Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
File: QhFndK-17RrJkmsLwtV_i4BYs-c.mft (raw, json)
Hash identifier: UkRVelD/SajasM/CfggjYndeQQquQIBz9tUq74l3vZs=
Subject key identifier: 2C:70:69:68:C8:63:2F:0B:0F:57:54:99:1B:01:82:5A:7A:A0:B9:73
Authority key identifier: 42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
Certificate issuer: /CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Certificate serial: 0196771F186B6F4AB269A279509093E170E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
Manifest number: 115F
Signing time: Sun 27 Apr 2025 12:00:48 +0000
Manifest this update: Sun 27 Apr 2025 12:00:48 +0000
Manifest next update: Mon 28 Apr 2025 12:00:48 +0000
Files and hashes: 1: QhFndK-17RrJkmsLwtV_i4BYs-c.crl (hash: 2hQi7KzZ8VQhoSGddIONhgqa4T2o55CjPyS0AHKLQqQ=)
2: v4w1l1in0yr2EsXsMhwK7smhe5c.roa (hash: 7H5QERbsex398Y/VCrt/sp2Qpj6rfwjWtrt7q4PvQAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1f:18:6b:6f:4a:b2:69:a2:79:50:90:93:e1:70:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Validity
Not Before: Apr 27 12:00:48 2025 GMT
Not After : Apr 28 12:00:48 2025 GMT
Subject: CN=2c706968c8632f0b0f5754991b01825a7aa0b973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4e:da:1a:08:9c:ef:b9:d2:ff:3d:33:db:d3:
9d:ed:e9:5e:6d:38:d7:74:b5:99:bb:6b:be:19:77:
0b:8e:9f:f7:0e:a2:15:8c:e0:7a:06:95:66:fd:8c:
79:47:83:65:7d:ca:7c:18:85:5b:94:29:0c:70:67:
32:a1:81:a5:0a:1a:bb:c0:b8:44:58:09:83:b3:64:
b9:b9:b1:e4:51:ef:f7:95:31:5c:60:96:24:35:1a:
61:0f:6d:12:9d:c2:54:1b:3e:1e:e4:b1:c9:16:a4:
6f:b6:47:1a:a6:aa:97:0f:61:a1:06:79:c2:06:ce:
e3:62:dc:d4:bb:95:e0:e3:59:45:f2:f2:76:49:ae:
6d:35:7e:c9:90:76:90:ce:b2:32:92:4c:a2:1d:74:
3e:39:3d:4a:68:01:90:b1:55:e9:90:66:36:7d:00:
6a:32:e8:50:52:29:48:c0:a4:c3:c3:90:bd:4d:11:
90:22:b1:b6:29:54:e8:e1:fe:76:ac:4f:2f:c9:c1:
52:45:7f:db:74:1d:19:d9:86:74:61:ab:87:e1:49:
39:d2:9a:e7:f0:60:29:ea:73:31:fa:26:46:08:3c:
28:3a:bc:18:76:a5:8f:4c:8b:7e:64:17:6b:ba:a1:
80:bc:d7:71:10:b4:d0:05:4c:32:cb:9a:1f:a1:b5:
f5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:70:69:68:C8:63:2F:0B:0F:57:54:99:1B:01:82:5A:7A:A0:B9:73
X509v3 Authority Key Identifier:
keyid:42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:97:9e:2b:cb:ff:65:13:d7:a1:4b:76:5e:d0:f1:52:63:06:
79:f9:d6:34:5d:86:5c:64:5f:00:c8:c3:93:fe:99:ea:a1:63:
37:a8:97:2d:f6:b3:31:a8:50:2c:f4:b5:d7:05:cb:7d:fd:5a:
84:c8:0f:6e:93:1b:d3:15:87:e8:b5:98:5f:74:61:a7:44:46:
54:fc:34:b3:b1:11:11:76:b6:ce:c4:6b:a9:47:f9:64:4d:8c:
1f:f8:0d:09:d4:97:d0:a4:2f:cd:10:82:dd:33:ae:c0:35:34:
58:b6:42:8d:82:8f:1b:56:1b:40:c6:ef:6a:44:cb:86:06:16:
e5:a0:3a:79:37:1a:b0:72:9f:98:d7:da:7f:cc:bf:dc:5b:e7:
68:e4:fa:e7:23:8c:4f:ff:98:08:a3:3a:66:bb:be:09:28:33:
d5:b6:ee:8b:b3:dd:ca:27:96:e6:9c:1f:ff:49:b3:00:00:ec:
b5:08:6a:f4:db:c4:67:ab:30:30:b0:a8:bf:65:c7:19:1a:c9:
a7:77:92:fa:2e:90:05:89:37:4f:f6:37:c5:50:d5:68:6d:9f:
78:ab:a0:5c:8a:db:cd:21:ed:11:4d:29:42:ab:5d:bd:95:ae:
fa:f8:41:26:6a:f7:58:66:38:3a:7d:35:8b:72:ee:9e:6f:24:
8f:a3:bc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:42:49 2025 by rpki-client