Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
File: qycpZC0uNTfZq3xFxR_ibepGi4I.mft (raw, json)
Hash identifier: CmtVwq1tdk+5ui1RJiOUOMY1uqCLcanHJD5DjOYc010=
Subject key identifier: 83:2B:3B:A3:55:C6:0D:99:40:E2:CC:F2:E2:A0:94:87:A9:85:D0:4B
Authority key identifier: AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82
Certificate issuer: /CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
Certificate serial: 01967B699247BA719B6D842067E17807387E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
Manifest number: 1510
Signing time: Mon 28 Apr 2025 08:00:38 +0000
Manifest this update: Mon 28 Apr 2025 08:00:38 +0000
Manifest next update: Tue 29 Apr 2025 08:00:38 +0000
Files and hashes: 1: DjJbJVK4ViblB5hs7VL09DEef2k.roa (hash: cqb7/wQBvYXWlhU0RsJ/gn+FwdkM5gkB/GQuwkcLWgs=)
2: qycpZC0uNTfZq3xFxR_ibepGi4I.crl (hash: 2ejYqnVOUB4O0ofLf0rum1pc0KIhttNf1XPB88lfzPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:92:47:ba:71:9b:6d:84:20:67:e1:78:07:38:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
Validity
Not Before: Apr 28 08:00:38 2025 GMT
Not After : Apr 29 08:00:38 2025 GMT
Subject: CN=832b3ba355c60d9940e2ccf2e2a09487a985d04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cd:88:7f:d1:77:8c:8d:bb:aa:a0:98:64:c6:
67:7d:b4:49:b0:49:12:15:c0:d2:fc:50:1b:13:83:
d0:a3:ed:50:dd:d9:cf:d9:f9:5f:82:d9:f1:63:20:
30:eb:ca:4f:bb:5a:e5:d5:e2:45:ad:fc:9b:22:44:
3e:1d:cb:4d:ac:5e:76:78:ec:41:b1:75:ce:d7:4e:
01:32:e3:93:79:60:58:cc:9b:5d:d1:2a:67:98:22:
c5:cf:23:c5:5a:02:29:35:ca:8d:cb:dd:53:70:00:
a7:55:af:b7:93:2d:df:8d:91:a9:c9:dd:c6:89:a4:
ce:6b:af:90:10:c3:ef:24:89:6f:ed:8d:95:16:bf:
82:93:bf:eb:b3:19:e1:f2:25:63:64:2a:4f:25:5c:
bb:79:e3:72:89:eb:c0:40:81:fc:fe:a2:6a:9a:23:
16:4b:72:26:c4:52:70:7f:31:f3:e4:12:d5:aa:15:
f5:e9:0c:70:5e:ed:5b:bf:92:2e:e4:d2:54:4f:02:
03:47:47:97:f2:94:12:59:68:1d:ac:2b:d6:e1:4d:
34:89:12:36:f8:e4:19:31:0c:9c:b5:a1:3d:65:40:
6d:04:9d:59:fe:46:1f:95:03:36:f3:5d:01:85:65:
c5:53:09:52:8d:01:e2:ec:12:c8:8a:59:38:a6:ce:
24:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:2B:3B:A3:55:C6:0D:99:40:E2:CC:F2:E2:A0:94:87:A9:85:D0:4B
X509v3 Authority Key Identifier:
keyid:AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ed:10:c5:cf:e1:5f:75:e2:6b:65:7b:9d:54:b4:bc:a6:6c:
9f:e3:07:22:f3:96:da:ff:a9:ac:4e:f7:6a:27:e2:78:0f:eb:
d3:35:7e:3d:ea:36:64:2d:14:a0:1b:8d:71:b2:12:b2:6e:c9:
63:c1:45:40:cf:3c:2f:73:69:a9:61:31:d7:da:f0:75:74:ad:
ed:e9:23:1f:4a:27:17:35:69:b1:03:d8:1e:45:e4:20:35:50:
ef:b7:5b:c8:66:f5:f3:91:39:a2:a8:d4:67:0c:22:50:16:c1:
71:b6:da:eb:e9:81:ad:3b:d3:d9:e7:0f:a3:b5:5e:c4:6c:b7:
23:94:80:c3:6a:71:a0:dc:d4:7d:89:f1:cd:cb:fc:0f:dc:2c:
1e:85:e8:20:df:e3:07:e2:36:d8:90:2e:cc:1c:eb:c5:b9:73:
06:6a:33:bb:dd:98:cd:4a:9c:e6:d4:a9:90:ad:ba:31:d4:6f:
f3:40:f0:b2:50:4f:bc:64:f5:4a:0a:e0:69:7d:9c:f1:7c:ff:
b7:29:3e:21:43:58:0c:da:f7:a6:36:0d:57:21:19:83:ed:3f:
a7:d3:0d:e3:36:62:0b:a2:c4:b5:cb:df:0c:72:df:12:16:ef:
9e:f6:65:15:9c:9b:38:a4:9e:70:d7:1e:94:79:88:65:06:bb:
4e:ad:7c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:25:37 2025 by rpki-client