Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
File: qT8yMceH9x3SSE7gAtpzpxdb0kk.mft (raw, json)
Hash identifier: Awhwn9u2A2+K1wDQpKSfmiicpDgUNhVqE26UMjuN8dM=
Subject key identifier: CB:0B:09:8E:77:F8:92:62:94:D5:50:53:81:8A:05:70:2A:7A:D5:E4
Authority key identifier: A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
Certificate issuer: /CN=a93f3231c787f71dd2484ee002da73a7175bd249
Certificate serial: 01968391074E3F65231445A94FB4D336553B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
Manifest number: 1261
Signing time: Tue 29 Apr 2025 22:00:41 +0000
Manifest this update: Tue 29 Apr 2025 22:00:41 +0000
Manifest next update: Wed 30 Apr 2025 22:00:41 +0000
Files and hashes: 1: dAVSxn9A98KVLUy6EVl5K32SF7o.roa (hash: SrvH5FePM3edQXYJk2ogbac68Gns4DWibjSZvY3sGPk=)
2: qT8yMceH9x3SSE7gAtpzpxdb0kk.crl (hash: 9fOmOMOmA0hbjxsklJIvEKdrZOJAtXxN084WUdE6vMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:07:4e:3f:65:23:14:45:a9:4f:b4:d3:36:55:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93f3231c787f71dd2484ee002da73a7175bd249
Validity
Not Before: Apr 29 22:00:41 2025 GMT
Not After : Apr 30 22:00:41 2025 GMT
Subject: CN=cb0b098e77f8926294d55053818a05702a7ad5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:50:14:85:01:3e:3a:31:e5:64:03:87:ee:d3:
de:cf:b1:a2:e7:0f:fb:fe:83:6b:d0:42:3b:04:31:
2c:55:c6:96:ff:6e:2a:4a:05:81:ab:6e:dd:07:ca:
6d:ee:40:34:7a:d5:e1:8f:e2:e0:eb:9c:64:f1:a2:
c0:68:70:ea:86:ee:e5:dd:e6:4c:1b:fa:5c:88:33:
03:56:1a:4e:d0:c3:ac:0b:17:5b:61:92:17:c2:91:
41:f3:96:41:fb:c6:03:b8:18:bf:8c:ab:91:53:18:
09:f7:c3:38:b0:e4:12:9a:ee:09:7c:d4:92:8a:cc:
ea:57:63:42:1e:b6:6a:d2:80:e4:86:60:4f:7d:21:
9f:e3:f8:3c:91:5b:20:84:52:89:53:1e:9c:48:bd:
a2:3e:32:62:da:fc:a5:b7:ba:11:c6:63:6e:84:27:
a5:5c:5e:cb:fb:5d:fb:4e:b6:9a:eb:c4:c9:b8:3b:
98:70:45:f0:67:b6:05:47:82:7a:e6:60:65:5c:7f:
52:65:35:61:33:4d:c1:e0:1e:a4:83:88:a0:70:0b:
3b:2f:41:73:0a:b7:4a:03:bb:89:23:d5:03:e6:ab:
19:e9:62:b0:e7:32:3a:16:26:66:d9:09:7d:0d:ff:
82:a2:e0:8b:54:d3:82:a6:4d:59:7a:03:f7:3c:04:
07:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0B:09:8E:77:F8:92:62:94:D5:50:53:81:8A:05:70:2A:7A:D5:E4
X509v3 Authority Key Identifier:
keyid:A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:9c:0f:67:a2:db:71:b6:5d:96:1c:19:e2:01:94:bd:62:fb:
e8:82:85:82:ad:44:c8:01:78:4a:8e:70:d2:60:87:7c:3c:9f:
3d:2e:3f:8c:70:12:08:9f:c1:46:70:c0:09:64:44:19:db:bc:
66:c6:4b:3f:1c:48:14:83:7b:93:a7:78:55:90:22:a7:e5:1c:
4f:16:3f:7d:7d:26:95:27:05:14:84:9b:73:8f:3e:e0:48:ad:
d3:90:aa:c0:a7:aa:02:9f:5c:73:a9:54:b5:e3:8c:30:54:74:
7a:cc:d0:0f:f3:c9:ef:49:69:ba:18:45:72:05:9d:74:05:0f:
dd:17:08:33:6c:50:de:90:f1:6f:55:de:31:5b:a2:76:27:26:
4f:27:a6:5c:85:07:bd:99:4b:ff:3d:cc:e5:3b:d9:98:a3:77:
88:07:25:fd:03:0c:fb:f5:7b:fe:2a:e3:87:a5:61:a3:d9:15:
de:d7:4a:da:56:a1:dd:bc:3d:9f:59:50:93:09:c5:05:3e:24:
4e:35:a2:0e:fc:2f:c2:15:16:de:be:53:d4:5c:5f:15:d7:a4:
b3:52:ef:72:cd:11:53:51:0f:fd:a0:25:db:b6:0e:dc:e0:4f:
4d:74:80:7b:38:e5:87:17:3b:67:68:b6:5c:5e:92:38:66:38:
03:61:dc:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:12:32 2025 by rpki-client