Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
File: Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft (raw, json)
Hash identifier: mzC7vn5U5X98Fm19/LjR6zo2m+iQ8HfewjV1JLZd/mM=
Subject key identifier: D9:2A:E8:B4:3F:1A:7C:61:7D:B8:DB:EA:5E:ED:1C:94:19:AE:A7:3E
Authority key identifier: 42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
Certificate issuer: /CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Certificate serial: 01967C44FFCA706059AE59B7E8886035E1BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
Manifest number: 151A
Signing time: Mon 28 Apr 2025 12:00:18 +0000
Manifest this update: Mon 28 Apr 2025 12:00:18 +0000
Manifest next update: Tue 29 Apr 2025 12:00:18 +0000
Files and hashes: 1: Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl (hash: EI7F1db9zdLpcXXTntUTEPKC25J0ZXFt/4hF0d7AYJA=)
2: mC6qnnktw8ocqw8es0LfRst29xw.roa (hash: ppmb2PFwvp6zlS01nCp0DE/SrZFmg3TuLccALf3DpFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 12:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:44:ff:ca:70:60:59:ae:59:b7:e8:88:60:35:e1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Validity
Not Before: Apr 28 12:00:18 2025 GMT
Not After : Apr 29 12:00:18 2025 GMT
Subject: CN=d92ae8b43f1a7c617db8dbea5eed1c9419aea73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2e:a2:bf:ee:9a:69:72:7b:21:b8:e3:8d:c4:
28:6b:26:69:2d:c8:5e:60:1e:b1:98:c5:d3:01:ed:
29:78:16:a2:aa:90:08:61:a7:94:75:98:4b:82:c9:
cb:14:16:80:1e:5a:29:60:4c:bc:2a:2a:c0:8f:38:
f7:f9:79:b8:f4:88:96:be:06:03:14:ef:11:d2:48:
46:8b:f8:ac:30:fd:a5:99:d4:26:2c:b1:44:b5:bc:
8f:16:11:53:22:45:dd:be:bc:9e:61:cd:53:56:27:
4a:ca:61:0f:07:1d:d7:d7:6d:a7:1e:17:d5:55:fb:
52:c5:1d:fb:fa:3e:6e:b6:77:de:9b:24:37:f0:dd:
30:13:41:5d:ab:89:f4:02:4d:a4:17:0c:02:5f:95:
e2:89:b3:dd:eb:b0:20:f5:93:f7:3a:2d:d5:5d:d2:
7f:67:e6:96:a7:e2:90:78:6e:c2:f9:1f:98:a2:4d:
3d:ac:9a:a3:64:cd:0b:08:d5:f2:30:08:69:9d:6c:
80:21:c8:5c:c7:49:17:26:4f:0d:45:0b:92:e2:04:
e7:12:9d:05:39:4d:2b:b0:95:68:3a:22:78:1f:5b:
14:82:51:5c:5a:16:16:d7:07:6c:22:c8:82:95:02:
13:39:cf:4c:f6:7a:63:d5:06:05:3a:a8:58:64:92:
79:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2A:E8:B4:3F:1A:7C:61:7D:B8:DB:EA:5E:ED:1C:94:19:AE:A7:3E
X509v3 Authority Key Identifier:
keyid:42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:85:6b:a9:8a:fe:c7:de:45:7b:6e:48:db:ef:c6:b5:a2:37:
94:01:1d:62:49:03:e9:59:52:66:0a:cf:3d:e1:2c:2f:e9:3a:
9e:6c:34:aa:fe:33:fe:ff:58:0f:04:25:72:ed:27:3c:80:11:
c5:bd:ba:15:84:f2:9b:17:ab:33:df:78:7e:43:c7:64:22:3c:
09:50:5a:ff:f8:76:6b:58:83:a2:d4:20:23:72:3e:58:7c:75:
4e:f3:77:f8:6d:c5:50:6c:f7:24:fb:27:0d:7e:26:25:b1:f8:
41:76:a4:75:bb:c6:c6:4f:c1:c2:3e:1a:9a:b3:e9:0c:e6:cc:
a6:da:cb:41:09:ec:24:95:35:ea:4a:9b:ac:8f:e2:30:94:ce:
95:aa:18:0b:92:19:cb:71:93:1c:a6:ef:4b:83:e8:a4:17:c7:
e6:dd:e9:86:ed:9e:d3:25:80:ee:25:4a:33:b6:1d:1f:bf:0e:
df:dd:47:47:bd:da:13:d8:4c:10:52:0f:ff:23:98:65:38:a9:
ee:e7:8b:f4:ed:43:ae:45:4b:9d:2a:61:74:13:6b:0b:f3:f0:
71:28:17:4f:cf:42:0c:75:37:23:6c:c7:45:df:b0:f3:d8:7c:
3a:e8:e8:a6:cf:04:38:66:31:62:3b:36:d9:e3:f4:27:6f:a3:
b4:8f:d5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:27:06 2025 by rpki-client