Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft
File: QFC8opwYE647EfOB8EQqoqipMb8.mft (raw, json)
Hash identifier: jSUCKK52tYfBSvY6jaLlTfDYhI+mkWtEnePi223CsB8=
Subject key identifier: 25:DB:4B:70:6E:3D:32:54:6C:EF:73:E5:36:93:C0:96:E6:09:39:2A
Authority key identifier: 40:50:BC:A2:9C:18:13:AE:3B:11:F3:81:F0:44:2A:A2:A8:A9:31:BF
Certificate issuer: /CN=4050bca29c1813ae3b11f381f0442aa2a8a931bf
Certificate serial: 019677C35A6B4A3A3A2E8CEB3C166ACCE92D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft
Manifest number: 1424
Signing time: Sun 27 Apr 2025 15:00:13 +0000
Manifest this update: Sun 27 Apr 2025 15:00:13 +0000
Manifest next update: Mon 28 Apr 2025 15:00:13 +0000
Files and hashes: 1: 19IQx82rzsiCoBb7iKS7zS0gXio.roa (hash: TEyMe4x0yj15nmcDqFTTZyRV6sHl2P5CCSlpIqh9COU=)
2: QFC8opwYE647EfOB8EQqoqipMb8.crl (hash: 21nu8DA/XTeZx/5UHe5afdMVV9tv5HGMY0vlmicV/ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:5a:6b:4a:3a:3a:2e:8c:eb:3c:16:6a:cc:e9:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4050bca29c1813ae3b11f381f0442aa2a8a931bf
Validity
Not Before: Apr 27 15:00:13 2025 GMT
Not After : Apr 28 15:00:13 2025 GMT
Subject: CN=25db4b706e3d32546cef73e53693c096e609392a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ee:09:93:f3:a7:6b:a6:c3:d5:3e:12:ec:2a:
87:3d:df:26:24:93:f0:36:93:cf:1f:e4:7a:9b:e8:
25:9f:7c:11:2d:0e:c1:2d:9c:87:e0:a5:08:78:0f:
c6:6d:4c:f8:2d:9a:af:55:70:6c:5d:a7:bb:0e:39:
40:82:a1:a6:7e:9b:98:b0:b1:cf:da:ab:96:9d:36:
2e:68:da:7f:4d:15:8a:e1:fc:9d:fd:d7:76:48:7d:
ea:21:ed:67:81:a9:66:e1:71:05:99:9a:99:2d:44:
a7:40:c3:76:eb:6d:d7:05:bd:b7:fa:de:81:06:63:
5a:10:b9:76:3a:d6:ad:01:19:34:fb:44:1c:98:d4:
e7:88:25:d4:d7:1d:b8:7d:95:33:8e:3b:78:f5:97:
12:7d:23:bb:a4:86:41:04:10:35:a6:d3:37:80:7e:
3c:cf:f9:f8:b1:57:63:12:31:6e:98:75:89:85:17:
7f:fd:f2:0c:91:29:77:90:83:dc:2e:e1:39:a5:06:
26:70:79:2d:f9:90:f4:b5:f9:23:d7:66:52:40:34:
2d:17:eb:0a:31:6b:ad:99:8e:c1:e6:02:33:22:e2:
10:17:6b:53:71:71:f4:df:01:eb:ae:a1:c0:04:0f:
68:9d:d3:96:29:5c:15:75:1f:fa:c2:26:f9:20:91:
fa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DB:4B:70:6E:3D:32:54:6C:EF:73:E5:36:93:C0:96:E6:09:39:2A
X509v3 Authority Key Identifier:
keyid:40:50:BC:A2:9C:18:13:AE:3B:11:F3:81:F0:44:2A:A2:A8:A9:31:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:36:0b:74:46:5a:9c:cc:36:c6:bc:72:cc:a5:eb:ea:6b:f1:
3c:6a:18:74:ab:b4:9d:62:3d:c2:a7:12:9f:31:ea:42:34:27:
b8:ae:56:d9:db:3e:60:08:0a:7e:f7:70:78:79:d1:b0:ff:7e:
a9:53:8e:69:ce:1e:23:92:0a:86:b2:8d:31:72:b4:84:95:10:
f4:fb:40:b1:bf:5c:bd:bc:71:8e:f0:aa:e2:d1:2b:70:68:8a:
ef:92:02:e5:db:01:32:c4:1f:e3:2d:3a:14:65:ce:09:fb:35:
1f:23:98:99:eb:bb:95:07:20:cf:56:fa:14:9e:2b:0d:6b:55:
78:2f:22:94:d5:8b:68:96:85:52:46:a4:46:67:34:53:aa:9f:
e9:53:3e:73:b8:e8:51:33:31:da:cf:6f:be:2f:94:ea:f7:43:
7a:eb:5f:27:c6:59:8e:d2:ba:b5:c0:c9:d2:2b:8f:ba:49:df:
53:4e:c4:b9:d3:c9:4b:94:99:4a:12:f4:a8:d0:2e:a2:3e:ed:
12:fd:f6:61:17:9f:ff:b8:8b:8e:bb:5e:13:93:26:30:e6:77:
6b:1c:38:7f:51:cb:ee:18:1c:02:da:5b:ba:af:dd:3e:5c:c7:
5b:9b:9e:d4:58:0a:a7:7c:b9:76:6c:7c:6a:d8:d8:75:34:ad:
e9:e3:dd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:49:11 2025 by rpki-client