Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
File: QF1kV0EhVne3dI0f3v1BYgetsS0.mft (raw, json)
Hash identifier: lPGJo8ROgVUhOOt1hOWYtjv70ZqOJJJhD3pAID+489c=
Subject key identifier: D4:35:A4:3B:F9:3D:2F:8E:FE:CD:C0:CA:46:64:55:56:6D:4D:8A:81
Authority key identifier: 40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D
Certificate issuer: /CN=405d645741215677b7748d1fdefd416207adb12d
Certificate serial: 019685801864B38BDC14B035EE73CF817DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
Manifest number: 08FF
Signing time: Wed 30 Apr 2025 07:01:26 +0000
Manifest this update: Wed 30 Apr 2025 07:01:26 +0000
Manifest next update: Thu 01 May 2025 07:01:26 +0000
Files and hashes: 1: QF1kV0EhVne3dI0f3v1BYgetsS0.crl (hash: 6kcdkLbw3CuIAeqtUbV/kBpNIYIeKnOppjaDYevA61w=)
2: fWWj4vN4Pakh4py4ZoRjfwdn1QQ.roa (hash: FY8bBIFYDCHCGhqOrrG5nSouUPyCK8D06l8J0Ub7EYk=)
3: nRHvC3S6H6OF9LLq0ogOX8Zl4yo.roa (hash: tS76E2lzZsDNXN+CpTO/PY5u/Eonx622qRvZjqr5TcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:80:18:64:b3:8b:dc:14:b0:35:ee:73:cf:81:7d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405d645741215677b7748d1fdefd416207adb12d
Validity
Not Before: Apr 30 07:01:26 2025 GMT
Not After : May 1 07:01:26 2025 GMT
Subject: CN=d435a43bf93d2f8efecdc0ca466455566d4d8a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7c:58:9b:89:0a:83:24:a6:40:a0:b0:a2:c6:
2d:84:1d:f3:ff:cd:03:ff:6c:82:73:bf:d8:78:c3:
e4:4a:1f:b1:4a:3e:50:7d:df:40:78:d5:b6:da:10:
0c:e3:47:9d:68:6e:0a:b9:8c:43:1c:60:61:2d:c6:
a9:19:83:a3:25:62:b4:4f:f5:db:ff:02:ec:09:2c:
99:c4:b1:7d:0f:a8:d8:47:6f:6a:07:73:17:d7:7a:
9d:8c:fa:88:01:da:42:1d:1b:bc:84:fe:ac:ae:84:
87:df:20:de:58:8c:de:06:db:cc:1e:8b:00:e5:3a:
01:1c:ab:f3:e9:17:7a:26:fc:34:34:5b:ee:21:c9:
6a:57:f2:07:79:f9:e4:df:6f:c6:32:d2:23:65:8c:
23:69:58:c1:3d:64:02:66:e8:d1:97:9f:28:cb:1d:
3d:43:bc:ab:cc:91:11:74:db:a9:c0:be:11:36:31:
e4:f3:c4:e2:34:bf:e7:e7:26:0e:1b:cc:d6:d4:e8:
b9:67:40:bf:2c:56:08:2d:8a:b9:26:0d:ea:42:d3:
29:ba:a7:ab:f2:3a:49:90:3b:fd:76:dd:6e:97:c4:
4d:65:0a:83:e5:5a:c8:21:45:43:ed:51:6e:b0:d7:
e4:41:78:b9:81:28:c3:45:73:1d:04:74:ae:24:fb:
23:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:35:A4:3B:F9:3D:2F:8E:FE:CD:C0:CA:46:64:55:56:6D:4D:8A:81
X509v3 Authority Key Identifier:
keyid:40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b4:14:58:0a:6e:4b:af:32:55:13:b3:80:dc:29:fb:ba:06:
f1:99:d9:72:4b:a8:e9:66:e5:92:fd:85:7b:98:07:8f:21:4c:
08:6d:ec:3b:75:6f:9a:ee:a7:16:e2:93:42:f1:72:7c:50:d2:
47:cf:45:c6:37:2f:f9:f8:e7:ec:2a:cd:39:2c:56:d4:70:b7:
9f:ac:fd:2a:2e:18:d6:63:ae:68:43:bd:51:b1:5d:b1:f5:29:
bd:77:d1:8f:71:ae:4d:32:cb:8a:87:21:5e:f6:5e:f6:5c:1f:
4f:a3:1c:7a:c9:f4:53:ec:d8:27:8d:ee:c8:d3:30:ff:0c:ef:
83:fd:66:25:bb:8f:49:6e:ac:28:fa:d5:6a:98:61:9b:5e:a6:
62:6e:10:fd:ea:1b:17:6a:c1:41:3b:e9:68:16:81:1d:7f:00:
c4:a6:16:40:71:81:74:48:54:68:9e:7f:80:c2:21:de:ad:27:
be:21:8c:d4:b2:7d:2f:4f:ba:a7:a5:d0:d7:6a:f7:36:77:8a:
be:f4:c9:28:55:93:cf:4f:fc:1e:ec:e6:66:e7:ee:69:85:e0:
f2:be:06:2f:d5:31:73:5e:af:38:92:64:8b:77:3e:f8:e7:67:
56:08:44:91:fe:65:84:36:c1:04:a7:d9:fa:29:03:5d:86:d5:
d7:0e:13:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 11:43:10 2025 by rpki-client