Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
File: 1QTmQeVaSK7gFB4sDSYicQLKptQ.mft (raw, json)
Hash identifier: TcvSlQNM4TXkcANlUAHPXa5tE/IAZ2NifH0ZZquHmiU=
Subject key identifier: 8C:92:8D:68:BD:2B:B6:93:37:FB:7F:76:33:85:E6:0B:AD:0F:54:2E
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 0196729DD3017F596BBC6FA4904701698783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
Manifest number: 0EBF
Signing time: Sat 26 Apr 2025 15:01:07 +0000
Manifest this update: Sat 26 Apr 2025 15:01:07 +0000
Manifest next update: Sun 27 Apr 2025 15:01:07 +0000
Files and hashes: 1: 1QTmQeVaSK7gFB4sDSYicQLKptQ.crl (hash: QJixIItmeHHndGwl7gwY2adJoSf2xSrpwkLRsxup4rM=)
2: 8394MOfnLh_yAjC5oBzFaMKHm6g.roa (hash: LERfhqf0k5zIruV7b50StKNQsMWe2Ikf9jCbw9DjSV0=)
3: EeJuZ6ZuYMeP-N4AAq72eBlOcpM.roa (hash: oERKMEQ/M129kNgVvoyFhR9aTD1YFXrhdgiUJ9nGJ/4=)
4: FAqlGSimYu0iYfDKBVjHX-VLzKc.roa (hash: WfUufO4W+prwwNDD5ADTi0DPEPfB9t599hV9voFifsQ=)
5: Hl87tUhseJrx8ua_eZqEp-JXnL8.roa (hash: jm0/ddSHPme/VSGWBnMHo4jZkNs2MFEBOqNEBiv6awA=)
6: mS4C21ztnhJ1CQEhvl6HMt_DrKI.roa (hash: +AZpnsUJfoswiZ8L8H5vFWzIYnjuMk5tWnCTTVqTzgU=)
7: wPc7v-r8HN2WgTXXGZ1otoniuZk.roa (hash: 25D1eRRGlzWdsvEgZ+vInaKAYQi119NABCdy4hawamc=)
8: zqQPqsNghrHDurnrcYBnEoZLmxo.roa (hash: X61i/t72QEVUDPoVAXxvJ+YmKuAemlBmWuMndAD4GQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 15:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:d3:01:7f:59:6b:bc:6f:a4:90:47:01:69:87:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Apr 26 15:01:07 2025 GMT
Not After : Apr 27 15:01:07 2025 GMT
Subject: CN=8c928d68bd2bb69337fb7f763385e60bad0f542e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c7:7f:24:5f:5c:ab:59:aa:34:c3:c3:8d:92:
28:c8:36:42:3d:9e:bd:63:a8:50:7d:c1:11:d4:8f:
83:de:85:68:ef:37:03:b1:20:18:a1:4d:e5:3a:86:
ee:72:81:57:26:b9:8d:47:e6:16:6a:bf:58:28:68:
e1:f3:5b:8f:c2:c8:93:91:87:d4:b5:bf:7b:54:e4:
27:13:df:9c:71:4a:14:b2:ae:23:da:41:00:45:55:
fd:19:72:2d:71:bc:e4:3c:9e:63:58:45:b0:f5:08:
e6:58:86:37:88:f3:64:f1:21:45:26:56:07:0a:80:
2e:81:7c:20:2c:f9:b9:dc:60:df:b0:2c:35:61:a7:
cd:fd:02:44:90:0e:bc:5c:50:01:fb:c0:68:bb:4a:
35:78:35:a9:56:a7:77:32:73:0a:a6:14:13:9e:fc:
43:b0:28:20:60:2b:aa:f3:6b:c2:d7:0b:64:9a:ad:
1e:bb:96:ff:cc:c7:4c:5f:cc:f9:8c:c5:43:b3:74:
3b:e5:35:19:b6:48:76:db:10:e4:b3:29:fc:03:e2:
5e:61:20:08:7f:46:5b:ca:c3:45:e3:c6:69:2b:46:
6a:80:74:89:d5:6d:d9:cf:a2:8a:14:18:75:29:ad:
d3:26:40:fd:fc:f7:de:d9:22:73:48:6f:c7:0d:e9:
d1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:92:8D:68:BD:2B:B6:93:37:FB:7F:76:33:85:E6:0B:AD:0F:54:2E
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:92:02:ec:0b:31:21:db:57:af:e9:1e:3c:98:ac:36:d7:eb:
e7:53:94:2b:f0:5a:a1:ba:58:c8:f5:1e:87:5c:52:17:ff:c1:
16:26:d4:d1:90:61:c7:96:0e:41:c8:50:0a:dd:31:07:53:2f:
02:34:aa:6d:d3:98:80:fd:f9:5d:cc:0c:68:bf:76:68:97:41:
84:09:8c:c8:c8:8a:8e:8a:76:81:57:74:52:db:29:f8:ba:76:
48:cd:0c:d5:a0:5f:76:e4:5b:3a:19:d3:17:ba:c1:da:d1:e1:
84:d9:f0:71:d7:0c:cc:8d:3b:1c:6c:de:fd:6d:58:dd:2c:a7:
29:95:b8:19:bb:b0:a5:d2:c3:e5:0b:e9:f6:ec:cc:5f:83:fe:
be:d4:07:3f:f5:e0:b1:b8:b6:5c:4c:87:0b:22:03:ee:be:4f:
19:bc:b6:4d:3d:83:aa:b1:89:f6:27:46:e5:28:04:41:37:b2:
cd:49:c5:fe:36:84:48:96:cd:32:93:fa:d4:d8:2d:b7:fe:cb:
7b:6c:7b:cf:5e:c6:c7:90:7a:81:e2:dd:5d:10:64:07:97:08:
39:4f:99:04:9b:5c:46:ea:0e:03:e7:14:28:b3:2c:43:08:83:
9e:8e:e9:78:3f:71:45:55:95:32:b8:8a:a9:4a:b2:68:02:e4:
ca:0d:0f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:14:46 2025 by rpki-client