Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
File: qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft (raw, json)
Hash identifier: CM7JPt4P2rNVMosDRG0kEsTe5wBHDoACYeCxAlwIlfE=
Subject key identifier: 10:28:11:A3:C1:C7:97:81:F0:9F:DA:B3:89:70:CC:3C:8D:20:AE:5C
Authority key identifier: AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08
Certificate issuer: /CN=aafc3d2c929710306e847c607d38114aebb3cc08
Certificate serial: 0196760C15B3040AF42A97DB62752046A196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 07:00:25 +0000
Manifest this update: Sun 27 Apr 2025 07:00:25 +0000
Manifest next update: Mon 28 Apr 2025 07:00:25 +0000
Files and hashes: 1: _apVPFDtoRumkOLoXwsvk68svtc.roa (hash: +ctIxD4w3ARboj6lSoUyjZFSq6bE6ZLRIPRMV/RgDGI=)
2: qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl (hash: X0j7tU2CnRwcJL2wyMQruDf5IhmtQQQnjhE0zbWgiCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:15:b3:04:0a:f4:2a:97:db:62:75:20:46:a1:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafc3d2c929710306e847c607d38114aebb3cc08
Validity
Not Before: Apr 27 07:00:25 2025 GMT
Not After : Apr 28 07:00:25 2025 GMT
Subject: CN=102811a3c1c79781f09fdab38970cc3c8d20ae5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:30:77:35:69:e1:bd:a1:0d:3b:97:6e:da:6c:
34:41:d4:5b:a9:2c:82:94:f7:26:2e:58:39:d8:44:
a7:33:75:2b:57:9b:28:3d:a3:46:7d:80:ee:1f:96:
26:8d:75:a2:a0:08:87:37:9f:e0:3a:f3:a7:8a:24:
19:0e:4b:42:ed:ba:8a:54:dd:22:18:4a:eb:75:6c:
52:00:87:e6:5f:26:2f:5d:de:75:02:0b:23:dc:70:
48:3d:ad:9d:6b:43:64:73:db:93:13:39:f0:98:c6:
4b:51:a1:3b:54:57:42:ad:97:b3:90:17:25:f3:b6:
e2:5d:24:85:f6:fc:c4:49:c8:5f:8a:90:77:b1:07:
f6:c4:d8:46:05:ec:87:bf:da:16:93:da:8b:13:56:
ad:03:c5:97:ab:79:02:10:ed:62:18:2d:aa:f7:75:
3d:f7:c5:0b:36:f3:fa:e9:1b:70:cd:55:21:1b:f5:
b8:ec:df:02:2d:b4:6d:24:f6:03:57:c5:1c:3b:5b:
07:f7:64:a8:23:47:1f:66:f4:bb:b9:0e:77:31:c5:
91:d3:45:47:65:ee:11:e1:cd:99:02:c6:37:3b:13:
80:6c:45:1e:fb:ca:df:da:5d:8a:1b:e7:3b:6c:c4:
67:77:3b:f2:59:c7:2e:4f:72:cd:8f:ed:9b:06:39:
a1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:28:11:A3:C1:C7:97:81:F0:9F:DA:B3:89:70:CC:3C:8D:20:AE:5C
X509v3 Authority Key Identifier:
keyid:AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:8b:75:67:01:9e:d7:9f:dd:3a:1b:32:f2:00:95:71:c5:6a:
e7:b0:21:86:26:f4:06:00:c0:41:ce:8b:b7:1f:77:a4:75:98:
87:56:e4:7b:d1:97:52:4c:78:28:75:3b:17:d6:8f:e3:ba:92:
5c:3f:3f:2b:07:f3:6f:11:50:ca:17:0c:bb:f6:86:f1:1f:5e:
4b:8f:6f:32:f2:95:3e:71:d3:da:c3:f7:92:b4:83:f8:a1:4a:
7f:bc:36:a9:12:19:d7:97:55:90:93:f0:26:87:64:4c:9a:eb:
b1:9d:94:25:91:20:cd:92:c6:89:6e:31:1e:ad:61:9b:7e:fa:
ce:13:c7:6d:f0:0e:b3:36:ce:e4:ff:e0:55:a6:48:76:e6:3e:
f0:ac:ab:4e:34:45:c0:f3:4c:6e:b9:86:ed:a3:01:23:8c:84:
1c:74:c5:b1:9b:16:27:0d:a2:b7:88:dd:37:58:63:75:6f:05:
78:73:bd:c4:3b:57:9f:5d:cb:02:6a:87:58:e7:d4:3d:9b:aa:
a6:b7:dc:b5:41:af:57:62:d1:ce:3a:65:67:a7:ec:21:64:06:
c7:5f:52:e5:98:4d:2d:9c:3d:f3:74:5b:ea:e4:67:8c:f7:ed:
11:6d:5d:4e:44:b0:b6:56:53:f8:f7:ca:f5:d4:99:ad:63:46:
ef:83:b4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:30:20 2025 by rpki-client