Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft
File: qiEQS093IiTRGFaiTt-UZqhE0mw.mft (raw, json)
Hash identifier: ynHApYmlaMcPiUwcLkTfL4wz2TqeebCB3DicRO1jD6o=
Subject key identifier: F7:D7:EF:A0:6E:36:81:01:5F:F1:1F:D9:69:B2:1D:25:1D:11:FD:A2
Authority key identifier: AA:21:10:4B:4F:77:22:24:D1:18:56:A2:4E:DF:94:66:A8:44:D2:6C
Certificate issuer: /CN=aa21104b4f772224d11856a24edf9466a844d26c
Certificate serial: 0196A0F669EA254248DC9A2A1BFF52F53260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qiEQS093IiTRGFaiTt-UZqhE0mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft
Manifest number: 091F
Signing time: Mon 05 May 2025 15:00:25 +0000
Manifest this update: Mon 05 May 2025 15:00:25 +0000
Manifest next update: Tue 06 May 2025 15:00:25 +0000
Files and hashes: 1: C9Uc2-MMZLc56ntn-MTlSYOC9E8.roa (hash: 7Vks3Vs+iWpgcZieiS4e05rACvsjBFcyY3uhYDWshE0=)
2: qiEQS093IiTRGFaiTt-UZqhE0mw.crl (hash: QGe6mFRfVrInfHiWWdoy4rftiyL87QjhJTt1f36lTBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qiEQS093IiTRGFaiTt-UZqhE0mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:69:ea:25:42:48:dc:9a:2a:1b:ff:52:f5:32:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa21104b4f772224d11856a24edf9466a844d26c
Validity
Not Before: May 5 15:00:25 2025 GMT
Not After : May 6 15:00:25 2025 GMT
Subject: CN=f7d7efa06e3681015ff11fd969b21d251d11fda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:20:7b:e8:1d:20:2b:eb:cf:5d:15:2a:3d:
1e:f2:2a:0d:41:08:dc:9a:4d:17:e4:2d:f6:56:61:
86:7d:95:70:13:6d:ab:48:5d:32:2b:2f:24:a1:91:
ff:6c:a0:a8:33:b2:03:da:dc:81:84:86:b9:17:b7:
11:47:63:94:27:09:da:68:0b:8e:8b:9e:fe:69:24:
f2:d2:b7:ac:27:89:5f:02:8e:53:38:71:8f:5c:61:
e1:69:b0:3f:91:6c:2b:74:67:8d:76:b7:6b:9c:08:
d5:81:3f:85:a1:c6:12:a9:ce:77:52:a3:be:99:de:
70:2e:08:54:3f:45:29:2d:0b:d7:0f:ed:42:23:87:
02:f6:46:6a:6e:12:c7:8d:d7:a8:b6:67:93:42:5b:
16:83:08:1e:6b:de:f9:bc:ea:4d:2e:c5:15:12:55:
5f:57:e7:ed:6f:fa:85:9b:f5:c7:27:17:80:94:5f:
00:4a:b0:1b:73:c5:ba:4f:ba:26:18:0e:78:9a:d4:
ec:db:34:3e:bb:f8:0c:bf:9c:30:b1:6d:bb:71:fe:
87:76:4c:b8:6a:85:ad:e3:11:fb:67:d4:ac:4b:b3:
20:dd:b2:59:b0:61:c0:a6:e9:d4:c2:a1:87:fd:20:
ad:a1:f2:01:15:65:82:c7:49:92:f0:e8:42:ac:af:
97:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D7:EF:A0:6E:36:81:01:5F:F1:1F:D9:69:B2:1D:25:1D:11:FD:A2
X509v3 Authority Key Identifier:
keyid:AA:21:10:4B:4F:77:22:24:D1:18:56:A2:4E:DF:94:66:A8:44:D2:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qiEQS093IiTRGFaiTt-UZqhE0mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d0:a5:17:e4:5d:16:77:ae:a7:0b:b4:9c:72:9c:96:81:3a:
f6:6c:9a:31:fb:e5:08:a7:56:7b:97:ef:76:2d:29:bc:d6:6e:
a3:ca:f6:a9:29:9d:1a:a9:11:57:fc:ab:b0:b4:44:8e:bb:39:
f5:69:c9:65:39:53:49:ad:39:47:9f:9b:02:77:64:db:2a:74:
dd:55:72:d0:18:85:da:dd:a1:8f:08:20:de:f2:01:d9:8a:15:
d2:08:eb:58:a7:82:7d:54:e6:82:30:45:17:54:5b:1e:f2:2b:
fb:31:7b:3a:dc:71:97:7d:76:2e:b9:b3:6c:1f:f5:1b:65:1b:
4b:a8:73:48:7f:a0:20:55:06:48:ac:9d:b0:65:15:d1:e5:66:
ba:16:8a:8d:e8:ba:e5:a4:ee:f5:6f:d4:3b:49:70:29:f7:27:
e0:e3:73:b8:44:58:ae:1d:46:c7:0c:09:9d:1e:08:59:24:d2:
a4:53:8e:ad:ee:ee:32:e0:d4:3b:77:c8:68:0c:26:19:35:8e:
66:d8:8e:22:67:d0:9d:19:59:c9:79:25:6c:6f:75:e6:8d:be:
93:7c:61:ee:d9:b0:2b:f8:b7:f4:12:06:1c:18:c1:b3:cc:ee:
2d:50:33:7c:54:cb:ff:b7:bf:c7:44:1b:35:a6:16:68:0a:15:
b7:3e:b8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:09:49 2025 by rpki-client