Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft
File: Q_2TYug7hS8_0zEbCQlvYommoPg.mft (raw, json)
Hash identifier: bgNYjS2+NPhRKd0YGmS3j76d64Xo3mh+rrtP0uSa+p4=
Subject key identifier: 53:59:20:68:20:FA:91:7A:86:CF:FD:91:B2:9C:8E:A6:BE:68:F2:44
Authority key identifier: 43:FD:93:62:E8:3B:85:2F:3F:D3:31:1B:09:09:6F:62:89:A6:A0:F8
Certificate issuer: /CN=43fd9362e83b852f3fd3311b09096f6289a6a0f8
Certificate serial: 01967CE9B2139D1DF617C85F69CA70DDEAB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_2TYug7hS8_0zEbCQlvYommoPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft
Manifest number: 0DE7
Signing time: Mon 28 Apr 2025 15:00:12 +0000
Manifest this update: Mon 28 Apr 2025 15:00:12 +0000
Manifest next update: Tue 29 Apr 2025 15:00:12 +0000
Files and hashes: 1: Fy-RDVpoQYqhk9YIhC0_OXJ7Ngw.roa (hash: MSpbkpTae0BKWb0wW1Z5MLxX2eex/b1uULBuB1GrJoU=)
2: Q_2TYug7hS8_0zEbCQlvYommoPg.crl (hash: gwW4cUUshUthWXhrbhWQ0QCAhxN7nf6qXR3q3RdUg+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q_2TYug7hS8_0zEbCQlvYommoPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:e9:b2:13:9d:1d:f6:17:c8:5f:69:ca:70:dd:ea:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43fd9362e83b852f3fd3311b09096f6289a6a0f8
Validity
Not Before: Apr 28 15:00:12 2025 GMT
Not After : Apr 29 15:00:12 2025 GMT
Subject: CN=5359206820fa917a86cffd91b29c8ea6be68f244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cb:0e:30:ee:9f:69:54:ff:a3:ae:0a:38:6c:
1f:ea:b5:75:d6:60:87:53:3f:85:8c:4c:15:5b:c9:
05:da:d3:6c:22:50:4e:fd:c2:24:56:63:d8:11:c8:
78:95:9f:d0:25:3c:93:1b:7d:ed:70:f0:82:3f:3c:
ee:a8:c4:82:5b:51:75:a8:82:b5:bf:90:27:1f:3d:
e7:02:1f:f8:b4:9e:d6:c7:5c:f8:f7:f0:48:a0:9c:
3e:32:e9:8a:4a:4f:ec:b8:37:36:5c:f1:8a:c0:ac:
7f:1f:54:4b:a3:6c:47:89:d8:25:0d:7b:01:fe:f5:
99:c0:78:e9:b1:57:6f:7c:c0:cb:4d:4d:01:a5:d2:
7e:5a:37:dc:52:93:48:50:5e:10:c0:6f:50:5b:8a:
54:f8:07:33:08:b3:61:bb:5b:e1:af:b4:d7:46:08:
df:2f:70:4b:ce:77:06:ee:ab:97:ad:ee:03:90:1e:
16:68:ff:aa:94:ee:1b:c0:f1:a0:a8:37:00:68:13:
4c:a9:5b:7a:17:b7:82:5a:f6:22:2d:09:51:5d:54:
cf:1b:bf:30:b2:1b:55:5c:1d:16:4f:ac:fc:3c:5e:
d7:62:a2:4b:de:01:49:c5:0a:59:2a:2f:df:10:77:
fb:11:05:ee:2c:8c:20:56:f0:76:09:f2:91:2a:0a:
18:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:59:20:68:20:FA:91:7A:86:CF:FD:91:B2:9C:8E:A6:BE:68:F2:44
X509v3 Authority Key Identifier:
keyid:43:FD:93:62:E8:3B:85:2F:3F:D3:31:1B:09:09:6F:62:89:A6:A0:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_2TYug7hS8_0zEbCQlvYommoPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e2:ae:ed:80:2b:b4:bf:89:03:3b:84:74:63:9e:88:80:19:
74:e4:c0:e5:c5:9a:83:09:8f:ce:85:16:cf:dc:cc:47:90:b6:
da:df:a6:fb:c4:97:ba:4e:19:6d:03:ab:6c:fc:70:52:25:cb:
e2:0a:cf:3d:41:21:09:ff:5b:bf:a3:0f:8a:72:10:74:da:b9:
33:11:22:02:55:ca:aa:79:ce:da:1c:4b:06:ba:f7:2b:2a:01:
a0:01:8e:6e:ff:d7:5b:0c:51:77:1b:bf:bf:40:d9:d0:7c:b5:
a6:3e:ec:2a:f4:41:9a:9b:d3:0c:02:52:93:03:bb:aa:e3:2a:
2e:a0:59:a9:08:9a:49:49:cc:dc:63:bd:35:01:63:19:30:b3:
a5:bc:4c:2a:ac:28:bd:5e:3e:93:82:2f:4c:83:9d:db:a7:ad:
96:f9:b4:21:ab:d5:a3:ec:d5:93:ef:63:c3:ff:fd:68:de:67:
e9:84:a9:36:f1:02:e1:14:90:8f:94:94:ca:dd:d7:a2:2c:a6:
15:b9:0b:0f:ad:88:1d:51:ed:6b:1a:61:88:6b:fa:55:43:c5:
70:48:6b:46:f9:3b:e2:8a:34:23:a9:b9:d5:8e:71:d2:62:8d:
14:27:a3:79:7e:50:32:17:6f:0e:98:ad:61:88:1b:fb:9d:29:
9c:4e:5f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:54:11 2025 by rpki-client