Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
File: QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft (raw, json)
Hash identifier: YVxbiZUKhswyGIgeERaTLGYkpCQMRkVhQLPCX0xkZl8=
Subject key identifier: A3:CE:10:FE:82:8E:DB:0F:5D:AA:01:ED:8B:29:2E:09:CC:E5:32:78
Authority key identifier: 41:2A:BB:11:4F:32:57:0C:5D:D5:20:66:25:9B:DC:80:C9:87:68:FD
Certificate issuer: /CN=412abb114f32570c5dd52066259bdc80c98768fd
Certificate serial: 01967FEAEA895732B67ADE61E87F9F0FDC99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
Manifest number: 0C51
Signing time: Tue 29 Apr 2025 05:00:23 +0000
Manifest this update: Tue 29 Apr 2025 05:00:23 +0000
Manifest next update: Wed 30 Apr 2025 05:00:23 +0000
Files and hashes: 1: QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl (hash: kvbS84h1qMq2qcVrON1OXGMMZKsgFMKoTbV3648RmSQ=)
2: WjHlxqu14v8phrZRkyuwZHi4tA0.roa (hash: OgrQu5S4ReMsliJzFxYO2+I1LQQpOGuq17K/+Bl2UJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:ea:ea:89:57:32:b6:7a:de:61:e8:7f:9f:0f:dc:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412abb114f32570c5dd52066259bdc80c98768fd
Validity
Not Before: Apr 29 05:00:23 2025 GMT
Not After : Apr 30 05:00:23 2025 GMT
Subject: CN=a3ce10fe828edb0f5daa01ed8b292e09cce53278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:57:b1:04:ee:e0:4a:eb:36:d5:ff:3f:fc:a3:
d3:23:25:9d:66:e2:8a:e5:cb:89:c7:bd:2e:13:18:
a3:25:0e:f1:ee:db:81:c8:39:a4:b2:77:52:82:9c:
bc:da:98:d5:a0:05:2c:c2:ba:8d:1a:7c:8c:72:a4:
35:b4:d5:d2:b9:cd:ce:e8:ce:59:6a:bb:a8:44:1b:
95:7f:dd:35:25:ad:3c:bb:a7:d8:18:a6:13:16:5e:
7c:48:58:bf:a5:4c:c3:49:c9:b7:7c:47:ab:d0:e1:
4e:36:f8:ec:96:45:e1:74:a4:0c:8a:f9:cb:6a:a0:
ea:dd:a5:2d:d7:a8:24:0a:18:3f:76:96:ec:d1:d0:
e3:62:19:2c:6f:44:44:2b:dd:23:01:ea:1d:c3:18:
62:7b:8e:d1:05:3f:d7:d2:ed:9c:7f:5d:a7:b0:02:
8d:88:e9:3c:7c:55:b5:6b:57:a1:ab:68:eb:9b:ee:
38:47:f5:19:92:d1:15:ed:99:b4:75:f3:9a:08:d3:
81:fe:c6:a4:99:04:c2:97:01:5c:62:ba:cd:ee:19:
3d:c0:0f:d6:ad:7e:0b:53:72:23:37:35:ac:af:59:
ff:ff:00:52:28:d5:a0:3c:50:38:a3:9b:5d:2c:e2:
9d:ad:aa:a3:31:ca:4a:2b:c5:62:cb:31:fe:44:96:
d9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CE:10:FE:82:8E:DB:0F:5D:AA:01:ED:8B:29:2E:09:CC:E5:32:78
X509v3 Authority Key Identifier:
keyid:41:2A:BB:11:4F:32:57:0C:5D:D5:20:66:25:9B:DC:80:C9:87:68:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:43:ba:9c:90:ee:3b:71:46:da:e2:01:0e:77:d7:f7:3e:73:
3e:c4:04:89:26:d0:02:d6:49:91:30:aa:3f:84:88:23:84:76:
85:2a:6c:f5:78:18:a5:9c:3e:fc:c7:bc:ef:74:ac:4c:ff:65:
02:e9:39:5c:14:b7:8c:e7:29:68:3e:1e:8c:d8:f6:08:60:65:
19:e7:e2:15:ec:d5:c9:cc:09:ce:6f:10:48:c8:ee:0c:16:be:
d8:1c:26:e0:1e:fe:4a:2e:31:ce:cb:f0:91:52:65:b2:30:38:
b4:0a:57:c4:b7:db:b5:ae:24:7b:b3:57:ff:25:89:09:64:8f:
0e:bd:81:a9:31:d1:11:14:6b:ea:73:bb:11:d2:39:64:03:22:
da:bd:e5:be:1f:d4:8a:f1:0e:6a:5f:d3:68:37:a2:77:ef:dc:
82:89:ed:0d:92:fc:3d:80:c3:8f:78:ef:8a:53:24:72:95:98:
30:c4:3c:14:06:5e:84:f2:ad:9d:57:c2:6b:fe:c8:b0:72:42:
07:50:a4:17:1f:c3:5d:8a:d0:81:42:fc:38:be:13:3f:55:78:
90:f9:d1:a1:27:db:54:cc:a0:2f:01:1d:7e:aa:8f:45:d4:bc:
b5:2c:2e:61:c6:86:85:9a:c2:a0:00:13:02:55:9b:d0:f6:3f:
45:50:d6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:34:08 2025 by rpki-client