Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
File: mQxLs441zXAyDreRUgxsrTSksnE.mft (raw, json)
Hash identifier: 33nBaCoYpIozFZMpyyasA/FTvTC7fizS38F6JBX8CY4=
Subject key identifier: 1F:B7:CA:ED:FF:0E:E2:20:5D:89:84:C1:A2:86:94:2A:DA:2F:6D:F6
Authority key identifier: 99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71
Certificate issuer: /CN=990c4bb38e35cd70320eb791520c6cad34a4b271
Certificate serial: 01958B4D4BC7EE09EA141379C91F9667980F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
Manifest number: 1129
Signing time: Wed 12 Mar 2025 17:00:53 +0000
Manifest this update: Wed 12 Mar 2025 17:00:53 +0000
Manifest next update: Thu 13 Mar 2025 17:00:53 +0000
Files and hashes: 1: JtxbWq9ormth5LcKwN5vG4Q3apo.roa (hash: lQXeYw4zv4cIzlRUFSI2nS9Q4llqbkuImnCVCQNKPmM=)
2: mQxLs441zXAyDreRUgxsrTSksnE.crl (hash: mvql1O151FQW8rbLesRCAzmoEWS78HGm0gaRIv3xJYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:4b:c7:ee:09:ea:14:13:79:c9:1f:96:67:98:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990c4bb38e35cd70320eb791520c6cad34a4b271
Validity
Not Before: Mar 12 17:00:53 2025 GMT
Not After : Mar 13 17:00:53 2025 GMT
Subject: CN=1fb7caedff0ee2205d8984c1a286942ada2f6df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1e:e1:ef:64:ad:14:d7:a8:40:46:f0:10:f3:
91:e3:91:ce:1b:d0:ac:b2:6b:2b:02:85:a6:dc:b7:
6b:67:16:42:ce:c6:e9:f2:b9:55:f7:83:dd:15:cf:
90:15:75:af:b0:1c:e6:5f:1f:28:95:ce:fa:9b:94:
d8:d4:45:24:d9:fe:ac:11:63:ae:ac:c1:7d:d1:98:
52:17:06:56:59:b9:c6:7d:52:88:21:06:58:02:1a:
ba:fc:a4:f2:97:3a:b6:16:a6:66:c9:d6:3b:7b:17:
05:b3:a8:a5:84:00:37:31:57:de:4e:66:6e:aa:58:
c7:56:96:17:85:f5:0e:d0:dc:dd:72:e5:d1:0e:86:
9e:fd:66:57:5b:03:88:8e:14:b9:60:aa:62:3e:03:
4f:98:e9:a3:80:38:64:8d:51:2f:ec:c2:27:c4:54:
7d:11:55:07:a9:c6:86:0e:82:07:9b:97:b2:13:b6:
0a:cb:bd:82:92:9e:96:c3:ec:37:ee:37:fa:5d:76:
8f:80:ae:46:04:07:5e:ac:7d:c5:7a:8a:1c:86:98:
77:24:6c:92:91:15:5c:c4:e9:b9:52:c6:71:dd:2b:
8e:31:b2:57:10:4e:67:2c:10:2b:76:04:40:76:95:
07:5b:f5:0b:eb:83:24:0a:b7:54:04:22:93:bc:98:
f2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B7:CA:ED:FF:0E:E2:20:5D:89:84:C1:A2:86:94:2A:DA:2F:6D:F6
X509v3 Authority Key Identifier:
keyid:99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:97:f1:47:2d:0f:31:c8:14:79:70:e3:86:06:1e:3b:3d:cb:
9d:75:71:79:24:0a:bf:78:f6:99:c8:eb:76:b7:5c:6f:5c:9b:
45:1b:25:bb:3c:a5:5a:3e:74:ff:13:09:13:32:e0:0e:19:cb:
e7:0b:9f:ab:d3:00:4d:ae:6d:8a:ce:0f:ea:47:c1:64:a8:01:
a4:04:60:a6:93:99:c6:45:48:46:ca:76:31:e4:61:85:3e:bd:
7f:83:9c:2c:a8:12:9f:32:a4:3a:74:3e:1c:bd:cf:49:08:fa:
fe:d5:49:b7:da:0c:e3:17:7f:4e:9d:e9:1f:b0:54:d7:1a:0c:
89:0e:8a:6c:72:72:07:74:6a:ce:4f:70:ef:ed:84:6a:ed:86:
5e:76:47:ba:ac:39:9f:c3:9b:88:03:39:9d:0a:9a:4a:fc:98:
e4:98:8d:7d:6c:6e:29:5c:3e:e1:ad:1e:e2:ec:69:22:95:f6:
3f:99:83:90:45:ad:75:4b:03:03:9e:55:31:e5:b7:4b:48:92:
46:28:33:8f:4a:ed:1b:69:85:6f:47:5b:ab:d3:bf:56:0a:8c:
db:d4:31:64:dd:82:fa:7e:d5:00:c6:0b:1e:db:26:32:a9:23:
8f:fd:4d:32:29:f5:73:70:60:ba:65:36:8d:64:4d:30:ee:b7:
ed:ca:6e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:51:55 2025 by rpki-client