Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
File: QwFWVAgleMSUbNJ74eiaPddWL6Q.mft (raw, json)
Hash identifier: +FCypOsat0GJisDNvE5naxinJhbLSG069KjzhhTxSYs=
Subject key identifier: 6F:BB:8A:34:7A:1A:79:35:96:32:D8:F2:6C:15:BF:A2:AF:9B:56:4C
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01967AFB4B374BBF8752085B70012782B524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
Manifest number: 151F
Signing time: Mon 28 Apr 2025 06:00:11 +0000
Manifest this update: Mon 28 Apr 2025 06:00:11 +0000
Manifest next update: Tue 29 Apr 2025 06:00:11 +0000
Files and hashes: 1: 3eQ1S8uuA5rjKr45UcvylppbYDU.roa (hash: vQeG0u4yjs22R45FJRm/clzO1Z1gNnp6n1vY2dqT/jk=)
2: QwFWVAgleMSUbNJ74eiaPddWL6Q.crl (hash: B+nVSPT297NKGzV94oVVIpDifCqlDmfJ0kEHByg7yUY=)
3: v1Pwr5xvdbbmpnihx2cCK9c0-pk.roa (hash: cRnPjj7eiLAD4lbp2VFMgeLmxV7rEoy5VNzAeh72O+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:fb:4b:37:4b:bf:87:52:08:5b:70:01:27:82:b5:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Apr 28 06:00:11 2025 GMT
Not After : Apr 29 06:00:11 2025 GMT
Subject: CN=6fbb8a347a1a79359632d8f26c15bfa2af9b564c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f1:db:24:e7:fc:98:24:90:e1:aa:3a:60:4f:
e1:37:13:e1:81:21:f0:22:b9:59:e2:37:fb:2e:b6:
90:84:20:2f:b7:7d:ac:dc:ae:a1:e6:73:4e:cf:a4:
53:8b:6e:4d:60:ae:30:c9:fa:ca:4c:de:6e:02:9a:
d4:3b:ca:25:4d:98:9c:5f:a4:ea:13:f8:81:ef:db:
0f:c3:2c:79:34:b3:60:e8:16:f3:dd:c3:3f:4c:89:
77:54:74:f3:c8:a8:79:68:1d:df:a1:f1:dd:68:4d:
52:77:b9:9e:17:5c:47:0b:cf:cc:12:2a:b2:2e:1d:
d0:36:26:60:32:35:93:2d:c4:05:d2:d0:2e:8b:a3:
4a:cb:f7:d8:0f:08:ed:ec:e5:5f:69:b9:16:69:d8:
b5:c4:c5:b9:20:84:1f:ec:ef:f6:c8:d0:18:a9:cc:
9f:16:88:38:06:38:b3:47:99:a4:a5:aa:f1:bf:26:
ec:fe:2d:d0:2c:a3:8a:86:bb:18:be:c8:4d:96:34:
45:44:1a:ac:b2:23:bc:0a:85:24:02:d0:8d:85:5c:
10:df:e7:cc:cf:c1:19:04:a6:a6:f7:60:21:8c:ae:
66:02:9b:8a:8a:cb:dc:33:62:b1:e4:df:71:eb:dd:
82:08:04:d7:30:02:3a:3f:0d:a3:28:56:64:8d:5c:
07:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BB:8A:34:7A:1A:79:35:96:32:D8:F2:6C:15:BF:A2:AF:9B:56:4C
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:47:76:55:a4:a1:7c:1b:8b:04:62:a0:e0:c8:2f:dc:9b:c0:
94:97:52:cc:7c:94:d0:29:d6:2d:c4:ba:d4:cb:a9:5f:b2:0b:
0e:ef:89:f7:01:e9:72:12:27:85:3a:b3:b8:61:97:e1:0a:f6:
bd:99:68:6c:67:b8:e3:d2:bd:f2:2e:8c:f8:6b:09:b4:ee:48:
07:59:c8:3a:aa:f9:7d:ed:cf:a4:73:69:b5:85:a7:40:12:7b:
dd:7f:9f:00:c5:90:39:4d:89:d8:b9:19:7c:4e:b2:ae:72:e9:
be:30:41:37:a4:98:56:a5:fe:c8:14:47:c9:e0:be:cf:99:f9:
1e:c4:90:99:16:92:49:62:b9:0d:15:46:0c:2b:47:a8:a7:76:
22:eb:16:08:9d:5c:32:16:0c:a4:9b:94:79:c6:ff:c5:fe:2b:
b5:20:fa:76:a8:85:81:24:34:65:b4:42:5e:2a:0f:ed:d0:8e:
79:20:6c:27:ef:05:ff:49:20:da:9d:35:da:45:aa:60:ad:d1:
5c:c8:e8:54:2b:fe:89:d1:03:e4:4c:a0:6e:fd:22:e2:f6:b0:
fe:e9:b1:a6:57:f6:dd:69:12:fb:8a:8e:ab:a8:54:e9:b5:92:
a6:51:1a:ff:83:b7:dc:a5:9b:31:f7:ef:ef:35:7e:c3:32:cf:
03:46:03:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:55:04 2025 by rpki-client