Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
File: QtT25CKV9UA7hFtSu6lnl2HYhNg.mft (raw, json)
Hash identifier: DjeDE/ot4C0SwfX3W6/1HCKMSr6G+/nOtMOyhYkOsLo=
Subject key identifier: 7F:DD:AB:C3:19:E2:96:97:1B:D0:D5:16:7E:6B:A5:72:06:21:65:1C
Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
Certificate issuer: /CN=42d4f6e42295f5403b845b52bba9679761d884d8
Certificate serial: 0196718A63238CED49F79A7F76AD42610273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
Manifest number: 0908
Signing time: Sat 26 Apr 2025 10:00:16 +0000
Manifest this update: Sat 26 Apr 2025 10:00:16 +0000
Manifest next update: Sun 27 Apr 2025 10:00:16 +0000
Files and hashes: 1: Op1gh0wFko9724Ahwm8zyJJnCx8.roa (hash: xGR1u5ClwHU4q3WoVp5eWaY/nYx57WKoSQo4c6w7W+8=)
2: QtT25CKV9UA7hFtSu6lnl2HYhNg.crl (hash: ZWzPYdwXftwqeDCofy75qU5ucgYMPNuZwQ05q9k6CbI=)
3: jFqlbrJh0TyGkEhrngC57XJ-Gb0.roa (hash: Ci3+1/Zt1KX21Iibq86D4q3nL8Q6qZ17OnVkiVZ8OJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 10:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:8a:63:23:8c:ed:49:f7:9a:7f:76:ad:42:61:02:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8
Validity
Not Before: Apr 26 10:00:16 2025 GMT
Not After : Apr 27 10:00:16 2025 GMT
Subject: CN=7fddabc319e296971bd0d5167e6ba5720621651c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a7:55:f5:90:af:92:76:b1:22:e1:41:b0:d8:
ab:9b:b5:b3:1a:40:29:37:06:b7:ff:5c:df:96:21:
bb:ab:81:f3:4f:8d:13:cb:68:85:0d:ad:42:bd:0f:
b0:ff:dc:49:eb:63:44:cd:73:47:80:bd:f9:13:1d:
ab:74:f1:c5:5e:86:c8:0e:0d:4d:54:92:bf:ca:a7:
b9:af:b9:ce:af:1b:fb:fc:4d:4a:63:97:7e:98:d8:
df:4d:f3:70:b0:16:27:b3:c0:df:9c:72:f3:5f:aa:
e1:d1:ac:18:4f:b9:cd:d2:ad:b3:d8:0c:1f:27:94:
57:ea:9d:de:d1:23:f3:84:6c:2f:5b:74:dd:08:ea:
62:0e:03:dc:96:20:48:26:0e:5d:42:62:35:c6:86:
97:4d:56:14:82:93:dd:fa:73:59:5b:75:dd:c7:7b:
2d:2a:bc:4b:80:e5:c1:44:e4:cf:37:38:67:3a:d2:
08:53:ee:32:86:73:8d:f7:63:93:bd:c4:f0:cb:7f:
8a:e6:88:ca:b9:3f:b0:96:d1:ac:75:37:f5:3d:53:
8b:4e:56:44:d0:d1:ed:ab:35:67:59:0f:98:c2:d3:
38:12:b6:e1:5a:88:7c:02:1d:5c:18:c1:a0:2a:d7:
10:88:fe:72:b8:5c:e4:f7:22:79:4b:e6:46:f1:b4:
8f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DD:AB:C3:19:E2:96:97:1B:D0:D5:16:7E:6B:A5:72:06:21:65:1C
X509v3 Authority Key Identifier:
keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:44:cd:07:d5:3c:fe:0b:4a:7a:77:6d:6e:62:bf:19:01:95:
b8:e6:c4:af:24:02:9d:31:bf:aa:1f:59:d6:71:cc:4d:d9:86:
03:e1:8e:41:2b:3c:3f:e4:8e:20:1e:ab:91:64:ec:47:49:3e:
16:2b:e1:7a:64:0d:e0:9d:5d:37:57:65:fc:2f:52:20:0f:8a:
54:d9:c9:61:cb:3a:da:1c:eb:b9:e5:17:71:c6:25:82:2d:8e:
2b:18:5a:d0:7b:f2:e2:58:0c:6e:d0:4e:16:85:15:d4:fc:5f:
ac:ed:fc:03:19:61:97:67:f5:1d:23:6f:48:0d:06:0f:a5:18:
09:17:79:23:8e:9a:9c:9d:ba:00:c5:b2:3c:39:8b:3b:e8:63:
d3:2b:32:8b:e7:bb:7b:24:e2:a8:73:71:9b:b7:a9:dd:98:eb:
3c:bd:e3:b8:a6:c9:ea:b5:b0:80:86:a3:49:0c:fd:bb:9a:39:
9e:e9:79:72:5d:c5:8d:ca:5a:0c:fd:e3:d7:87:8c:2d:3f:52:
9d:a7:25:c4:08:83:c8:06:bf:4b:79:2e:2a:1c:e5:62:aa:aa:
a1:17:5a:cf:95:af:26:57:73:e8:7d:35:1f:3e:d6:de:f8:25:
41:46:b3:9b:fb:58:bb:17:36:c1:ab:f1:2a:31:a5:d7:cf:81:
2f:ee:30:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:04:01 2025 by rpki-client