Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
File: qTS43sEoG8VDF8f-0OmsvHuXysc.mft (raw, json)
Hash identifier: ufNvdz6j9tm7LwdSuIQlRkw4+wddjeR1gcVV11Zu9rg=
Subject key identifier: FC:BE:56:84:BD:98:B7:FB:1C:9E:4A:C8:E1:05:A5:34:E3:00:03:1E
Authority key identifier: A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
Certificate issuer: /CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Certificate serial: 0196789F814F80F78FFEA10657EF66A55100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
Manifest number: 1516
Signing time: Sun 27 Apr 2025 19:00:41 +0000
Manifest this update: Sun 27 Apr 2025 19:00:41 +0000
Manifest next update: Mon 28 Apr 2025 19:00:41 +0000
Files and hashes: 1: nNICaFb7G3xV0xaZvY4tLFZeqjU.roa (hash: 5uzWSjZq0ATl8Nrn/VGx6JZA+5X6g81sHleJ+o0B2vM=)
2: qTS43sEoG8VDF8f-0OmsvHuXysc.crl (hash: rNpF5MzTBKRzSGS5rOzyU4pbsyZz7klgMOKikpM42UQ=)
3: vlECbF8HkBG6WpBhMBZnOl_AraI.roa (hash: 3UR9pQsXBE1n+38LaDwJGSYsS95ZptnvsHsDatSDo+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:81:4f:80:f7:8f:fe:a1:06:57:ef:66:a5:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Validity
Not Before: Apr 27 19:00:41 2025 GMT
Not After : Apr 28 19:00:41 2025 GMT
Subject: CN=fcbe5684bd98b7fb1c9e4ac8e105a534e300031e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d3:a9:7c:32:2b:c8:49:6c:22:57:a5:a8:15:
b2:51:73:76:ee:5e:50:88:72:74:bb:4c:ed:a5:75:
c3:55:66:95:24:a1:31:e0:bc:31:ab:10:f3:e5:f6:
24:d7:8c:77:4f:8b:e9:39:79:b6:a4:1a:86:0a:ba:
61:4f:f7:e9:a2:d8:6f:67:c9:8f:56:58:da:e0:fe:
e0:63:06:33:d5:26:55:73:8b:97:6b:3b:cc:c4:07:
bf:5e:0c:86:9a:62:b5:ec:ab:ad:3b:63:23:74:df:
b5:11:f1:0e:b9:a5:64:c9:17:52:9a:5f:d8:21:4c:
e4:4a:4d:53:cf:0d:82:3a:21:12:09:08:9d:fa:ab:
1b:ab:8d:11:8d:27:e3:3e:17:4f:90:09:9c:a4:65:
59:71:34:5d:18:bc:a1:ae:d5:97:d7:7f:22:71:f9:
42:f2:a2:67:72:2b:45:cb:73:a1:84:06:47:be:bb:
14:70:2c:d7:ed:c6:bc:e2:66:ef:48:49:0d:e9:b8:
35:31:e3:bc:a0:05:66:93:07:cd:cf:e5:4f:09:fc:
c7:f4:6d:d1:10:e9:69:f3:27:8a:6e:08:49:76:9b:
5a:53:46:73:41:36:37:f2:61:0b:03:8c:4e:f5:00:
7c:15:a9:ff:b6:65:f7:e9:4d:b5:53:64:3d:b6:d1:
e7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BE:56:84:BD:98:B7:FB:1C:9E:4A:C8:E1:05:A5:34:E3:00:03:1E
X509v3 Authority Key Identifier:
keyid:A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:72:ee:cf:2e:4f:ab:c8:9e:2d:b5:df:a9:08:cd:63:af:e3:
f4:17:ac:4f:c3:d1:b5:d9:e5:f8:da:69:57:fc:65:c9:21:9b:
cc:bc:84:4c:72:da:63:be:37:f3:76:d7:12:3d:36:15:7a:2f:
2c:e4:cf:d4:7e:78:e8:09:b4:ac:7a:3a:c6:5b:54:00:86:da:
c8:a5:3f:1a:7c:f2:28:8d:24:cd:e3:8c:8d:d1:41:35:8b:39:
7e:13:bd:c8:8d:a9:3a:4e:aa:7a:c9:9f:5e:d0:3b:7d:27:1d:
08:3c:5b:cb:e8:a1:e7:cc:e6:c0:fb:33:bb:d3:f9:2e:bc:c7:
fd:6e:5e:a5:f1:c7:56:a3:bd:88:7d:47:58:db:82:2c:96:4c:
26:dc:82:4a:f1:72:f1:55:5a:27:82:8f:01:d5:92:8d:b9:65:
e8:aa:d8:25:b3:98:7e:7e:68:3f:eb:f8:61:65:02:01:48:a0:
ec:cf:67:b5:f6:f8:4d:8a:bb:15:e7:7e:30:4a:95:a5:23:5a:
66:b2:75:f0:3c:b4:79:0f:61:88:58:27:70:9a:bf:17:a9:e7:
ec:5b:90:24:65:98:e6:b0:b3:08:96:3e:9e:ad:4a:55:2f:7c:
8d:04:ec:11:b6:53:ee:0a:ff:18:93:45:65:be:26:e1:be:f2:
68:83:ce:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:30:28 2025 by rpki-client