Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft
File: qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft (raw, json)
Hash identifier: vbQLhIMDR/h8MbP/eyeUetQQ8PIZFIR/TlSntThuWnw=
Subject key identifier: 38:48:FA:25:1A:31:C2:A9:E2:D6:8F:0C:55:6F:39:12:69:00:23:D8
Authority key identifier: A8:03:2F:57:A6:11:9B:69:2A:2B:8F:14:2C:E4:94:EC:08:B1:FC:D8
Certificate issuer: /CN=a8032f57a6119b692a2b8f142ce494ec08b1fcd8
Certificate serial: 019650116BFFC5D57B6C9690D0BF9E3250C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAMvV6YRm2kqK48ULOSU7Aix_Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft
Manifest number: 0270
Signing time: Sat 19 Apr 2025 22:00:41 +0000
Manifest this update: Sat 19 Apr 2025 22:00:41 +0000
Manifest next update: Sun 20 Apr 2025 22:00:41 +0000
Files and hashes: 1: YnK9gT6S7S0RgJeRsD04H4ISSzM.roa (hash: DtfDFV6FFewqe27Bp/4vezKhP0+2FJRS8CYQqbxzDS4=)
2: qAMvV6YRm2kqK48ULOSU7Aix_Ng.crl (hash: t9LUf4TKBKWYYjZBtPfBJbmc2Eo/cjIk0ZQjVgpnho0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/qAMvV6YRm2kqK48ULOSU7Aix_Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:6b:ff:c5:d5:7b:6c:96:90:d0:bf:9e:32:50:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8032f57a6119b692a2b8f142ce494ec08b1fcd8
Validity
Not Before: Apr 19 22:00:41 2025 GMT
Not After : Apr 20 22:00:41 2025 GMT
Subject: CN=3848fa251a31c2a9e2d68f0c556f3912690023d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:76:fe:16:2a:51:8c:78:ab:01:b8:cb:98:60:
32:8c:dc:94:87:b8:98:89:e3:50:31:b4:54:15:ed:
83:d2:35:88:e8:6d:f5:07:72:e5:1f:e1:e0:3e:d9:
5e:4e:b6:1a:2e:95:1c:45:5f:63:df:8d:ee:1a:cd:
5c:d7:5d:01:b9:2e:00:bc:32:c1:d2:d8:1b:26:76:
df:ca:75:86:c2:e4:ca:5d:58:fe:3f:a4:26:6a:75:
09:df:1b:eb:f7:a6:da:2c:6d:05:13:2a:1a:df:10:
7f:b0:34:bf:59:99:2b:d0:f9:de:e8:1a:98:00:a9:
2c:f2:3d:82:30:e9:2a:79:b8:5b:f1:ce:7b:34:6e:
2f:e0:7e:1b:97:69:f0:0d:ad:c9:a5:48:0b:df:7b:
ca:83:36:65:04:7d:aa:b3:bd:d3:9f:8a:7e:4c:fb:
e1:50:d4:c2:e9:2a:aa:71:bb:28:15:27:80:76:cd:
2a:93:27:f0:68:24:cd:17:08:59:50:a3:06:4b:f2:
00:5c:28:2b:b6:55:2c:96:bc:35:d6:77:12:8f:7a:
2d:f0:4b:47:6e:6d:f4:da:a6:0b:6d:f5:96:37:c6:
52:0d:f0:71:d1:11:1d:db:c1:db:d8:3f:b3:f7:94:
3d:1a:9e:a6:d3:e4:ad:ba:c7:e5:95:a1:59:2a:dc:
c4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:48:FA:25:1A:31:C2:A9:E2:D6:8F:0C:55:6F:39:12:69:00:23:D8
X509v3 Authority Key Identifier:
keyid:A8:03:2F:57:A6:11:9B:69:2A:2B:8F:14:2C:E4:94:EC:08:B1:FC:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAMvV6YRm2kqK48ULOSU7Aix_Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:9a:d7:73:b7:5c:35:d0:1b:70:f6:d4:94:e8:d3:d7:9e:2d:
92:7b:7f:fb:d3:78:14:87:52:cf:ae:de:4c:47:a3:09:10:8f:
32:b4:0a:99:1c:7a:4b:85:a0:e0:63:d8:cd:38:17:5d:fd:a3:
5b:dc:93:bc:67:84:dc:17:c0:56:05:48:fe:42:2e:ab:c4:32:
cb:af:d5:4d:59:74:ac:6d:ab:af:4b:7a:67:58:07:21:54:cf:
f2:9c:09:72:81:c3:f0:22:52:ac:da:22:1e:2e:49:fe:1a:8b:
b9:c6:19:4a:3c:0a:15:f2:b9:2b:75:90:cb:2c:f7:c5:c8:63:
64:a3:1c:6b:c4:f2:b5:32:e0:91:8f:3d:ea:2f:c6:4f:f6:d4:
a2:d2:6a:20:79:0a:ec:73:a3:15:7f:70:b8:92:0c:60:ea:9f:
69:94:83:bd:c0:81:a9:01:f7:75:6c:44:e7:13:92:0f:97:31:
d2:f7:f2:6d:a9:38:5a:d7:ba:f4:7d:4e:c3:2b:f5:ed:26:6e:
59:ed:00:c6:00:40:5f:1a:60:46:54:92:aa:62:fb:10:5b:27:
08:2c:87:3c:a1:4e:37:9d:75:40:bf:9b:53:81:8f:4e:c7:2f:
94:f0:41:a3:81:ee:35:88:ef:37:75:98:19:83:c7:b6:79:65:
6f:d5:05:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:41:02 2025 by rpki-client