Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
File: qfL96iY7efzhE4kFKwzZQJlcbf4.mft (raw, json)
Hash identifier: 7egQaufbnJTcCat2R8fPO/xwd2H6TH+gLClSA71N/SU=
Subject key identifier: CD:BB:A5:4C:3D:8B:A4:50:8B:66:31:BB:D5:F0:50:C3:EB:EC:D7:49
Authority key identifier: A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
Certificate issuer: /CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Certificate serial: 019672D409A34B8DB14B427276707BC7CD4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
Manifest number: 0B9A
Signing time: Sat 26 Apr 2025 16:00:20 +0000
Manifest this update: Sat 26 Apr 2025 16:00:20 +0000
Manifest next update: Sun 27 Apr 2025 16:00:20 +0000
Files and hashes: 1: PIFbvqZsTCVITsXCVJp94hRSd40.roa (hash: cQLvhNHJgfoGCqvXulMMhioH9SATxRMjiGUXlSo7XxA=)
2: oHZuZKLdIqX9TZjhMfxVImyzxr8.roa (hash: 3RagyetzMFETxC4N1pLRK9iNlu+vVXTBppJLVU5AMlY=)
3: qfL96iY7efzhE4kFKwzZQJlcbf4.crl (hash: xt9nYxsRhKe0dEQAixYDnIZqRkWpyOKstNAiUskA+yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:d4:09:a3:4b:8d:b1:4b:42:72:76:70:7b:c7:cd:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Validity
Not Before: Apr 26 16:00:20 2025 GMT
Not After : Apr 27 16:00:20 2025 GMT
Subject: CN=cdbba54c3d8ba4508b6631bbd5f050c3ebecd749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:89:75:13:dc:a6:60:bd:af:51:23:ee:eb:5b:
c6:49:93:e4:03:f5:73:1c:6a:9a:a9:a7:63:e2:85:
86:43:2f:fd:18:38:45:80:37:5e:2f:69:eb:01:a6:
c0:09:8b:67:09:90:ac:ee:7e:37:c9:50:0e:32:d7:
6d:88:65:88:ed:be:98:90:81:65:15:65:6f:08:2c:
ee:25:35:5e:57:d7:3f:bf:2e:66:cd:db:79:f2:ab:
aa:9c:94:1e:38:f3:44:a4:7e:cd:fc:0c:d9:85:0d:
18:b9:a9:7c:05:eb:7f:11:9f:4e:4e:e8:a1:18:e2:
bf:9d:9b:ed:52:0e:36:50:c5:f5:12:15:9c:ba:ba:
c4:f9:56:bb:45:32:0a:c2:8f:e4:77:d2:a4:fb:30:
28:ec:32:d4:80:d8:98:9b:e0:6e:ed:d4:cd:94:41:
0e:64:42:66:e3:f2:4d:f5:40:ed:a2:d9:86:b6:a4:
1d:1d:a2:23:c2:5e:06:8d:b4:9c:23:4a:c9:89:b9:
32:c0:1f:5e:72:31:d2:35:a9:3a:67:10:a1:b9:bd:
7f:43:61:83:30:e9:48:36:87:8e:6d:7d:52:8b:e8:
5f:62:fc:11:56:c4:9c:b3:9d:4a:f6:ff:f7:c0:58:
72:78:8f:fa:e4:20:a4:62:28:fc:90:08:40:8a:f3:
42:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BB:A5:4C:3D:8B:A4:50:8B:66:31:BB:D5:F0:50:C3:EB:EC:D7:49
X509v3 Authority Key Identifier:
keyid:A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:84:f3:35:f3:27:6d:71:15:6e:2f:c4:d6:e1:b2:2f:6f:9a:
3b:55:21:66:ea:90:4a:e4:c7:06:51:db:dd:51:32:bd:90:20:
e7:4e:5e:f9:32:e9:69:fc:87:62:d8:8f:c1:88:f7:41:05:76:
32:e1:ab:a2:81:97:3f:f8:0a:e9:36:90:64:f1:55:0e:25:ce:
a8:80:ce:19:5b:32:dc:1a:d8:8c:5a:c5:e4:97:0b:57:33:d5:
9f:a4:9f:4f:4a:cf:c5:bb:ac:06:b1:bb:6f:0d:8d:47:c7:22:
52:a7:a4:85:e7:8f:ec:85:4e:db:25:aa:15:65:cc:85:b0:77:
60:7e:a7:ad:c9:99:d9:4a:e2:43:e1:51:90:a4:64:05:0e:25:
98:8f:fc:5f:90:45:a1:92:c4:5d:4b:e7:57:68:f6:2f:41:09:
23:77:ad:49:58:1e:45:db:df:5f:70:70:4f:e7:b2:31:ae:b7:
42:af:72:f6:2f:8a:1d:65:56:1c:db:f2:f8:0c:7e:19:28:4f:
3d:6c:76:9b:9d:3a:a4:89:69:23:63:47:cb:43:ed:38:59:c1:
32:76:ca:f6:55:e1:1e:96:17:24:38:f7:54:d4:19:52:45:f6:
02:91:d5:fd:45:f3:95:63:c5:5d:65:0d:78:25:bf:9e:e9:be:
14:87:ef:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:32:55 2025 by rpki-client