Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
File: qcxE1_HQ3Apavyd2SVth3kgZkl8.mft (raw, json)
Hash identifier: ZSLnanyE36jCX99DC+DEkrJ70v2fatV1oUFJD1lDNbY=
Subject key identifier: B6:42:0A:4D:48:05:5B:8F:26:65:06:88:92:D9:3B:16:F5:FD:67:48
Authority key identifier: A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
Certificate issuer: /CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Certificate serial: 019674F9F4CE0556148393FFA3664419E0A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
Manifest number: 10AB
Signing time: Sun 27 Apr 2025 02:01:00 +0000
Manifest this update: Sun 27 Apr 2025 02:01:00 +0000
Manifest next update: Mon 28 Apr 2025 02:01:00 +0000
Files and hashes: 1: Jo7QZBDB32wXW0Iw1K7QdXNowZk.roa (hash: K7AhFGZtd/rNskeYTg//KKyYm9N8IOSqZd1eL/nYFI0=)
2: qcxE1_HQ3Apavyd2SVth3kgZkl8.crl (hash: UTwWE1vdR3/r6G3k2/FXIcZnTI2pXgcZhcmCsQMTKs4=)
3: s7SwYsQxw0lQy1OCUyDcPA5nRsQ.roa (hash: oInMskbU1ysq45NZWBKPFPJeOmbD2WauFvK9W3eBwaY=)
4: vFfYVEKCcc2PyT6NhaZHTqsCyRc.roa (hash: IviSD1XdrOD9s0OcxHYtTVilTBOr8uyUO7SjAFCSO3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:f4:ce:05:56:14:83:93:ff:a3:66:44:19:e0:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Validity
Not Before: Apr 27 02:01:00 2025 GMT
Not After : Apr 28 02:01:00 2025 GMT
Subject: CN=b6420a4d48055b8f2665068892d93b16f5fd6748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b3:55:41:22:8a:f1:75:f3:e0:d3:9f:b3:67:
a2:16:85:1d:14:0e:3f:6a:06:01:5c:c2:62:cf:d9:
26:36:cf:3f:f9:09:4d:0c:1e:56:2c:16:9d:2f:b8:
e7:01:15:da:61:08:5a:32:ff:29:ce:ad:3b:59:4e:
03:17:c0:4c:5b:59:73:c5:06:e8:16:9b:66:c5:21:
6b:e8:c6:6e:8b:6d:f2:bb:29:33:0a:98:8d:0c:2f:
aa:c9:54:2b:95:eb:df:07:58:80:06:49:42:dc:04:
4e:cd:2d:2e:5a:b5:dd:62:0d:09:7e:6d:b6:6c:17:
45:b1:ae:5b:72:b8:a6:28:32:7a:c3:a3:e1:b9:35:
42:5e:60:33:7c:f8:67:8f:95:da:e7:5e:18:1a:03:
0c:20:28:ae:c9:91:cb:a0:b4:38:9d:87:c0:37:f8:
b9:65:d7:f6:54:34:02:24:bd:59:c6:55:1c:29:e7:
98:c7:5f:79:67:d4:43:68:63:4f:8d:40:1f:8d:2c:
c0:75:dc:4e:f8:10:df:4f:22:a7:f8:a0:66:7e:bd:
41:56:c2:05:b5:88:24:43:08:29:c4:8c:8e:26:04:
e0:64:9d:2f:70:46:51:40:10:a3:af:df:4b:48:5c:
f6:41:74:a2:5b:55:1e:93:26:5b:16:58:68:6f:9c:
74:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:42:0A:4D:48:05:5B:8F:26:65:06:88:92:D9:3B:16:F5:FD:67:48
X509v3 Authority Key Identifier:
keyid:A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:e2:bf:b1:1f:9c:be:09:90:d0:a0:4f:93:c7:a4:b1:8a:8e:
46:36:af:29:9c:5c:34:1e:54:90:7d:72:b9:b1:57:c5:62:04:
02:a6:60:0c:bb:50:fb:05:f6:3b:2a:e6:d0:f3:95:b7:fb:1e:
ad:8c:5f:82:19:69:8a:d8:be:e7:40:f8:ce:c8:17:0d:85:93:
a6:e4:d4:45:63:c0:c6:8e:b3:05:59:32:b7:1c:d9:ac:02:8f:
2d:c4:51:1b:7b:35:e8:90:e3:90:36:37:29:56:13:8c:2e:6c:
07:cc:12:e1:48:f0:56:91:2d:39:a9:04:90:32:c9:fc:65:f5:
5a:84:ae:68:1c:3b:c7:08:ff:f2:b1:15:dd:e3:87:a4:b7:b2:
1f:c9:d6:23:52:09:e7:47:4f:20:41:d1:0a:35:28:6b:8e:a8:
23:45:bd:8b:dc:09:d4:20:ba:2a:50:21:e7:22:18:8d:15:41:
58:ac:fa:47:11:e1:2a:33:66:db:fb:4c:31:44:4b:77:4a:99:
c2:8c:1b:97:30:e6:fe:46:a3:59:48:8f:0b:0e:ae:93:41:54:
f2:7f:8b:9d:66:6f:7e:67:ed:5c:0e:02:97:3d:8b:2e:06:02:
54:5b:c0:79:fe:6d:5f:a6:21:da:85:4b:42:4e:f5:f3:d7:c6:
b9:1b:34:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:07:47 2025 by rpki-client