Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
File: Qb-tl6WMtQy_yE7IZa89ccixha8.mft (raw, json)
Hash identifier: siCKoeeb9cjkFDiIX1Li09hATKXWNwR5K/QiwJy4xzU=
Subject key identifier: F4:CA:4A:0E:28:A2:18:93:C9:00:4A:08:4A:B7:F1:F3:91:E3:53:E7
Authority key identifier: 41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF
Certificate issuer: /CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af
Certificate serial: 01967B69723D796C845B923F165A55EC030F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
Manifest number: 1014
Signing time: Mon 28 Apr 2025 08:00:30 +0000
Manifest this update: Mon 28 Apr 2025 08:00:30 +0000
Manifest next update: Tue 29 Apr 2025 08:00:30 +0000
Files and hashes: 1: Qb-tl6WMtQy_yE7IZa89ccixha8.crl (hash: MdwSa6G88HY8ixdKqeETG/n20q/f8ficwZ+Xfe/8rJw=)
2: TAMhyO_TxaxCZl8ndF5QQYJ7fSc.roa (hash: fwo98qFwUrEP75fKt0AHaKO4fww5cOw9kGra/QKoqNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:72:3d:79:6c:84:5b:92:3f:16:5a:55:ec:03:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af
Validity
Not Before: Apr 28 08:00:30 2025 GMT
Not After : Apr 29 08:00:30 2025 GMT
Subject: CN=f4ca4a0e28a21893c9004a084ab7f1f391e353e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:00:0e:3d:5c:5b:45:b7:6a:19:fd:c8:a0:33:
ff:7b:fb:30:ef:c9:bb:89:04:4f:f9:e3:74:ba:6b:
7f:b3:0a:8d:35:fd:7a:fe:b8:36:5c:8b:2b:8a:34:
a8:de:96:89:bd:ba:02:0c:f7:80:6e:6a:33:54:87:
5a:a1:e0:65:c7:05:5f:ad:90:67:01:5a:c1:ad:de:
70:ff:f5:83:a2:96:d4:ef:27:83:a6:89:86:fa:e2:
99:cb:52:b9:3e:52:f5:6a:19:b8:aa:af:c7:b3:22:
34:93:13:99:f1:2f:30:c8:06:62:e8:15:3e:d2:6f:
de:d6:a6:d8:ec:7a:97:e5:8b:bb:73:db:59:2a:b9:
71:19:00:5a:bf:a3:7d:f2:b2:c8:5c:d1:71:ce:2c:
90:a4:34:74:de:ca:d5:c1:df:4a:4a:61:2f:4d:2c:
47:ae:d2:5a:12:f8:43:de:4d:d5:8c:aa:53:80:49:
1e:05:06:20:8b:8c:cf:54:ad:75:3a:74:20:83:d8:
0e:d5:9f:5a:44:ec:40:74:b6:73:9b:5d:be:a8:ae:
8b:6b:25:78:da:40:ec:4f:1f:bb:d8:6d:30:1e:88:
c1:ee:85:17:a9:40:a0:f0:a6:00:5e:c0:82:fb:2a:
bc:8c:a2:08:3a:57:74:8c:52:2d:63:68:c6:01:1d:
1e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CA:4A:0E:28:A2:18:93:C9:00:4A:08:4A:B7:F1:F3:91:E3:53:E7
X509v3 Authority Key Identifier:
keyid:41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e6:f4:1a:f0:89:7a:f9:0e:75:89:db:59:75:62:bd:a6:a9:b7:
52:28:43:ad:a0:fc:8b:7d:4a:a1:ef:fe:ff:82:3c:5f:f4:3d:
69:2b:77:7a:7b:ca:a1:16:22:0b:33:b1:4f:75:11:32:32:ef:
1d:05:d2:af:4d:f7:95:38:43:b2:87:2c:e5:1d:99:13:eb:77:
4b:d8:64:c4:b0:67:81:75:9b:9f:2e:d7:dc:8d:4b:66:84:96:
32:17:23:74:6e:e7:bf:49:ac:4f:14:12:e6:bb:db:34:08:be:
11:f9:7d:b4:98:c1:4a:1a:be:36:01:be:58:38:73:98:98:b8:
96:be:9c:bb:eb:94:b6:af:9e:43:27:9c:1f:a5:43:b2:d5:61:
46:21:43:39:c7:c0:67:2c:f3:cb:cd:d9:cd:64:08:e3:73:6d:
48:9f:05:3e:1a:1c:88:50:88:c5:50:80:e3:d8:0b:58:d9:07:
08:3f:77:e4:fd:38:d5:27:ac:ae:d2:28:d4:f2:ff:3f:35:48:
07:82:99:2e:94:eb:86:6b:29:f3:a0:ec:d7:c5:49:3c:da:c6:
fe:fd:04:0a:1d:ec:c4:13:52:0b:d3:be:eb:b9:37:cc:e4:c8:
a1:da:73:c0:3c:d2:ac:ae:56:b5:19:43:95:3f:4b:e4:89:80:
84:7a:0d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:37:34 2025 by rpki-client