Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
File: 5-QyokmU5XnrJJmh9vNMZSEY40Q.mft (raw, json)
Hash identifier: 0qgz6HpUOKrk985Y8v1TFpwafk4IRX4U07nzh1FtiMc=
Subject key identifier: FB:54:8E:AE:77:FB:F2:8A:0C:37:65:72:05:36:2B:37:67:A5:E8:91
Authority key identifier: E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
Certificate issuer: /CN=e7e432a24994e579eb2499a1f6f34c652118e344
Certificate serial: 019677FB3B7E6ECB5EC681D5569FAC701FE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
Manifest number: 14A3
Signing time: Sun 27 Apr 2025 16:01:15 +0000
Manifest this update: Sun 27 Apr 2025 16:01:15 +0000
Manifest next update: Mon 28 Apr 2025 16:01:15 +0000
Files and hashes: 1: 1ap-zhjP2xlpcyvljzd4At-hRqs.roa (hash: vy++CPahIzqV0ojk71CI64hyqugiBwjMnM2TKCrxcDM=)
2: 5-QyokmU5XnrJJmh9vNMZSEY40Q.crl (hash: eQvRco+WkDuy1JsvsTsB6eK4sG7JN/9qgwUcBpsvCB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:3b:7e:6e:cb:5e:c6:81:d5:56:9f:ac:70:1f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e432a24994e579eb2499a1f6f34c652118e344
Validity
Not Before: Apr 27 16:01:15 2025 GMT
Not After : Apr 28 16:01:15 2025 GMT
Subject: CN=fb548eae77fbf28a0c37657205362b3767a5e891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a2:ca:95:37:7e:f9:8b:54:2e:17:53:e0:03:
6b:b6:51:9f:be:14:b2:4e:e8:fd:4f:4b:5a:08:f2:
e3:20:e6:a6:cc:5a:00:a5:f8:f3:4a:35:3c:70:ec:
93:e2:dd:97:6c:6f:ce:c7:ce:76:2e:c4:18:81:5d:
54:c7:13:81:79:00:ad:a9:45:aa:db:93:c7:da:55:
ca:96:7c:bd:61:37:bb:e1:13:a4:cd:6d:32:5d:4a:
a2:ab:4c:82:94:80:a0:90:6d:67:5a:dd:44:57:3c:
02:b1:8e:71:d5:62:39:20:5a:7d:24:43:62:9a:af:
49:59:0f:4b:17:10:fb:c4:cc:5c:06:d1:de:66:3c:
e9:57:06:25:e7:d5:2b:9d:fd:d5:59:de:0c:5b:ea:
c3:17:9b:64:21:43:f8:d3:e9:f1:90:7f:0b:f8:ae:
58:19:2a:b4:b1:70:e6:56:a1:27:00:b6:7d:d3:b1:
68:3f:d7:00:f8:e0:49:7f:4d:70:26:28:3e:cd:33:
04:f0:da:03:04:59:88:62:b1:fc:47:07:97:27:7b:
5d:19:05:c4:a3:c1:74:82:84:1b:ec:b5:61:d7:bb:
3c:0a:d0:9b:77:13:0c:68:7e:80:78:87:05:bf:cf:
45:35:e5:33:ff:b2:cd:da:22:fb:25:8b:28:e1:4e:
1b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:54:8E:AE:77:FB:F2:8A:0C:37:65:72:05:36:2B:37:67:A5:E8:91
X509v3 Authority Key Identifier:
keyid:E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:75:d5:40:52:b8:0c:37:f8:52:e2:a2:9c:7b:44:32:be:af:
ef:eb:f1:eb:2c:3d:8f:de:71:44:8d:ab:ef:e1:b8:6c:03:5a:
2f:0e:10:55:c1:ad:ce:60:55:17:9e:32:05:e0:7b:73:1a:6c:
d7:5b:7e:66:68:03:dd:76:fc:b7:32:3b:bf:c6:38:9e:3b:ca:
fb:2c:94:69:39:9e:5c:ad:b0:cc:d3:e5:94:35:65:96:2f:a3:
99:d5:e7:e4:d1:52:bd:61:00:ad:b1:da:23:7b:60:f9:f6:e6:
5f:71:30:70:63:88:40:41:ec:ee:59:d9:5b:22:64:47:7c:a5:
fc:93:97:90:0c:93:dc:50:20:9a:d3:88:cf:2c:25:7e:c4:36:
37:08:3b:c0:d7:bf:c8:64:c0:ae:3f:93:84:f1:17:19:33:80:
a1:b9:fa:9f:ed:92:31:02:dd:3c:d2:7d:74:5a:ba:69:b9:bc:
28:a1:3b:9b:bb:1a:c4:cc:c6:d5:06:a2:f4:61:99:88:bc:b0:
0e:dc:3b:e1:58:4c:d4:9b:7d:30:07:81:d4:1e:17:33:07:fe:
66:84:c3:e2:de:ec:44:1c:78:97:22:1e:99:c7:16:f6:df:f0:
6d:df:df:a9:1d:61:6b:ca:54:85:6a:94:15:32:5c:4e:ba:20:
a5:ef:1a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:10:07 2025 by rpki-client