Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
File: qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft (raw, json)
Hash identifier: jUKZSNkfRJU6qqYRJFEC5V0F4U4nPWc6UKF989dmuRQ=
Subject key identifier: 93:FF:9F:20:B3:60:26:E3:3B:F3:59:90:FF:5C:A8:7E:6F:57:D1:68
Authority key identifier: A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
Certificate issuer: /CN=a9d988d1df0a6ccab2e93614951059960bad4342
Certificate serial: 0196895BF858F865E2AA715F9536FADCECF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
Manifest number: 1323
Signing time: Thu 01 May 2025 01:00:28 +0000
Manifest this update: Thu 01 May 2025 01:00:28 +0000
Manifest next update: Fri 02 May 2025 01:00:28 +0000
Files and hashes: 1: NX8Ag0pA74LGhUL_oaE0Kzx7aAU.roa (hash: LYvjPxPyW03jv1kHAAP+K13/fh1ywtNoDmOlSYUCweg=)
2: gAnTD0iNr7m1r1pYRaaA5fXHh-s.roa (hash: Cw97eXSR4+iVCR14Tmpd8X95xlXnCaFcwxnubQAt8e8=)
3: qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl (hash: 5dYFnjvpspSXnAbRsAlW/BcTl/ACrHVW4Phv3pIxUM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:5b:f8:58:f8:65:e2:aa:71:5f:95:36:fa:dc:ec:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d988d1df0a6ccab2e93614951059960bad4342
Validity
Not Before: May 1 01:00:28 2025 GMT
Not After : May 2 01:00:28 2025 GMT
Subject: CN=93ff9f20b36026e33bf35990ff5ca87e6f57d168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:37:93:2e:9e:78:f9:ce:5d:24:bf:56:d2:6e:
9f:89:83:c7:38:4a:bd:4f:f1:ee:fb:6c:49:38:26:
d0:ea:4c:b6:7b:a8:6d:52:56:28:04:3b:fb:ee:3f:
45:5f:23:8d:72:36:ff:ac:40:30:7e:df:01:c7:9b:
b2:f2:62:dd:bb:fe:6c:0e:99:90:e1:0d:35:4d:71:
2c:af:f3:b6:18:36:64:4f:fc:22:02:a9:5d:d0:7f:
07:e5:0d:9e:23:f7:29:bd:5d:8f:15:ed:fc:ea:c4:
e7:db:9d:6e:6c:02:62:db:eb:b9:cf:99:39:43:90:
f1:7a:50:c1:e6:80:da:b9:39:5a:51:47:cc:76:62:
85:75:3f:6c:91:76:ab:a1:be:22:39:b6:d4:88:de:
8a:47:4a:de:26:fd:23:62:22:43:f9:69:45:a3:a7:
ac:52:be:e0:10:31:25:b2:a8:2e:7f:60:70:9f:f2:
70:67:f0:16:d6:b1:78:0d:b0:3f:41:73:4b:a1:a4:
58:8a:af:1a:9c:5a:2b:82:c9:2e:44:12:7d:75:36:
d9:46:ea:7b:b9:c6:5f:0f:ad:fe:3e:39:cf:eb:78:
e3:c4:49:5b:be:c5:15:6a:88:af:39:2f:c2:4a:21:
ab:ce:f5:a4:35:50:cb:cf:d9:19:75:fd:69:7a:07:
3b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FF:9F:20:B3:60:26:E3:3B:F3:59:90:FF:5C:A8:7E:6F:57:D1:68
X509v3 Authority Key Identifier:
keyid:A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:02:29:99:df:d2:08:49:2e:5b:d2:25:76:a5:6a:ab:12:9f:
f3:97:1c:09:8f:9f:70:3a:eb:a1:8d:17:91:21:b5:ec:9b:13:
50:f6:63:ac:a3:7e:5e:fe:2b:6f:bd:37:d2:ec:36:24:15:48:
f3:9d:e7:9e:1c:af:5a:93:55:8c:77:50:ab:82:d7:70:6e:c6:
57:e6:43:9f:ef:d3:4a:f4:7e:c2:01:74:91:ec:9c:8e:0b:19:
e5:ff:2d:7f:85:30:5b:97:27:9c:88:f3:c9:7d:d6:88:f2:b9:
60:ee:db:68:3a:21:51:03:51:11:5f:37:5d:45:e3:aa:1c:71:
27:b4:1f:be:45:30:27:59:27:c0:82:e8:91:b6:2c:a4:68:31:
72:c5:89:70:82:f1:49:39:23:99:f3:34:9e:c9:5b:34:f5:9f:
3c:2c:16:27:9a:ec:7d:72:74:14:0a:43:e3:a9:8b:96:5b:56:
de:84:fb:90:1f:f0:fc:e4:9b:55:57:3a:f2:a4:6f:90:a5:1a:
49:2c:ea:b3:16:21:c7:27:46:c9:65:db:ad:a5:7b:79:71:46:
be:61:c8:03:b8:2b:bc:9d:63:cc:9f:c0:37:8e:79:54:a6:fe:
26:ef:9f:d7:d2:20:bb:f6:be:ff:b7:89:23:b6:73:a1:71:a8:
e2:4d:8a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:59:07 2025 by rpki-client