d:30:75:2d:c5:24:a4:56:84:
69:ef:4c:8e:7a:91:df:8c:13:69:6e:87:ba:85:28:
bd:38:06:89:e2:75:46:59:82:97:f5:09:3f:73:7b:
e5:99:61:b1:66:f6:29:78:cd:7e:50:a9:60:28:59:
fd:00:e8:e7:70:11:fb:29:62:92:98:b2:3d:22:c4:
ab:62:13:34:3a:98:3b:85:61:a5:66:bf:0d:29:48:
ee:52:dd:d0:60:43:20:d7:ce:4b:94:a1:26:56:46:
67:3e:bc:7b:91:95:9e:41:e3:87:3b:ba:39:70:62:
d5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CC:8C:C3:DA:36:3A:DF:BC:E3:14:90:F0:56:30:CD:03:08:33:2E
X509v3 Authority Key Identifier:
keyid:FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:7f:65:b8:1b:f0:37:41:cd:68:69:5f:67:02:d5:bf:8d:64:
f5:83:88:b6:b7:3b:6b:c8:55:89:88:16:70:b1:bd:d2:ba:d6:
81:35:ed:cc:13:8b:2b:86:d7:75:9d:a2:e6:02:e6:31:5c:64:
c1:80:1f:fb:b4:ee:00:d6:99:77:5f:af:49:8d:96:8b:ab:27:
bd:81:b5:ba:ef:fd:9d:ed:72:c7:2e:24:9e:13:88:35:13:c0:
4b:4d:b3:67:56:b1:bf:45:9f:ee:8d:72:b2:24:8c:7f:87:25:
ef:1b:01:63:57:92:91:e2:60:ff:37:04:05:de:d3:70:21:c1:
39:56:a3:b5:90:81:0c:e3:62:e9:35:5b:ca:42:fe:ef:e7:f2:
fd:1a:d1:e1:cd:8e:7a:09:36:bb:1a:0c:6e:f6:da:4b:74:44:
7d:fd:af:86:4e:79:b1:bb:fb:62:65:d7:40:35:ab:66:4b:23:
c4:2e:a9:b1:61:f0:11:89:64:24:43:6b:33:60:cd:da:26:d8:
24:98:bf:21:c6:3c:b2:c7:21:4e:ac:20:9d:6c:2a:32:c1:f7:
ff:37:37:5b:00:af:bd:1f:b9:c8:cb:55:7a:b7:0a:3e:00:11:
2a:d2:e6:1a:20:86:2d:d8:0d:e8:57:5b:1c:ea:95:a3:25:50:
e4:1f:a2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:24:37 2025 by rpki-client