Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
File: QdoQ1mXBDhy27GwhUOPmAkBFudo.mft (raw, json)
Hash identifier: uOyTgO/d0wv/6fkAZaYy5kQTnZJSqSLDQIbnikGKnaQ=
Subject key identifier: 60:DA:85:64:47:AA:C4:76:68:21:BF:7E:C0:0C:89:D4:38:C8:29:D8
Authority key identifier: 41:DA:10:D6:65:C1:0E:1C:B6:EC:6C:21:50:E3:E6:02:40:45:B9:DA
Certificate issuer: /CN=41da10d665c10e1cb6ec6c2150e3e6024045b9da
Certificate serial: 0196944DB5BB763492A77E209D84949965CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
Manifest number: 0E52
Signing time: Sat 03 May 2025 04:00:42 +0000
Manifest this update: Sat 03 May 2025 04:00:42 +0000
Manifest next update: Sun 04 May 2025 04:00:42 +0000
Files and hashes: 1: QdoQ1mXBDhy27GwhUOPmAkBFudo.crl (hash: AfTGyxQAO9ze1r53sXSHjxPh3gorBK1OpnjMxFNWNaM=)
2: j3zO5OguCGwVjS4_cTve-Ba-iMs.roa (hash: djJiO0HYB1/EJ/pv3egGmNDFEP34QgqPKHUoq0TwlWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:4d:b5:bb:76:34:92:a7:7e:20:9d:84:94:99:65:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41da10d665c10e1cb6ec6c2150e3e6024045b9da
Validity
Not Before: May 3 04:00:42 2025 GMT
Not After : May 4 04:00:42 2025 GMT
Subject: CN=60da856447aac4766821bf7ec00c89d438c829d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4a:cb:51:ff:f0:18:1c:1d:3c:7d:5f:43:29:
72:d7:11:10:23:df:ed:57:db:82:91:70:80:1f:f6:
67:ae:f7:99:f7:a7:81:91:31:ff:8a:b3:2a:11:38:
70:c8:fd:68:89:bc:6d:da:2d:52:07:2c:71:19:df:
c1:54:60:4b:6b:a1:d8:d4:b5:e6:63:d5:82:60:0c:
93:a8:a6:01:bc:60:cb:c1:41:c6:3d:41:5d:30:d3:
23:05:d7:f9:27:12:9b:94:b9:f6:a8:70:95:1b:ca:
95:fe:6b:0f:e0:d6:b5:98:c0:3e:df:1a:f0:5f:27:
bf:e0:9c:a1:99:17:5b:9e:d3:e7:b2:61:25:1a:35:
60:e2:44:0b:e8:99:77:cd:56:c8:ed:7a:21:2a:0a:
7e:f6:f6:4e:ed:03:6b:37:80:a4:59:0d:59:d2:c2:
e7:90:5b:02:d0:a7:2a:56:50:27:59:de:85:c2:b3:
0c:d0:4a:6a:1f:c6:e5:df:34:af:7a:73:05:71:1f:
7b:b9:03:82:03:59:7f:c1:6e:6d:0f:93:6f:0c:aa:
8f:a1:7d:a1:85:f6:5e:35:8f:52:64:14:67:47:d7:
85:d2:04:19:fd:45:4c:85:2f:90:45:6c:df:9a:ab:
c6:aa:50:6f:5e:53:e1:98:35:1f:28:8b:a9:ef:05:
1e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DA:85:64:47:AA:C4:76:68:21:BF:7E:C0:0C:89:D4:38:C8:29:D8
X509v3 Authority Key Identifier:
keyid:41:DA:10:D6:65:C1:0E:1C:B6:EC:6C:21:50:E3:E6:02:40:45:B9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:bf:2e:61:9d:2c:1e:16:96:92:d0:1b:a0:7d:c0:16:ab:44:
be:04:ae:cd:a9:33:3d:02:89:a5:54:93:9e:fe:3e:5a:ed:73:
94:cc:77:2f:56:81:34:d7:69:e1:94:84:26:cc:44:00:7f:14:
3a:94:9e:68:72:9c:f8:7c:1d:da:de:29:66:68:c0:2e:12:1b:
a5:0f:8b:b3:4c:eb:25:ef:98:d9:d4:fc:25:ee:43:c6:3e:c9:
d2:c2:a2:f9:d9:9c:ef:7a:c9:93:41:d9:12:08:54:76:40:45:
62:ae:de:8e:38:c2:07:b7:ec:a0:05:83:dc:02:06:f6:24:5f:
db:80:96:bc:70:81:4c:99:e0:37:a7:c1:74:5f:7f:63:f6:ae:
83:0f:25:43:fe:c5:6b:81:a3:25:44:47:6f:1c:13:96:b4:65:
98:c6:75:1b:ed:8a:3c:8c:fb:59:7a:1d:1d:1d:d3:65:c0:f4:
35:ba:a2:aa:34:25:3d:57:bf:5e:41:fa:b3:6a:35:f6:42:54:
19:52:46:16:70:6e:51:ef:13:44:49:a2:e0:41:0d:3a:d1:05:
80:79:02:46:c0:3c:65:46:57:8b:7d:e6:46:52:ee:66:4b:7c:
3b:ea:2c:14:99:e5:ac:8c:4a:14:5d:fe:46:e3:3c:9d:dd:0e:
ed:82:6d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 06:10:36 2025 by rpki-client