Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
File: QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft (raw, json)
Hash identifier: RfU/jhwLb5J63UnGShMZa0WN+/aSaajb4fTUaTUtzsA=
Subject key identifier: EF:28:47:2F:B3:85:80:A2:AC:60:33:1B:B7:83:40:46:D7:88:A9:21
Authority key identifier: 40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
Certificate issuer: /CN=40339d304499d069aecd8bd0e8fba02e522f576a
Certificate serial: 0196753074C7D7E6EFF71A501A2FC9F243D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
Manifest number: 14A2
Signing time: Sun 27 Apr 2025 03:00:31 +0000
Manifest this update: Sun 27 Apr 2025 03:00:31 +0000
Manifest next update: Mon 28 Apr 2025 03:00:31 +0000
Files and hashes: 1: HM44YU_keUzYw0-k8-_A-z_iUEg.roa (hash: SXS4UlPdGWp6+QLYLhTDdcpIKj693zGOOUmfQDbJfCI=)
2: QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl (hash: dzpPhzo03m4E1oZn0cP4Z2znunuyGtaM/HKKfgp9+SU=)
3: kh936l2vxgccX_jvVlzYGLxpdnk.roa (hash: 1aSc0Ne3PFeWf8CzHXerC/R90wO3YKjdcfKwJxtbP2I=)
4: yR56vcKwFBMaxDiG7yY2cvJ4n0Q.roa (hash: iQ1t4A53B7El/PSKuRvXWWegJvuT/fcPU9ZHNFZ4LFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:74:c7:d7:e6:ef:f7:1a:50:1a:2f:c9:f2:43:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40339d304499d069aecd8bd0e8fba02e522f576a
Validity
Not Before: Apr 27 03:00:31 2025 GMT
Not After : Apr 28 03:00:31 2025 GMT
Subject: CN=ef28472fb38580a2ac60331bb7834046d788a921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:10:72:7e:a1:0e:5d:96:a5:23:37:7f:c3:22:
ea:66:e8:5e:8a:00:b3:47:bb:99:d7:c4:6c:3c:51:
e7:33:b2:a9:bb:6f:a7:b5:33:c9:02:5d:e1:a6:52:
75:de:ea:ad:1a:62:8f:cc:87:59:e8:72:90:42:66:
f4:25:d8:a1:27:a4:4f:0d:83:aa:03:0a:aa:bb:eb:
00:9a:0c:7b:f3:a7:40:d2:05:d4:a1:f1:8a:7b:0a:
44:b0:ac:e9:8c:2b:e0:f3:9b:d7:31:f3:f5:02:98:
0a:36:13:27:0a:aa:01:25:06:2b:11:02:c2:68:aa:
18:b2:91:a0:e6:3a:60:9d:fd:aa:46:89:f1:a1:79:
37:74:b6:ad:4c:43:cf:fc:47:00:78:b6:db:07:32:
3f:df:0c:21:f5:79:fb:26:42:d5:cf:60:73:04:45:
b8:df:c1:86:50:5d:81:93:ab:f8:46:fc:ec:0f:7a:
f9:5f:b2:ae:7c:40:84:47:ec:f1:a4:cc:cc:57:25:
ed:94:3d:6b:63:b9:d4:6a:86:10:84:58:51:e1:9a:
63:02:18:a2:ea:b9:9c:58:99:b2:85:9c:9d:bb:10:
31:de:bb:ab:0e:b1:0a:e3:0e:38:47:03:72:1e:45:
d3:0f:cd:47:b4:e5:80:c6:a8:d2:96:8e:62:a9:af:
f0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:28:47:2F:B3:85:80:A2:AC:60:33:1B:B7:83:40:46:D7:88:A9:21
X509v3 Authority Key Identifier:
keyid:40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:1a:34:36:6b:9c:05:0f:d9:ab:b7:70:fd:e0:69:7b:f4:64:
e7:e0:92:08:7f:d1:6f:18:1a:9e:7e:01:50:9b:bd:54:b6:fe:
db:0e:81:f4:94:59:ff:d4:c1:c4:6e:d4:7d:85:44:38:67:37:
46:3c:b7:ec:0f:73:ec:d2:b0:59:6b:f2:82:09:fe:10:6d:d0:
d4:a6:59:05:4d:2e:c4:0d:0f:1b:94:df:0a:12:8b:ef:18:e3:
59:fe:28:3c:e6:2d:f3:58:88:36:84:67:88:6b:8b:07:71:af:
5e:73:18:5c:55:12:58:79:d3:c9:da:ba:c6:29:85:bb:fe:0c:
c6:49:60:6a:94:b8:2b:6e:65:6a:c1:ed:d4:b4:d4:16:69:7b:
1c:88:d2:ba:c7:93:94:e4:52:6f:04:ec:e9:1a:cc:e7:f7:9f:
89:41:7b:b1:f8:6a:05:f3:81:18:1e:d9:40:ab:ef:f1:92:f6:
04:97:c6:3b:42:61:91:c3:3a:65:4e:84:cd:42:1c:f5:dd:cf:
b8:b8:f9:62:7e:e8:af:c3:26:89:11:83:7b:08:b3:11:80:ef:
5d:d9:88:d2:f1:7c:21:4d:81:bb:2c:e1:e0:41:e5:3b:96:15:
1e:ee:cb:7c:ea:7f:0a:50:d7:f0:74:4c:d1:c9:a5:1f:81:22:
75:25:56:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:48:46 2025 by rpki-client