Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
File: qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft (raw, json)
Hash identifier: ii6CZGTnJTczskJVE/BfygUTl4XfhyUzbpOCLMO8wXI=
Subject key identifier: D6:1B:11:8F:1B:3E:F4:50:5A:1E:48:BE:DC:B9:D1:06:B9:E4:4F:FD
Authority key identifier: A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6
Certificate issuer: /CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
Certificate serial: 019678D624AF79A587931BA199455BE74E18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
Manifest number: 0FF3
Signing time: Sun 27 Apr 2025 20:00:22 +0000
Manifest this update: Sun 27 Apr 2025 20:00:22 +0000
Manifest next update: Mon 28 Apr 2025 20:00:22 +0000
Files and hashes: 1: 1-AU6Gnoq31NHxflgGui7pQnafXQ.roa (hash: EGLLwW1ofOs0SYvfXY13qswF8cFAf0RF4OYVmpVNmog=)
2: JyKT5t-tp9Ns-zQBDf52afbSU90.roa (hash: vZDex2xJzEBhdxg8YwQEm5MoYizntTQWWZeFLfZB0Ls=)
3: qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl (hash: vVlmcGa55+lDOQNWk4I84VLRunZ08tp+S76TSb7ZFBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:24:af:79:a5:87:93:1b:a1:99:45:5b:e7:4e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
Validity
Not Before: Apr 27 20:00:22 2025 GMT
Not After : Apr 28 20:00:22 2025 GMT
Subject: CN=d61b118f1b3ef4505a1e48bedcb9d106b9e44ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:71:a8:f5:97:51:62:2b:60:3a:94:d2:44:c5:
c6:08:c9:3f:0a:dd:62:74:c7:d2:68:9a:ca:ba:c8:
df:e1:54:c4:ee:e3:68:ea:b1:1e:2c:15:2f:4d:5e:
fd:8b:99:04:2b:89:df:ee:c5:af:cd:f2:7e:02:af:
ca:c8:a9:14:6e:47:df:8d:c4:66:b6:28:86:87:64:
0f:0f:91:91:fe:6c:36:db:a9:8d:36:7b:5b:d6:6c:
aa:c9:d7:d6:b1:99:8a:f9:a8:8b:77:e7:25:a9:dd:
10:2c:b3:69:4a:79:f5:d8:05:ec:4c:bf:37:3c:a2:
1b:cc:ad:3b:a3:4c:6c:64:81:e7:c6:8e:23:ee:f6:
d9:a7:e4:c0:58:81:3e:d9:cd:5d:5c:95:ea:66:6f:
9b:10:9c:6d:51:84:89:78:41:15:2a:11:ad:2b:d1:
c9:31:14:bf:81:81:91:ec:2f:24:04:d0:31:0f:7c:
b2:1a:7c:c2:79:b3:14:0c:30:6f:6c:41:79:99:00:
19:29:58:4a:d7:d3:ab:9c:0d:38:66:e6:4a:f0:06:
ef:2f:d5:28:07:8f:26:9c:d2:de:b1:70:fa:41:ac:
e9:a2:1f:22:82:07:19:5c:fe:77:e6:47:b4:5b:0a:
28:06:ea:48:13:0b:fa:da:c2:17:45:c1:2d:e7:a8:
c2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1B:11:8F:1B:3E:F4:50:5A:1E:48:BE:DC:B9:D1:06:B9:E4:4F:FD
X509v3 Authority Key Identifier:
keyid:A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:77:92:84:76:1e:d1:df:4e:30:7e:5d:8a:1e:31:f4:e3:de:
90:e5:0f:dd:e4:b5:cc:67:8f:67:1e:49:40:4b:57:92:0e:3e:
bd:bb:e6:1d:16:44:e5:97:83:84:3d:82:2e:e9:bf:08:2a:78:
1a:ef:fc:e2:5d:66:8a:a0:a0:d2:00:01:44:92:ed:0c:4b:61:
13:bd:2c:df:82:1e:64:4f:c1:04:06:1c:f8:b5:88:d9:1c:14:
40:32:17:d3:d1:b7:61:a2:e6:cf:0f:29:ed:f2:b3:d1:17:26:
31:99:74:ff:b9:33:fc:ae:70:2f:fc:f0:2a:c2:20:8d:73:6d:
20:22:1b:b7:0b:ce:4c:7e:d4:55:3e:f4:3f:2c:33:3d:b3:6a:
26:e6:05:3d:25:dc:65:8e:92:46:8a:fa:fd:a7:55:2c:b5:42:
df:31:03:1c:c5:02:b4:9a:5a:17:19:ab:93:8d:ad:e4:01:84:
85:6f:8a:fb:92:91:88:2d:d3:ef:1d:fb:a9:dd:05:a0:b7:88:
dd:52:fb:23:f3:cc:0f:fa:40:c5:88:72:05:01:70:04:ec:c5:
95:c6:2e:aa:1f:d5:78:2c:ac:c8:1c:93:30:e3:2e:18:90:a6:
cc:d2:bf:ee:10:d7:68:0d:da:01:dc:b2:b5:fa:69:ee:a5:6a:
07:0a:5d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:01:48 2025 by rpki-client