Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
File: qjX5B-x9v5xluBWqPXICtt-uMUg.mft (raw, json)
Hash identifier: Fx0NeMK3HqWIJPtqRfJBSF/NgcNxSZFrp0KxhIifHOY=
Subject key identifier: 68:5D:9E:5A:56:7B:B7:3D:AD:A5:F6:62:A0:34:A1:C1:F1:15:06:43
Authority key identifier: AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
Certificate issuer: /CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Certificate serial: 01958C60CB1DDD795F52A11657579BC4E16C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
Manifest number: 1495
Signing time: Wed 12 Mar 2025 22:01:48 +0000
Manifest this update: Wed 12 Mar 2025 22:01:48 +0000
Manifest next update: Thu 13 Mar 2025 22:01:48 +0000
Files and hashes: 1: DxU6Tj_sH9i6nYuhG62Zr3rykbI.roa (hash: m10v06RZq7QrBohirh1LPManMxgfja3ZfQ1j9hj5ZLI=)
2: kZG65yjYhzWbyjVxS5nDngYTn7o.roa (hash: NxEcj6vOgWy2wxB1Tg6EXlBHbNa6oBK7xEqZZsDpfQk=)
3: qjX5B-x9v5xluBWqPXICtt-uMUg.crl (hash: NRJM5TdsNcs/b2Dvv8GqZYAVchKYSykytl9ipzJxvag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:cb:1d:dd:79:5f:52:a1:16:57:57:9b:c4:e1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Validity
Not Before: Mar 12 22:01:48 2025 GMT
Not After : Mar 13 22:01:48 2025 GMT
Subject: CN=685d9e5a567bb73dada5f662a034a1c1f1150643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:67:f7:68:c7:e5:4c:ce:06:92:d4:40:06:34:
47:22:01:03:d2:10:e8:13:b4:be:73:02:52:98:2e:
05:2d:54:9d:0c:5a:02:4e:df:b7:1d:6e:44:32:2b:
2e:4b:55:db:21:7d:a7:74:38:94:8c:6e:d6:4e:9f:
e8:6d:a6:5e:3e:28:93:a4:1d:40:fe:d3:1c:e8:b5:
46:1b:b0:65:93:03:fd:53:f2:cc:19:0b:5f:0a:f8:
5a:c5:d8:09:1c:1b:51:84:cd:cf:62:7d:b8:6d:b1:
39:6d:20:8a:8e:99:1b:2c:58:26:f5:7c:a2:2e:bb:
7d:25:62:e8:40:0c:c9:87:8d:89:14:28:8f:b3:b5:
65:44:24:80:70:70:3f:8b:93:71:7c:ef:42:11:08:
bd:7c:81:c2:80:39:76:52:9f:0c:dc:01:53:fb:4d:
a1:66:0d:25:cf:f1:64:30:62:4b:a3:59:42:6a:7a:
c7:f2:73:e5:6f:d3:d4:b4:d5:a6:01:ad:da:44:31:
f5:23:04:6e:12:a0:4f:27:a5:0a:40:bd:de:39:bc:
1d:91:63:36:46:b2:21:6a:13:70:f1:ad:81:97:0b:
17:28:4e:15:49:18:0e:aa:65:bb:0c:3d:71:cd:9a:
14:bb:1f:25:17:d9:81:50:76:b2:62:61:21:0e:bd:
a6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5D:9E:5A:56:7B:B7:3D:AD:A5:F6:62:A0:34:A1:C1:F1:15:06:43
X509v3 Authority Key Identifier:
keyid:AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:85:23:e9:48:a4:e3:fb:31:34:bf:fe:26:25:c7:a8:d3:b3:
58:44:79:ba:1d:dc:55:e9:76:15:94:c9:c4:ec:a0:0d:f0:42:
4c:80:69:96:6e:0e:9d:dc:20:a2:4e:02:10:73:55:81:d6:33:
32:f8:24:0a:af:34:b2:b6:fd:88:b9:bb:39:5b:b0:c7:14:d4:
01:a9:de:67:0a:48:ba:4f:33:f7:eb:4b:3a:8a:f5:4f:1f:c2:
2b:19:76:a5:56:34:f2:6f:75:c4:ae:e3:67:0b:ed:71:40:5f:
1d:8c:71:fa:4c:55:c1:0b:5b:29:1d:7a:25:4f:18:67:38:ef:
42:22:81:c3:c1:98:c7:c7:ba:16:91:5d:94:6b:62:e5:17:3e:
3f:f7:83:b9:69:76:15:47:52:cf:23:4a:d2:0f:81:1d:14:41:
48:37:c6:b9:e1:4b:00:0e:8a:d1:21:03:5b:cd:f6:d5:55:25:
76:f0:13:83:49:3f:07:dc:d5:1d:8c:70:e3:f0:a4:7c:49:81:
41:a7:44:62:76:5b:02:a5:01:2d:28:a1:ff:90:e7:bc:4f:3b:
07:6a:bf:0b:9a:3a:3e:da:e3:c3:69:e7:fe:87:58:a2:bb:ff:
dc:cd:ec:ff:96:78:a4:03:69:5a:e8:07:d7:7f:3e:45:5e:1b:
a6:73:e6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:28:35 2025 by rpki-client