Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
File: Qs9KEo0J38S4sDWhLNgx-fewFGk.mft (raw, json)
Hash identifier: 7C7u42a/y9xqUEScNxBAoVx4gYSOVJg77MwHYuvfZCY=
Subject key identifier: CF:C0:7B:E0:22:45:E0:E8:AE:7B:8B:F1:52:AB:51:6F:E9:4A:A5:ED
Authority key identifier: 42:CF:4A:12:8D:09:DF:C4:B8:B0:35:A1:2C:D8:31:F9:F7:B0:14:69
Certificate issuer: /CN=42cf4a128d09dfc4b8b035a12cd831f9f7b01469
Certificate serial: 01968F9503A0EF6A32390743F5862A5EA7EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
Manifest number: 0E33
Signing time: Fri 02 May 2025 06:00:29 +0000
Manifest this update: Fri 02 May 2025 06:00:29 +0000
Manifest next update: Sat 03 May 2025 06:00:29 +0000
Files and hashes: 1: 2rG3zP2nsK1WFDdtam1fkefUVec.roa (hash: FYwcLySS6BHsPeqa2YZMNFpU87urYtsqq/j3a/UUmqo=)
2: G4MlXm_89uj6pHE4Hj0jm0JnAPs.roa (hash: IvJvABmtoL2D5H2lLbc36SYTprrxJ3+le+YIp65E/hA=)
3: Qs9KEo0J38S4sDWhLNgx-fewFGk.crl (hash: OLrO1W6kcnfo7P+c9/GaKL2Y832nNLC+SP4Jw46w+c4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:95:03:a0:ef:6a:32:39:07:43:f5:86:2a:5e:a7:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cf4a128d09dfc4b8b035a12cd831f9f7b01469
Validity
Not Before: May 2 06:00:29 2025 GMT
Not After : May 3 06:00:29 2025 GMT
Subject: CN=cfc07be02245e0e8ae7b8bf152ab516fe94aa5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:79:fd:62:3e:29:b8:5f:92:24:ec:05:16:89:
6f:2c:ed:09:44:e2:94:ad:6b:c2:03:77:21:d9:c1:
e2:b2:50:f6:fb:58:2c:00:3f:6e:d6:03:c9:02:dd:
f6:b3:ee:d9:86:6b:a0:ee:60:73:6b:ae:cb:4e:f3:
02:3c:b0:48:5a:ea:be:11:66:71:2c:11:50:dc:9a:
f0:75:4e:cb:b5:de:3c:ba:c8:54:48:99:4b:fe:d9:
af:34:b9:8f:07:52:d7:6a:a4:bb:87:6c:87:e2:b7:
e3:46:da:68:d8:6c:fe:7d:9a:8f:a6:8f:8b:2b:ed:
c3:3c:aa:fb:4e:3f:14:70:69:99:da:8e:81:e1:b6:
be:16:97:78:8d:94:b5:67:be:2b:98:a5:a7:43:b2:
19:8b:38:24:8a:00:87:b9:49:72:fc:9f:48:46:9f:
e0:99:29:24:8a:ce:c9:16:6c:53:bb:ed:f7:f6:6e:
06:36:a1:21:51:d3:c8:c8:50:af:9e:71:47:86:29:
1a:94:f0:54:a6:c6:f3:19:23:de:ee:ad:bd:3b:4c:
8d:10:f1:1d:a1:36:f9:d8:6b:9c:04:33:50:d2:f7:
79:d7:8d:81:68:44:69:e7:4d:64:73:7d:8f:10:d4:
26:51:69:b5:82:2e:e9:92:e2:d4:cf:2c:26:36:05:
9b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C0:7B:E0:22:45:E0:E8:AE:7B:8B:F1:52:AB:51:6F:E9:4A:A5:ED
X509v3 Authority Key Identifier:
keyid:42:CF:4A:12:8D:09:DF:C4:B8:B0:35:A1:2C:D8:31:F9:F7:B0:14:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a0:18:54:33:e6:81:ad:c6:a9:ed:75:89:6d:94:89:5f:6d:
79:13:7c:34:bb:e5:33:ba:9c:7b:75:6d:1d:e2:1d:a5:41:89:
a7:b1:0a:a3:cd:08:1c:b2:45:1a:c4:b5:33:6a:5f:54:e4:ab:
0b:ef:54:cf:bf:e8:04:14:3c:b7:2b:ec:22:5d:6c:32:22:5a:
3a:c1:4e:28:36:55:f1:33:c5:17:86:a2:91:7a:62:f6:df:d3:
7e:d0:9e:fd:26:df:87:f3:70:07:37:27:d7:6c:73:0d:b8:47:
10:69:55:be:fa:f8:4b:bd:2b:eb:48:88:88:fe:4c:71:ce:44:
dc:4e:26:78:59:04:2b:cc:2e:62:09:73:37:bf:5d:aa:a6:67:
f7:6a:03:8b:95:79:6b:aa:6a:a6:13:44:ac:ef:d9:a5:01:ee:
98:61:79:c7:85:26:85:00:fa:d6:1b:d9:aa:25:9c:91:17:df:
98:43:35:6b:0d:ac:b7:36:ee:84:b1:5e:ac:01:12:5f:e1:36:
c6:3d:e7:1d:1d:e6:f1:81:0d:24:e1:3b:19:11:20:4b:28:8e:
5f:46:33:b8:9c:a0:61:19:e5:33:4c:60:04:bd:12:66:c8:f1:
ea:6b:23:e7:a5:b6:c1:5a:8c:14:e4:71:a3:12:e6:ba:be:e6:
c5:d7:7d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:25:19 2025 by rpki-client