Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
File: Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft (raw, json)
Hash identifier: 3Ojuzjm2xVSBIHwBfD+Z3mKnnefWnflyx3LLCzIWRnY=
Subject key identifier: D7:33:65:32:2F:74:60:8E:A7:DD:A3:18:FF:30:BC:D4:B7:DF:79:EA
Authority key identifier: 41:CE:DE:90:74:92:E5:0C:95:12:63:95:78:81:BC:3C:C5:CE:30:AE
Certificate issuer: /CN=41cede907492e50c951263957881bc3cc5ce30ae
Certificate serial: 0196790D547C0AC465C4DC67C02747FFD84D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 21:00:38 +0000
Manifest this update: Sun 27 Apr 2025 21:00:38 +0000
Manifest next update: Mon 28 Apr 2025 21:00:38 +0000
Files and hashes: 1: 8cg6ls0eHu6-sPH76NoZH2FkNOI.roa (hash: 7HXBEdZlw4igKW3gOd2YE5Q8LK/5FqBXGlSg1vYH3n8=)
2: Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl (hash: tRffKJP8NLMW9vteHedtsU9Tt6BgMGJL+dOGxEaR5YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:0d:54:7c:0a:c4:65:c4:dc:67:c0:27:47:ff:d8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41cede907492e50c951263957881bc3cc5ce30ae
Validity
Not Before: Apr 27 21:00:38 2025 GMT
Not After : Apr 28 21:00:38 2025 GMT
Subject: CN=d73365322f74608ea7dda318ff30bcd4b7df79ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:06:e1:0e:63:9e:39:09:8c:da:42:56:ad:b8:
ea:71:b6:96:a2:16:e7:72:e4:57:e4:72:55:01:d7:
31:ac:2b:b4:8c:3c:f3:5f:47:64:ef:1a:72:72:c5:
04:2a:83:3d:62:8c:ac:f1:d7:c7:1c:4c:24:ad:3d:
e0:55:2e:06:bd:95:9c:b1:8f:44:c4:03:a5:33:77:
b2:48:ea:e1:4f:6e:4e:57:2f:51:ba:c1:28:84:3a:
8c:2c:d1:46:2a:96:10:b3:e0:34:e1:b5:26:56:20:
59:2c:a6:54:38:1e:71:54:54:d2:c9:fb:c9:90:ec:
af:ce:13:f3:c6:74:46:ea:48:28:45:47:e0:3d:e5:
57:80:ad:0f:e0:e1:c8:16:04:97:74:78:13:f2:10:
77:ec:5c:47:fb:0c:ee:7f:1e:b9:d2:8f:b7:71:84:
fc:4f:4a:5e:a3:3a:21:9e:e7:1d:13:fb:ac:31:00:
0a:65:94:7f:0c:96:25:f9:18:be:39:79:34:95:54:
c7:44:f7:a7:15:d1:3d:61:6e:89:78:40:04:5f:31:
a5:88:c7:8e:77:84:1b:78:52:ce:3a:3a:8b:0a:78:
59:79:b2:4c:67:6e:d4:df:ed:e2:76:00:d8:e8:fd:
c5:86:2e:ce:97:79:55:e0:84:ff:5d:4c:49:00:cd:
0d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:33:65:32:2F:74:60:8E:A7:DD:A3:18:FF:30:BC:D4:B7:DF:79:EA
X509v3 Authority Key Identifier:
keyid:41:CE:DE:90:74:92:E5:0C:95:12:63:95:78:81:BC:3C:C5:CE:30:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:be:de:8a:47:3e:9a:7d:b4:9b:71:74:4b:c0:92:60:dc:50:
bc:55:72:c1:23:67:2f:8f:63:2d:0e:ec:c6:06:bf:1a:39:9a:
6d:0f:ee:a1:b9:d8:fb:35:70:c7:c1:f3:be:a6:fe:0b:e3:b4:
b1:99:27:ec:d0:ef:a9:d9:a9:7d:ca:87:94:7a:3a:0c:01:bf:
d2:85:2b:af:e0:0a:6d:34:ba:1d:ec:07:83:7a:fb:65:41:a0:
66:39:bd:ac:68:b4:13:43:6b:1b:dd:24:04:af:e9:91:3f:6f:
7b:60:db:41:0e:8a:4d:29:ac:26:d3:f7:b2:c3:ec:07:8a:d6:
bb:20:a3:61:95:7f:1f:64:46:ed:6b:7c:73:10:e2:0e:85:6f:
c5:87:ae:be:c4:03:90:83:c0:89:12:d0:9e:8f:f0:b0:f1:ae:
54:6f:74:1a:03:d1:b5:6f:8d:0d:fd:48:46:d5:3f:02:ab:80:
9d:28:f5:79:9b:14:25:35:4f:c5:ac:81:fd:25:b9:6f:c0:53:
0b:3b:aa:5a:eb:2d:49:db:a6:c3:5d:39:ad:9d:a3:68:3a:c8:
8b:78:46:0e:2d:c7:ac:70:57:c0:81:7b:25:40:3a:d2:4c:c7:
7c:2b:9c:0e:14:83:0d:64:bb:f5:9c:7b:11:d4:8c:38:0a:d3:
dc:ab:80:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:53:40 2025 by rpki-client