Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.mft
File: bqGhD32UTazB3sBBqqVZ1SK_uus.mft (raw, json)
Hash identifier: jq532ZLNuDWSyP8UjiVKs8d7VtH4jSxHvmaBmOig3nw=
Subject key identifier: EB:46:59:D0:10:5A:3A:92:68:70:66:0F:54:70:F8:FE:60:B3:48:ED
Authority key identifier: 6E:A1:A1:0F:7D:94:4D:AC:C1:DE:C0:41:AA:A5:59:D5:22:BF:BA:EB
Certificate issuer: /CN=6ea1a10f7d944dacc1dec041aaa559d522bfbaeb
Certificate serial: 0196876E4D257A6680974DEE55C6F1CABF55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqGhD32UTazB3sBBqqVZ1SK_uus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.mft
Manifest number: 128E
Signing time: Wed 30 Apr 2025 16:01:14 +0000
Manifest this update: Wed 30 Apr 2025 16:01:14 +0000
Manifest next update: Thu 01 May 2025 16:01:14 +0000
Files and hashes: 1: M9NbgULzUbUgy5QfFA80DfDkYIo.roa (hash: 9jvwTaiwGzjoN6t2OLikrXjXwIhCTFgXlEI2alktc+E=)
2: bqGhD32UTazB3sBBqqVZ1SK_uus.crl (hash: RDWxBdRe8BR6ymDCnrx0Qg2u0+JhbC7d2sOyWymnr7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqGhD32UTazB3sBBqqVZ1SK_uus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:6e:4d:25:7a:66:80:97:4d:ee:55:c6:f1:ca:bf:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea1a10f7d944dacc1dec041aaa559d522bfbaeb
Validity
Not Before: Apr 30 16:01:14 2025 GMT
Not After : May 1 16:01:14 2025 GMT
Subject: CN=eb4659d0105a3a926870660f5470f8fe60b348ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ab:8a:3d:ac:13:77:34:a8:1b:aa:33:26:9a:
c2:c3:0e:a1:70:86:a0:3c:1d:4f:b6:ce:f8:31:76:
ec:3c:96:78:a0:1e:01:e5:48:47:e2:9c:07:62:5a:
4c:1b:18:1e:2f:62:0f:2d:9d:c7:28:ca:f2:c5:ec:
f4:e2:b7:be:a8:f6:17:a1:80:43:a3:9e:a0:06:d8:
66:25:c6:fa:3c:29:ff:ee:13:30:b2:4e:30:02:96:
80:4a:a0:b1:69:4d:6d:92:b8:8f:43:b4:f3:72:87:
f3:0a:5c:e2:91:3d:4d:0d:81:cb:30:94:78:b0:62:
6a:45:4c:d9:09:d1:b2:3d:05:4b:28:75:78:f0:00:
cf:bc:46:8c:f7:90:b7:48:57:15:69:b9:5a:2b:69:
a7:ca:dc:e8:10:29:40:4e:58:77:c1:d3:46:90:4d:
b5:a7:66:9c:6c:2b:60:89:b7:c9:54:49:e0:4b:e1:
2d:d2:b1:7d:2c:66:93:ce:4a:35:b3:d4:8b:9a:3c:
9b:8d:c8:e6:e0:e8:05:48:2e:55:2d:da:e8:4c:e5:
1d:f8:4d:bc:60:17:3f:df:c5:37:8d:83:47:07:a0:
2a:8a:df:3c:64:fd:61:3c:b7:1e:32:32:d4:d8:c5:
00:f1:de:99:ff:21:92:55:24:f9:1a:82:b1:cd:18:
9d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:46:59:D0:10:5A:3A:92:68:70:66:0F:54:70:F8:FE:60:B3:48:ED
X509v3 Authority Key Identifier:
keyid:6E:A1:A1:0F:7D:94:4D:AC:C1:DE:C0:41:AA:A5:59:D5:22:BF:BA:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqGhD32UTazB3sBBqqVZ1SK_uus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f0:aa:03:0c:48:c6:49:d9:69:53:9c:c9:78:48:74:6e:ab:
8c:94:70:f2:e5:df:80:27:af:f9:86:7b:aa:9d:9d:c8:7d:c2:
fa:c5:b5:f2:8c:14:4f:49:8d:87:9a:bb:b4:2d:b1:b8:d1:58:
1a:e8:a7:3f:aa:a7:dc:92:f9:a6:2f:f2:84:10:ba:3c:a9:24:
5a:8a:c8:21:dc:13:0d:b1:8b:ef:78:d8:e1:df:42:98:95:8d:
59:2d:8f:80:15:85:1f:b4:3d:d9:6a:3c:df:ed:f9:3b:e1:c0:
02:1b:59:9c:63:6c:0c:03:9c:8b:05:02:41:d8:31:24:8f:91:
c4:2d:5c:92:79:ac:3e:72:a8:7b:8c:3d:b0:37:d0:77:2c:e2:
ed:e0:87:a3:b2:42:13:a3:8f:44:68:5c:40:ac:38:3d:d7:cf:
a7:9c:fe:ef:60:43:83:3d:21:b9:9c:7b:59:6f:58:cd:43:23:
8b:3d:90:c6:3e:cc:37:90:e2:81:1c:76:40:0f:cc:bf:58:57:
86:e4:44:c3:80:f9:14:e5:3a:f0:57:f0:83:c6:7a:d1:bc:05:
9d:9f:6e:25:fd:49:04:9b:9d:9d:a2:b5:3e:21:ea:78:63:5c:
3a:f7:df:1b:33:7b:90:6a:92:c5:1c:d0:35:4c:43:8d:80:61:
41:8e:ad:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:07:58 2025 by rpki-client