Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
File: QdELiOsk9iYtkxU2il0B4eCGDE4.mft (raw, json)
Hash identifier: suM2KdZVjMh4uwRXEX1X2iDxhiK6RTTtlWHofBI+plw=
Subject key identifier: 24:75:E2:90:10:58:45:EA:46:B0:B0:F8:7A:C4:C2:1E:DD:B3:96:CC
Authority key identifier: 41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
Certificate issuer: /CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Certificate serial: 01969A4F5F1BD7FC647B684DDF91E6E22396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
Manifest number: 0AF8
Signing time: Sun 04 May 2025 08:00:14 +0000
Manifest this update: Sun 04 May 2025 08:00:14 +0000
Manifest next update: Mon 05 May 2025 08:00:14 +0000
Files and hashes: 1: MxIW_z7Ebidq95zbkkCpozAg-qo.roa (hash: Ne9BRTxSbvyD3v1mKUKjrJIdCst7ww6cgLtpKgmPXO4=)
2: QdELiOsk9iYtkxU2il0B4eCGDE4.crl (hash: IQXu7Bk5gMi0f5J2087yYQPNv1w2WVHq+9lbzhVcJAc=)
3: iF0hWqV8nyrtwGMxvXkpeZV-Ad0.roa (hash: NsX4Tk5b/sJjbOHt4Xm/gMH0eUzDRvHxvl47C618GF4=)
4: pK_RWKvtbpfARxQqcIN51CNOVR4.roa (hash: gYB8+JoJ6UyQv4AugtpSBUDhjHrwgsXQ9hiZfsU43O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:4f:5f:1b:d7:fc:64:7b:68:4d:df:91:e6:e2:23:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Validity
Not Before: May 4 08:00:14 2025 GMT
Not After : May 5 08:00:14 2025 GMT
Subject: CN=2475e290105845ea46b0b0f87ac4c21eddb396cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:72:96:c0:ac:a8:38:63:27:f2:94:e8:c0:
89:dd:81:e9:7f:ca:6e:6a:b1:ff:83:0c:80:37:99:
40:04:e3:2b:f5:ae:f6:4e:f3:bf:d4:7d:c2:13:92:
3f:d3:2c:80:c7:af:2d:7e:c0:2c:da:4d:0e:c5:f2:
45:94:53:4d:79:45:63:35:e3:23:ef:bc:70:c3:3a:
9e:5d:7f:ae:13:bf:56:f3:d5:0f:3c:08:0b:3b:59:
35:3e:45:07:c9:ff:ba:cc:57:85:c4:aa:18:6b:1b:
8a:6b:a1:1f:38:e8:77:25:2c:28:f2:b0:45:87:6c:
f6:a3:0d:14:87:b2:e4:35:36:c3:31:60:e5:2b:2e:
59:c1:c9:52:14:96:ff:9c:78:d8:0b:92:76:09:bb:
eb:fc:aa:cd:0a:34:93:01:04:94:2d:b7:ef:e7:46:
24:a3:24:ab:79:37:79:55:5e:a6:8c:1f:37:78:d1:
9c:52:9f:8b:70:ea:cd:3a:a8:4f:28:2a:53:c2:9e:
d0:be:8e:ef:43:a9:4c:97:78:98:0b:14:2d:6a:29:
65:11:cb:ad:3f:03:f5:e4:43:48:e4:78:68:38:4e:
d9:f9:94:18:92:a0:1c:aa:31:0a:0b:10:8f:64:cc:
af:4f:1d:8a:8d:55:a0:26:41:85:2e:f9:e3:91:87:
17:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:75:E2:90:10:58:45:EA:46:B0:B0:F8:7A:C4:C2:1E:DD:B3:96:CC
X509v3 Authority Key Identifier:
keyid:41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:88:a2:5d:04:73:8e:bb:e0:51:6f:76:5e:20:2a:8c:80:37:
d8:8e:a0:32:9f:e6:73:14:03:31:75:41:55:06:5d:0c:54:bc:
7b:98:48:b6:6c:7b:aa:11:0e:8c:a7:71:6b:e2:c7:7b:77:b9:
2d:1a:7c:04:5a:48:e3:8b:1f:9e:33:ab:a4:93:21:c7:e7:57:
03:01:fa:b7:58:36:4d:86:2f:c6:72:f7:4d:5d:a7:9c:a3:2d:
0f:f6:cf:f8:c7:b7:ff:9e:53:6e:4b:00:34:82:74:41:08:b7:
bb:54:93:f9:80:6a:a5:94:7a:54:39:66:fb:92:25:86:6a:b8:
85:d7:8a:8a:4f:7b:f0:59:bf:08:f7:d9:4f:5e:bf:58:1e:45:
b1:c6:ba:bd:24:20:f6:90:bd:4f:e7:56:8a:f4:79:30:0b:82:
59:a3:89:58:5a:f2:1c:86:3b:f1:eb:2f:22:a0:b4:c5:a5:23:
a4:9a:29:a8:e5:80:85:94:be:87:53:c9:56:f3:94:03:7f:50:
80:35:ad:9b:4b:15:a7:2a:ea:a0:8e:6b:e3:95:32:42:23:b4:
48:d6:af:1b:77:e0:03:25:ab:9e:62:4e:4d:53:c4:00:e9:91:
2b:c7:6c:5b:6f:f2:41:d7:e9:81:33:c1:7f:63:88:04:1a:41:
ab:dc:21:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 10:14:01 2025 by rpki-client