Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
File: QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft (raw, json)
Hash identifier: n28veiSepEIta2vMlsqz77BDYFIM8Z83iBCBO7TdxB8=
Subject key identifier: EF:1D:D4:FF:C2:CE:38:D8:93:BF:0A:2F:5C:35:E3:DE:46:F8:14:80
Authority key identifier: 41:9A:82:BE:1E:16:42:2F:9A:88:54:9A:F6:D5:42:48:1D:69:1A:C9
Certificate issuer: /CN=419a82be1e16422f9a88549af6d542481d691ac9
Certificate serial: 01968548227CA185940FC9EFDE60AF0DA0F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
Manifest number: 040B
Signing time: Wed 30 Apr 2025 06:00:19 +0000
Manifest this update: Wed 30 Apr 2025 06:00:19 +0000
Manifest next update: Thu 01 May 2025 06:00:19 +0000
Files and hashes: 1: QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl (hash: MdG6yrYOAjIFub9RkEJArymWkytK1UzputyudT9pZvk=)
2: ixxoDXsLiKFHG8cJ3pni9CuIWeY.roa (hash: e7F9bx5lz4I+jxRKeA3TL2cV3HxTGyF8ndmJymIUkLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:48:22:7c:a1:85:94:0f:c9:ef:de:60:af:0d:a0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419a82be1e16422f9a88549af6d542481d691ac9
Validity
Not Before: Apr 30 06:00:19 2025 GMT
Not After : May 1 06:00:19 2025 GMT
Subject: CN=ef1dd4ffc2ce38d893bf0a2f5c35e3de46f81480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:64:63:49:8b:94:f2:25:23:3f:35:60:f1:62:
77:6c:90:a7:3e:a1:df:7e:a8:c5:b8:21:92:de:d6:
7b:52:da:21:16:d6:5c:44:b0:72:17:84:8d:9c:ab:
f4:dd:33:30:32:5e:35:64:c0:5f:ff:fe:02:10:c1:
77:72:fe:1d:0f:4f:84:d9:22:0e:ad:64:0c:67:58:
67:a9:a5:27:30:43:e7:ae:89:36:a5:b6:88:cf:89:
59:3b:18:12:0c:4a:6e:93:8a:0d:4f:fc:9c:9d:5f:
17:61:ab:07:8f:cf:67:3f:84:83:c4:21:87:98:96:
c0:fe:18:e5:86:25:2e:a7:ae:3b:35:97:73:f9:95:
9a:40:65:0d:c5:d9:14:fd:17:94:16:5e:2b:85:88:
99:a0:69:7a:17:05:2d:5d:52:69:c1:bc:7f:3f:50:
e6:c6:40:ab:32:11:04:72:b8:d2:ce:4e:d9:21:4a:
d5:a4:93:a3:a4:50:ca:84:ea:a6:0c:83:04:43:8c:
4e:44:8b:4e:be:c3:e8:80:74:20:cc:05:8b:ef:91:
e4:c4:6b:e6:d5:96:22:7e:cc:d0:a3:01:a0:c9:e3:
b4:46:e7:ec:72:e1:89:01:e3:69:dd:f4:93:ef:db:
3c:ad:ab:93:64:d0:15:dc:6f:26:9b:a9:37:21:9c:
15:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1D:D4:FF:C2:CE:38:D8:93:BF:0A:2F:5C:35:E3:DE:46:F8:14:80
X509v3 Authority Key Identifier:
keyid:41:9A:82:BE:1E:16:42:2F:9A:88:54:9A:F6:D5:42:48:1D:69:1A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b4:88:7b:34:61:e8:e0:41:b5:f4:f2:83:09:3a:42:21:08:
20:c2:75:8d:55:4a:f9:65:9c:ed:36:20:f1:ae:22:82:f5:41:
34:ff:0c:76:67:ab:c7:71:14:60:66:e8:f0:46:14:9b:82:ff:
98:c3:38:01:38:79:fa:b8:9c:11:d0:cf:6d:b5:99:3f:c6:bd:
25:de:c0:b6:64:37:40:b7:01:aa:d9:c6:b6:47:84:ab:6c:c2:
c8:8e:18:77:5d:d9:a7:b6:e2:c6:98:41:6c:45:bc:af:41:03:
72:cf:b3:03:f5:b9:4d:04:ce:0d:04:c3:25:12:10:f6:3d:3d:
96:2e:a3:a5:69:e1:b5:30:a6:40:6c:dd:d0:d5:d2:ae:a7:4d:
64:95:0f:85:35:ba:67:20:89:dd:51:6c:71:e5:85:7c:12:24:
e1:b8:12:ce:72:f2:5e:d9:c1:2b:2b:c9:a1:14:b1:78:dd:8a:
dc:2b:6d:a4:23:f6:6f:94:a3:6f:1d:b5:ef:ee:e0:0e:6b:da:
5c:9a:f6:b9:62:ec:e1:84:86:00:a3:65:7b:36:2e:34:e8:ca:
2c:66:84:cb:4c:6b:50:b2:38:ef:2b:e0:5d:e2:a9:5f:6d:09:
08:a6:b1:5b:a6:e5:17:bb:cc:77:c7:e7:1e:16:75:5c:9c:79:
62:a4:07:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 10:19:52 2025 by rpki-client