Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.mft
File: qnD7s9sihDfWBXmaxPRZjSLhPhs.mft (raw, json)
Hash identifier: Ims4bopjucUPYvJkep4fnrpMFosGyDczwyh9xKAEiB4=
Subject key identifier: 35:B7:D2:FC:57:BB:84:AF:59:A1:C2:9D:A4:42:85:24:20:62:3C:87
Authority key identifier: AA:70:FB:B3:DB:22:84:37:D6:05:79:9A:C4:F4:59:8D:22:E1:3E:1B
Certificate issuer: /CN=aa70fbb3db228437d605799ac4f4598d22e13e1b
Certificate serial: 0196760C9230222F55B70385727988E2031F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnD7s9sihDfWBXmaxPRZjSLhPhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 07:00:57 +0000
Manifest this update: Sun 27 Apr 2025 07:00:57 +0000
Manifest next update: Mon 28 Apr 2025 07:00:57 +0000
Files and hashes: 1: JDPCHXAUbfBXZ-JAE6cFE-tGXMI.roa (hash: bOxTgT+7J9XF4HocPumdm4M3ak6meIWnJq5cg5Hpmfs=)
2: qnD7s9sihDfWBXmaxPRZjSLhPhs.crl (hash: 7DzPhy31XSrQFOPh7IUPhTL7hypDS7SpCcCgPkHRfJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnD7s9sihDfWBXmaxPRZjSLhPhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:92:30:22:2f:55:b7:03:85:72:79:88:e2:03:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa70fbb3db228437d605799ac4f4598d22e13e1b
Validity
Not Before: Apr 27 07:00:57 2025 GMT
Not After : Apr 28 07:00:57 2025 GMT
Subject: CN=35b7d2fc57bb84af59a1c29da442852420623c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1d:e5:63:16:53:7a:ac:27:a2:3c:f4:79:d3:
a2:54:2f:49:21:aa:d1:c0:86:c1:92:fe:b4:0e:ca:
2a:12:f3:49:89:d7:e2:e9:f2:eb:ba:65:b1:1f:6f:
49:13:13:b4:3f:b2:b2:66:02:c4:1f:4e:b0:1c:77:
3f:4b:e1:36:71:d8:6c:d9:8b:b4:d4:81:87:09:7e:
21:2e:d1:1c:d9:8a:8d:a8:b2:b7:3f:16:fa:99:a5:
54:db:bc:5a:b4:2a:05:d8:f4:b7:6d:76:5a:d9:db:
80:d8:02:90:a5:4b:5c:49:7f:53:ba:dc:e7:ed:d2:
ed:ed:21:0b:ed:2c:d3:26:4c:b0:5f:c6:1d:1b:9b:
13:aa:3c:5f:30:17:13:a8:f3:bc:6d:73:e4:89:34:
e8:d8:9b:b6:a7:50:15:4d:0c:56:c1:6d:32:4d:9c:
d1:4f:b6:bf:73:de:0c:6b:ac:5b:53:a1:b5:87:d9:
a4:e1:04:65:74:7e:68:d1:28:79:b9:b0:d7:83:1f:
7f:37:e5:a6:1c:9d:0e:f5:05:04:2e:a9:f1:3c:9c:
e1:a4:24:93:b5:70:ef:ff:58:87:44:00:0e:d3:42:
11:96:e7:48:d1:de:7d:1d:71:24:e1:49:e7:ac:13:
95:50:3e:ea:d7:5c:40:04:71:be:8d:9b:d6:ce:93:
9b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B7:D2:FC:57:BB:84:AF:59:A1:C2:9D:A4:42:85:24:20:62:3C:87
X509v3 Authority Key Identifier:
keyid:AA:70:FB:B3:DB:22:84:37:D6:05:79:9A:C4:F4:59:8D:22:E1:3E:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnD7s9sihDfWBXmaxPRZjSLhPhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:df:9d:e9:03:67:29:0c:04:b2:2e:18:3c:a7:e9:e3:3f:0f:
f5:d4:6a:83:95:79:f3:6a:b4:a2:eb:1a:93:2f:02:69:29:c5:
6d:7f:19:de:95:de:db:8b:5e:f4:b0:bd:40:cb:de:87:ef:b3:
ec:33:00:e4:76:a5:9f:ea:97:fe:58:cb:f7:63:25:71:3d:48:
f3:ca:20:47:ac:41:12:15:8b:d3:16:d1:89:4c:9c:58:1a:5e:
82:f6:e0:39:39:2e:54:f9:89:6f:af:36:9c:d9:ea:9f:5d:23:
28:0b:9c:b3:8f:82:bd:46:c8:12:ce:13:1e:72:05:2d:ab:8c:
61:5b:d5:b2:3c:95:81:d0:4e:88:f8:38:b6:5b:a8:fe:64:f6:
83:f2:8d:a4:e0:1a:c5:91:eb:6f:dc:c1:f2:bf:33:6e:f8:e5:
3d:81:77:cd:14:02:8b:36:1f:c8:16:65:55:9e:80:ae:5a:08:
1d:4d:39:20:28:f0:93:86:a6:70:04:fa:17:98:e1:ef:41:1e:
5a:6d:05:8f:35:c0:02:df:c7:e1:21:c3:8d:b8:9c:e8:6d:02:
1d:81:88:05:38:25:cc:d8:9d:16:f8:ac:41:f3:6c:16:1b:79:
1f:3f:ca:24:ed:71:b4:d7:12:ee:e2:56:e3:52:a6:56:a9:69:
a7:85:64:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:53:23 2025 by rpki-client