Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
File: QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft (raw, json)
Hash identifier: fth8cwZmaXnU7Yx42zvuPiwsRaFACxkSFkP8N0CoTgM=
Subject key identifier: 69:D7:A0:F3:E9:BF:01:E6:DD:03:5B:04:7A:88:4C:63:93:74:E3:94
Authority key identifier: 42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
Certificate issuer: /CN=42004477243ca20b95dc8efe07337639806f6075
Certificate serial: 019677558C8066E2012261FBCE0227C05201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
Manifest number: 145D
Signing time: Sun 27 Apr 2025 13:00:17 +0000
Manifest this update: Sun 27 Apr 2025 13:00:17 +0000
Manifest next update: Mon 28 Apr 2025 13:00:17 +0000
Files and hashes: 1: OEwb1lDHunikfNaNODhoAnbiQCo.roa (hash: wWLLrhKTcf6mPU2Bqqwm1puc/7JHEkcQ5M3ZaPHxpgg=)
2: QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl (hash: y/z8aPK1w5A5eWsjNKO4Qabc8Gn9hzRNnHjFWfvKpPA=)
3: vn8Vk2vP0QzgnWs8YePhZCt8-Lc.roa (hash: NAYB0xo+Xhi57/QawXnfFqpG2CzRv0IH2N4vezreDYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:8c:80:66:e2:01:22:61:fb:ce:02:27:c0:52:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42004477243ca20b95dc8efe07337639806f6075
Validity
Not Before: Apr 27 13:00:17 2025 GMT
Not After : Apr 28 13:00:17 2025 GMT
Subject: CN=69d7a0f3e9bf01e6dd035b047a884c639374e394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:89:73:7e:1e:f3:09:86:a4:f8:7e:a6:10:2f:
22:d1:b3:9f:2c:b6:bb:2d:81:68:18:ee:53:b8:2f:
ea:22:94:06:8e:1a:d4:a9:f0:5c:2f:14:9c:10:1d:
57:69:90:56:28:b8:c1:47:8b:4d:c2:a4:26:3a:e0:
7e:10:3a:5c:6f:5a:00:df:29:b0:fa:3a:e8:17:cf:
eb:ff:e6:9a:3d:b9:20:79:a8:f8:4b:d9:ea:86:ab:
5a:7d:da:95:13:97:01:bd:e2:14:fb:a4:42:f0:6c:
18:b3:23:06:37:22:9d:ed:34:f9:c1:4a:0f:13:61:
da:50:6b:13:6b:bc:c8:bf:a1:94:04:ac:41:fe:54:
da:10:3e:64:6d:01:11:0a:98:d5:3f:84:bf:56:4d:
ad:a1:a5:67:3c:a3:c9:1c:3d:fe:7c:92:1f:13:05:
2a:d9:e4:a4:f7:41:db:66:36:39:e4:e1:02:15:8e:
a4:55:5a:2f:5e:8b:5a:67:40:99:bd:79:ec:e3:e2:
c7:1f:d8:11:a2:54:60:c5:b9:3d:db:57:70:d8:9d:
f9:88:af:88:6f:a2:68:c9:51:f6:45:26:85:e6:59:
fc:6d:31:db:01:48:5c:04:40:89:26:e0:0e:e5:39:
b6:44:6d:80:fb:f2:1c:c1:d4:8c:7b:3b:0d:4b:f9:
a2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D7:A0:F3:E9:BF:01:E6:DD:03:5B:04:7A:88:4C:63:93:74:E3:94
X509v3 Authority Key Identifier:
keyid:42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:7b:05:f8:e4:d9:e2:1a:bb:35:81:60:9a:9f:5d:67:f9:25:
0a:07:84:19:5a:8d:84:f7:a2:4e:14:57:2d:ea:d1:56:d5:ed:
8c:4c:c5:5a:e4:bb:ef:1e:38:07:1a:84:c9:b0:c1:33:57:30:
bb:fa:41:a8:20:a1:50:49:57:61:ee:c7:0d:16:55:13:29:1c:
76:d9:9e:73:a9:da:b1:0f:2d:2a:18:9c:45:f0:77:83:14:f2:
6f:09:74:4b:32:25:0b:ea:4d:11:35:59:fa:ea:b6:df:10:85:
53:ca:c1:69:39:64:4e:29:02:03:c4:d3:4e:a0:3b:77:44:0c:
64:d2:02:e9:3e:01:f8:15:21:9b:df:dc:14:a5:40:74:67:8e:
2f:99:9e:22:5d:89:08:fb:aa:cf:23:30:45:80:c2:0d:f2:fc:
b8:62:99:22:ae:00:29:4b:51:4f:c1:21:ee:2d:3f:d2:7e:50:
01:dd:1e:fd:96:ca:e0:ec:0d:ff:3e:30:bb:5d:21:6d:62:2b:
70:70:b7:ef:8d:20:92:9f:5b:ca:02:79:a8:24:81:3e:49:5a:
56:9f:f2:db:09:d3:2e:9d:59:e9:5f:48:c0:12:7c:cc:e9:77:
be:4c:38:4b:6b:42:1b:00:1c:51:9a:be:ab:16:b5:9a:cd:97:
79:5f:50:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:17:41 2025 by rpki-client