Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
File: QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft (raw, json)
Hash identifier: TeyZt80r/lhWr/UaMkpG9lq/KGrGjOyomOetblWvlEs=
Subject key identifier: B8:90:EE:5F:1E:EA:01:E7:01:EC:8E:8B:21:CF:CD:06:5C:0B:2C:BC
Authority key identifier: 42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
Certificate issuer: /CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Certificate serial: 01967D5795A39B521A5F9B8E5997880482FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
Manifest number: 124F
Signing time: Mon 28 Apr 2025 17:00:13 +0000
Manifest this update: Mon 28 Apr 2025 17:00:13 +0000
Manifest next update: Tue 29 Apr 2025 17:00:13 +0000
Files and hashes: 1: F6ObM6UnximfbwiH1YL38MiUlBY.roa (hash: FMTxgNBaoS8PjWTC2HJz86nipqDf/pRuOEnb+E3AC9c=)
2: QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl (hash: kgqSBKlTFALlsJVx7ryzYtyHwwQ7YUidyWPHgpV106s=)
3: sf13oGu2DAluNtQ_y1zSmgQAeHE.roa (hash: gqTUmbOHfz421/G+vBG6eJTQ7lB+mn9m4coW+T9SV2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:57:95:a3:9b:52:1a:5f:9b:8e:59:97:88:04:82:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Validity
Not Before: Apr 28 17:00:13 2025 GMT
Not After : Apr 29 17:00:13 2025 GMT
Subject: CN=b890ee5f1eea01e701ec8e8b21cfcd065c0b2cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d8:26:3e:57:e4:44:dd:76:30:15:6a:37:35:
43:39:f2:08:ee:4a:ab:a6:ad:57:6c:14:2e:f7:75:
87:44:ce:2d:f6:30:f5:ef:bc:5d:1d:2e:f1:54:dd:
ae:ea:22:f8:8f:bc:01:07:bc:06:fe:6f:b1:dd:e4:
60:66:e4:76:58:73:43:7e:ee:da:26:0b:3f:1a:8c:
a1:d1:e8:48:7a:a0:53:2e:54:89:c2:6e:19:be:c2:
b7:6c:f4:f5:da:71:11:0c:3e:f0:41:47:ce:87:3a:
89:98:b4:0f:11:9e:51:50:d8:c0:a5:22:8b:e3:0c:
1f:c3:30:6d:b4:49:0c:e4:05:69:d8:79:c1:23:73:
91:03:8b:f8:aa:6f:b0:26:71:54:ac:2a:71:4f:6d:
db:40:b1:91:02:72:23:bc:34:37:8e:a2:c5:da:60:
95:3c:79:53:59:36:0b:02:e2:6e:10:72:34:33:2b:
7d:e4:ce:8a:1e:39:8b:af:63:72:e4:e2:c2:19:c3:
76:99:f7:2c:f6:66:26:ae:4b:70:a2:ee:43:a5:88:
e2:db:57:8f:d7:42:22:40:4c:da:ec:98:bd:30:b3:
bf:7f:8a:c9:33:a6:0a:a1:ad:9e:e3:94:18:6b:2c:
cc:69:b7:9c:31:ca:3d:44:80:fd:74:87:ea:fa:23:
29:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:90:EE:5F:1E:EA:01:E7:01:EC:8E:8B:21:CF:CD:06:5C:0B:2C:BC
X509v3 Authority Key Identifier:
keyid:42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:58:2d:c4:7f:f8:35:df:a8:54:c5:b7:7d:7f:f4:55:0a:bd:
9a:6b:0b:8c:f7:c0:b7:eb:0a:f1:16:cd:e1:ce:94:dd:20:73:
a3:bd:f6:8c:34:d4:dd:33:e8:16:65:72:92:04:b9:f4:65:b0:
cd:bf:60:87:c7:8f:4e:95:14:a5:0c:52:5f:8e:e6:06:b0:0d:
4f:1a:e6:61:fd:8a:7d:61:46:13:17:d3:ee:27:0f:bb:04:e3:
fd:63:f6:d4:a5:18:96:c7:6c:1d:7d:ba:24:ac:27:b1:61:c6:
ec:0c:bc:1a:90:67:40:13:e4:27:57:91:d7:fc:d0:a0:30:98:
08:db:71:ca:37:c2:2a:28:69:fe:9c:80:04:9d:ab:99:a1:23:
4e:4c:6c:15:e7:3d:97:9f:d8:86:1c:c8:0e:44:a9:be:b4:96:
92:0e:62:d2:83:3b:6e:1f:ee:80:2e:dc:b7:57:9a:72:04:b1:
03:50:90:4f:78:26:7e:30:46:7c:47:58:48:d4:bd:f4:19:ce:
28:1c:90:c1:17:61:ed:4c:ec:51:b6:08:5b:2c:5a:ca:b1:eb:
44:b3:f4:c6:cc:55:b6:ba:d7:1f:04:b3:46:b7:c2:75:70:c1:
a7:02:3e:91:08:ab:82:5b:2b:79:1a:03:61:46:f5:de:af:78:
49:3b:f2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:19:03 2025 by rpki-client