Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
File: QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft (raw, json)
Hash identifier: k4P0dNmeZTBzfHmVZgGl4uZ5pJCLZXEjsK6YzX3/m6Q=
Subject key identifier: 46:1D:7D:69:97:A0:4E:EF:4C:02:85:31:06:D6:A6:78:96:F8:7B:C6
Authority key identifier: 41:E2:39:2B:65:48:B0:9B:18:A6:4D:3E:50:80:BB:BB:92:79:31:0B
Certificate issuer: /CN=41e2392b6548b09b18a64d3e5080bbbb9279310b
Certificate serial: 01967E6AE0DFCF21A7522556F497E912D1A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
Manifest number: 0BFA
Signing time: Mon 28 Apr 2025 22:00:55 +0000
Manifest this update: Mon 28 Apr 2025 22:00:55 +0000
Manifest next update: Tue 29 Apr 2025 22:00:55 +0000
Files and hashes: 1: 2jf60Yjy6HLBv6d8yR7rie7dcvM.roa (hash: KUJJAA4N19gfVcdXpDwoxv1pVLrdLYxvm5tedzjrpBo=)
2: QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl (hash: jDXoJKyhiGENxtdbTZ47B28h+Azn4pf2vQl6xAjiEwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:6a:e0:df:cf:21:a7:52:25:56:f4:97:e9:12:d1:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e2392b6548b09b18a64d3e5080bbbb9279310b
Validity
Not Before: Apr 28 22:00:55 2025 GMT
Not After : Apr 29 22:00:55 2025 GMT
Subject: CN=461d7d6997a04eef4c02853106d6a67896f87bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:45:3b:df:76:3d:ea:e5:51:98:c2:be:72:43:
91:03:a8:a2:4a:76:cb:b3:a9:3e:76:a4:cc:48:51:
3c:cf:b6:9c:74:ce:b8:ee:91:3a:0b:ec:d2:48:ba:
43:29:02:1d:d7:9f:a9:cd:1c:8e:a9:a1:30:b9:9c:
3c:cb:cf:4d:6a:3f:44:b8:20:ee:53:7d:8d:8d:88:
e7:84:80:97:c5:70:30:96:2b:a0:4c:1a:06:1f:67:
41:6f:88:8f:50:25:13:27:86:c0:e4:94:77:e1:d5:
f7:b4:ac:5e:f0:0b:10:54:78:6d:a8:3f:fd:42:07:
72:37:2e:dd:96:67:10:65:46:20:6f:aa:41:89:c5:
63:74:8f:d7:fe:cc:d2:bc:cf:bb:c6:02:43:bf:31:
00:1a:a6:14:e0:51:b0:c1:29:e9:00:b1:59:bd:f7:
1b:dc:3c:1d:b7:dd:26:5e:1d:a5:e6:29:a6:54:a9:
67:b4:67:36:5d:7a:55:82:a3:1a:bf:0f:2d:ed:0c:
f6:e3:6c:0f:c0:6a:06:53:c7:b3:99:58:b6:cb:b2:
db:28:7e:49:b4:b4:c5:23:e8:1c:c3:32:88:65:3b:
99:30:1a:7e:5b:53:b0:44:3c:9b:51:29:22:87:c1:
a2:4d:97:95:16:6f:83:7d:9c:bc:8f:52:5c:b6:01:
85:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1D:7D:69:97:A0:4E:EF:4C:02:85:31:06:D6:A6:78:96:F8:7B:C6
X509v3 Authority Key Identifier:
keyid:41:E2:39:2B:65:48:B0:9B:18:A6:4D:3E:50:80:BB:BB:92:79:31:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:98:9a:37:f6:c5:ab:93:08:7f:98:f7:e9:e0:39:b2:e6:ea:
ac:2f:e2:f3:21:9b:c9:fe:b9:81:26:cf:13:1a:9a:6e:f2:4f:
46:8b:ca:33:c2:37:ef:56:2f:13:c2:ef:3f:b8:e4:46:78:b5:
aa:fc:6b:b3:a6:dd:b3:e8:af:3f:59:c8:70:21:03:35:20:01:
a4:a1:53:92:0f:e4:ff:15:54:18:1f:9d:8c:10:ff:fe:f1:1d:
10:ce:8a:00:67:73:66:58:32:12:ff:89:25:0f:3d:5d:72:05:
f6:0d:62:1d:bb:76:ea:ba:a6:36:aa:6a:24:50:fb:93:fd:34:
dc:b2:0e:17:09:99:f6:74:7f:5d:80:0a:bc:7f:1e:cc:16:e0:
b4:68:c6:62:2b:e5:97:5b:2f:7c:17:57:db:17:75:8a:af:4d:
35:dd:93:91:6b:81:0e:6e:b7:0c:b4:27:e6:59:92:1c:c6:f6:
52:c6:68:f0:df:31:7c:57:95:ea:d0:bd:19:30:5d:b5:0d:cc:
46:17:a1:b7:22:f7:39:59:4b:fe:c8:8c:34:4c:70:82:d9:96:
d7:21:28:5f:c5:8d:e6:e2:a1:df:66:87:e6:ec:bb:12:ea:0f:
78:9e:56:45:6e:37:35:50:12:e7:e2:81:8e:16:66:15:c1:6a:
32:3b:99:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:40:07 2025 by rpki-client