Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
File: qPSR8hDFe_RvtS1K8i5-z29M2oA.mft (raw, json)
Hash identifier: 0wekmfNnQgixRnYYZZopH5jJBawTBEs05gFLUtFu21M=
Subject key identifier: EC:B6:46:EC:FA:9E:6A:63:7D:C6:C6:35:B5:4F:F3:55:1C:CA:1D:24
Authority key identifier: A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80
Certificate issuer: /CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80
Certificate serial: 0196797B770FCA22FBB6439E8141EBD460F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
Manifest number: 0AED
Signing time: Sun 27 Apr 2025 23:00:56 +0000
Manifest this update: Sun 27 Apr 2025 23:00:56 +0000
Manifest next update: Mon 28 Apr 2025 23:00:56 +0000
Files and hashes: 1: ZZqXGnxEBhLfDD9lB7yOqiX8_H0.roa (hash: AmgNgGv8HaEfNgQu4ILsUPklwcafU90+t65Aj2bSX9Y=)
2: qPSR8hDFe_RvtS1K8i5-z29M2oA.crl (hash: oDwtAhMWlEQRm5fheV4IML8F+i2YakLkiW6sIv80Cnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:77:0f:ca:22:fb:b6:43:9e:81:41:eb:d4:60:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80
Validity
Not Before: Apr 27 23:00:56 2025 GMT
Not After : Apr 28 23:00:56 2025 GMT
Subject: CN=ecb646ecfa9e6a637dc6c635b54ff3551cca1d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fc:3f:3d:97:e0:09:a0:a2:2a:b6:3c:68:08:
39:bb:47:05:d4:60:27:b9:ab:a2:41:88:8b:73:56:
51:31:a8:13:b5:d8:14:4a:64:d0:32:1a:4a:4b:a7:
12:ac:6e:15:ef:6a:e0:08:64:aa:e1:51:fd:c3:c7:
60:32:f4:d6:96:46:d3:00:a1:a1:d7:e7:86:8e:d8:
20:9b:d1:fa:eb:a1:c6:69:9a:1c:17:5f:a0:27:0c:
cd:27:c7:6b:2a:0a:6f:49:68:a9:49:cf:fa:8c:d3:
bd:c0:bf:b9:ae:4c:38:d7:10:79:64:af:b7:71:40:
b4:d4:25:c9:87:56:00:cd:2a:4c:96:b9:c4:26:85:
d4:21:ee:6d:23:df:a3:e8:8b:54:2b:31:c3:c5:28:
f8:12:d6:4e:3a:1a:5b:9b:1c:db:8b:69:f4:6a:f1:
51:3b:16:29:3d:9b:e0:d9:df:af:d1:9f:d1:0f:61:
de:f2:f1:73:90:5e:d1:15:8f:26:7b:53:31:82:89:
90:c4:e6:02:89:b8:a3:1c:cb:ed:88:dd:68:ed:1b:
3c:99:c4:6a:65:f0:e4:fd:9e:ec:39:c1:70:91:71:
ad:00:42:e2:d4:e1:3a:10:19:97:16:9b:b0:85:f4:
e5:bb:71:f0:d9:96:57:64:e2:de:1f:1b:1b:8b:05:
a0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B6:46:EC:FA:9E:6A:63:7D:C6:C6:35:B5:4F:F3:55:1C:CA:1D:24
X509v3 Authority Key Identifier:
keyid:A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:3f:48:52:a5:aa:4a:cd:93:f2:d4:88:1d:41:90:d7:99:ef:
4f:d1:08:a5:a9:5e:71:e1:39:1b:29:69:c1:4a:25:32:60:0f:
63:d9:fe:54:e1:b4:af:3c:a8:25:3b:ab:69:9d:d9:24:1b:3d:
37:ba:a0:17:2b:36:29:4a:d9:b8:1f:cd:3a:20:f0:ce:3c:92:
41:12:a3:c0:cc:c2:64:3e:5d:9c:88:8b:e0:df:0f:72:9c:83:
b6:fc:46:d4:b4:a9:87:c5:28:ea:58:5e:37:0f:8f:e3:7e:19:
c8:ac:ee:45:14:b8:bf:af:e5:af:7d:9e:be:ef:1e:07:a4:a7:
60:d8:d4:4d:3f:ce:f1:9a:12:c1:92:35:c3:1d:b2:3f:04:8e:
c6:10:f1:1d:12:c4:9b:6b:fe:5c:fa:0e:de:93:9c:eb:a2:0f:
63:a9:b1:0b:d7:49:f6:9d:89:3b:8d:fd:b3:9d:f3:e7:d7:bb:
47:5b:ab:fa:a8:7c:70:4f:ae:d4:b6:f2:14:1a:70:d6:8d:96:
40:ed:d6:7d:94:f3:80:b9:1b:9b:4e:ae:45:4c:48:7f:db:99:
5e:b3:78:9c:03:24:e5:10:8c:ff:00:58:00:ec:f6:6d:b5:9d:
bc:6f:71:4c:76:a2:3f:0f:44:d8:fd:91:4b:dd:f0:e4:ae:a8:
37:54:8a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:46:28 2025 by rpki-client