Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
File: Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft (raw, json)
Hash identifier: 1d1u4+a1bHche0ZzLV9Rny16zo/58Loe2KmNLfzzr7Q=
Subject key identifier: A1:7F:5C:BB:F7:90:29:79:FF:C0:54:18:D4:90:4A:88:4C:D1:00:94
Authority key identifier: 41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
Certificate issuer: /CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Certificate serial: 01967679DECEFF1F132269E97DAD989B55DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
Manifest number: 0EA2
Signing time: Sun 27 Apr 2025 09:00:20 +0000
Manifest this update: Sun 27 Apr 2025 09:00:20 +0000
Manifest next update: Mon 28 Apr 2025 09:00:20 +0000
Files and hashes: 1: ASgPIcJDfuPjOm8cjrU_yX9d6LI.roa (hash: FoRf6zKDxzFzqNvRaEaSA99AYo7HeXRCWwfxlBkAE5Q=)
2: Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl (hash: A3YO5OGw6XhFzbxjMeeA7T3o1jYl1iuRR3SlkmNEg7w=)
3: jJHHC0ke4zgy7tsBzgOSiuwx8KQ.roa (hash: y6+yWoGbJ/QqPwBhk36qsFBsa4k6khZqZ0ihGtdEnfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:de:ce:ff:1f:13:22:69:e9:7d:ad:98:9b:55:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Validity
Not Before: Apr 27 09:00:20 2025 GMT
Not After : Apr 28 09:00:20 2025 GMT
Subject: CN=a17f5cbbf7902979ffc05418d4904a884cd10094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:8f:e0:3c:94:b0:21:09:1f:d0:2c:e4:af:
0c:24:b0:0a:85:05:10:46:ef:f9:bb:a8:42:21:99:
e3:af:04:34:3e:cc:ff:f7:dd:6f:23:cf:84:ed:e7:
f7:16:46:07:20:9e:a2:a7:12:a0:e1:d7:c6:d1:ac:
0e:d4:ed:2c:4d:2a:d2:f4:f5:fa:ce:39:94:5f:01:
2b:84:5d:e1:55:72:5e:15:1d:bf:f7:9e:8d:98:e1:
ca:ce:72:c5:e5:00:e9:5b:34:91:50:62:28:f1:cb:
2b:e9:71:c2:1c:c3:b4:e3:b6:f3:3b:c6:93:00:13:
38:50:fc:bb:55:b0:5d:2a:c8:26:66:2a:8c:4a:7b:
43:3c:7e:e6:8d:83:3a:90:d5:a6:e5:31:30:f3:66:
70:15:f6:06:ab:bf:2f:9a:2f:92:74:64:13:2e:d4:
35:9f:cf:b5:39:ce:ed:6b:64:b9:a0:e9:d8:9c:60:
b2:6f:3a:ec:d4:2b:c4:4e:7c:1b:a9:3e:d6:05:86:
03:8f:49:81:83:ac:69:60:4b:d2:cb:3f:f1:dc:c8:
43:5d:01:b8:a3:d4:50:7a:70:1b:e4:72:51:31:58:
7e:c7:8c:f3:a4:7c:6b:c8:a8:d1:cd:e7:fa:1a:9a:
3b:65:78:da:9b:63:fc:87:d5:ea:7f:c4:d2:f9:30:
28:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7F:5C:BB:F7:90:29:79:FF:C0:54:18:D4:90:4A:88:4C:D1:00:94
X509v3 Authority Key Identifier:
keyid:41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d5:ed:26:b6:50:2f:ed:b4:3c:6e:c2:39:8a:1e:c0:fe:78:
c6:bb:54:34:b5:d7:27:9b:75:e9:d3:36:7b:f8:20:38:85:f4:
33:6d:f0:0b:63:63:b7:5d:c4:20:00:a1:3f:69:91:65:6b:85:
52:2c:35:52:8a:ec:63:c6:b5:ff:9b:37:ef:a2:bb:12:b8:33:
92:ed:91:42:43:2c:71:f6:15:be:8b:80:0b:dc:c1:be:ef:95:
f2:3a:07:2d:73:20:fd:7f:52:ad:d3:03:12:e9:c0:8c:89:2b:
af:bd:44:ee:b3:8d:18:81:97:92:e1:b5:2e:50:7d:1c:8b:8e:
6d:20:0a:ad:35:c3:61:d4:11:d5:98:64:fa:62:35:59:02:19:
44:6f:cf:eb:ea:3c:5f:10:e2:b0:77:9a:7c:dd:3b:44:ce:70:
31:76:60:0c:90:bb:44:04:18:21:8a:e8:37:f6:fd:74:a8:44:
a3:2f:e2:f1:57:be:98:fc:4a:72:d3:92:f5:bd:30:81:ce:88:
22:52:62:66:12:d1:cb:ef:e8:37:a6:47:b7:9e:60:c6:76:d5:
3d:f6:fe:32:a5:cd:23:d3:52:04:ec:ae:91:b3:96:92:65:5a:
5e:62:19:23:b5:ff:b7:bd:ea:a7:a6:fb:95:e0:30:96:23:93:
b3:f6:ed:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:48:45 2025 by rpki-client