Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
File: qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft (raw, json)
Hash identifier: ei8gPDL8njYn0XWGjdGiat7e+LKpCyJs4XwEhSF/5+8=
Subject key identifier: 43:68:F8:11:7B:81:71:87:7D:6B:66:69:6A:19:12:3B:5F:3A:40:8F
Authority key identifier: A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6
Certificate issuer: /CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
Certificate serial: 0196718AB62E4D22CB10536B54E3BAEB1541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
Manifest number: 14AD
Signing time: Sat 26 Apr 2025 10:00:37 +0000
Manifest this update: Sat 26 Apr 2025 10:00:37 +0000
Manifest next update: Sun 27 Apr 2025 10:00:37 +0000
Files and hashes: 1: F-LIYuBdyXdsWgfHqfWysJKiWXU.roa (hash: VqoafOC7jzXc0AkcNCpssMEPfK7J5Kse2STPQ5Iw9TU=)
2: RHzpUiuiNY0XEXcS875xUQAmg2o.roa (hash: 6vPYA2Rs4cYHy6RhBB/Rp48XNVrguqaU80TWpEOz0XU=)
3: qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl (hash: DrWnUBjmM37ttUs3wBmQrkjUfvmX7r4g7BsoFdAXwfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:8a:b6:2e:4d:22:cb:10:53:6b:54:e3:ba:eb:15:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
Validity
Not Before: Apr 26 10:00:37 2025 GMT
Not After : Apr 27 10:00:37 2025 GMT
Subject: CN=4368f8117b8171877d6b66696a19123b5f3a408f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b8:c0:da:0d:4f:47:13:d9:cb:ae:fe:2a:c5:
ad:30:c3:0a:b0:35:cd:72:f4:d0:64:d0:82:a2:85:
31:bd:86:93:1a:19:73:97:89:bd:e2:ca:cc:7a:c2:
de:73:78:c8:a4:aa:52:60:39:cd:6d:5b:4e:2e:40:
c0:b3:b6:6f:dd:ff:c0:dd:aa:80:e3:d5:66:66:3d:
a5:a8:11:5b:f0:23:92:4c:a9:d2:54:0f:ee:d6:ce:
ad:dc:4a:25:16:11:20:11:7e:0d:5b:fa:85:2f:aa:
9e:da:1c:76:b3:7c:a3:9e:52:88:c5:c3:39:dd:fb:
3e:9f:45:f8:d1:0f:ee:32:d6:86:56:81:99:36:bd:
50:5d:b9:8f:20:33:a3:8e:9a:55:d2:b4:87:70:5a:
d9:18:1a:1a:1a:6f:52:5b:c7:e6:7f:73:0c:dd:ff:
b3:cb:0c:a1:e4:dc:5e:f1:1f:88:c4:7f:82:4a:5e:
11:1a:7a:49:92:2e:b6:0b:96:34:cc:25:3e:dd:67:
66:e5:5f:a3:75:bf:f7:83:0a:9b:c8:4f:c3:1b:14:
47:a9:dd:1e:8d:20:a8:99:12:4e:f0:24:00:8a:83:
f7:e2:af:12:c3:14:5a:9e:04:b9:26:85:24:74:41:
9b:40:86:92:af:35:32:d3:82:39:2e:91:d1:ff:24:
ee:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:68:F8:11:7B:81:71:87:7D:6B:66:69:6A:19:12:3B:5F:3A:40:8F
X509v3 Authority Key Identifier:
keyid:A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:61:49:97:7b:ce:b6:18:a1:f0:45:b0:d0:63:eb:81:e5:de:
a3:63:3a:53:91:23:85:61:e7:35:8b:41:d9:35:cd:14:05:a1:
82:1e:d5:d5:44:31:06:82:13:95:9b:17:ce:a2:be:1a:82:53:
bc:72:5e:c3:99:0f:9d:0a:bc:24:7b:09:44:18:fb:1e:1c:04:
21:dd:21:14:17:2d:f9:bd:17:3b:47:03:a0:df:42:8a:c5:16:
87:6f:06:2b:50:fd:d0:d9:00:11:06:ab:a8:a3:5c:67:f7:b9:
ea:72:15:f4:67:23:23:de:52:ca:58:80:96:fb:9c:b0:06:33:
54:9f:1e:2b:b6:cb:d5:ae:9a:46:5c:c5:e6:b4:fb:5b:01:7b:
d4:f2:30:60:c2:ed:bd:d1:26:70:de:cf:97:fc:82:5c:9b:8c:
0c:9c:6e:fb:0e:d2:23:8f:55:9b:1e:51:09:cf:36:47:73:85:
ab:28:bb:1d:24:8e:39:86:fe:07:21:4c:f1:47:0e:f0:4a:75:
ec:7c:bb:39:5d:24:51:e6:b2:96:ff:f9:bd:00:80:57:4b:06:
7a:f3:46:54:22:ab:4d:fd:9b:8d:89:a1:e3:8e:88:ec:cd:3e:
16:2b:23:fa:7b:cf:ed:6e:0b:fd:d8:20:49:ad:d3:05:9c:8e:
04:ef:14:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:02:48 2025 by rpki-client