Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
File: QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft (raw, json)
Hash identifier: z6NhlmPmNspgRwA8q1AZIx4QZm34wWVA7qhy9YVq3n0=
Subject key identifier: 4A:00:FB:C1:5C:F8:85:F8:31:A6:9F:4D:50:BD:EB:52:CC:CB:E2:DC
Authority key identifier: 41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
Certificate issuer: /CN=4100e4b4a97882c1798c470e3abd805e325dd595
Certificate serial: 01967B69C14D787C6DDB56F931375CD82E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
Manifest number: 0A1E
Signing time: Mon 28 Apr 2025 08:00:50 +0000
Manifest this update: Mon 28 Apr 2025 08:00:50 +0000
Manifest next update: Tue 29 Apr 2025 08:00:50 +0000
Files and hashes: 1: QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl (hash: YBNQ1/jSO4utCHWD//EEKO5xi98NVKamDN79Y6fbag4=)
2: dKp1x4AjnPUcfIO_WrYQasCbX4c.roa (hash: BBLyfF5z+X1cauuxHi1cH0OZMMJW5dshnRCgSvteyno=)
3: uBNZ4MqXESz6xGHzQdhbKOD3CeA.roa (hash: Xvf1KJxZcyYU4khA0juJ7NXfjXv9HKqoCzWln+BqLrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:c1:4d:78:7c:6d:db:56:f9:31:37:5c:d8:2e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4100e4b4a97882c1798c470e3abd805e325dd595
Validity
Not Before: Apr 28 08:00:50 2025 GMT
Not After : Apr 29 08:00:50 2025 GMT
Subject: CN=4a00fbc15cf885f831a69f4d50bdeb52cccbe2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:47:89:64:1f:31:1a:f0:df:b9:1e:87:da:db:
7d:8e:b8:b2:69:7c:5c:74:f7:33:6e:cb:1f:f5:fa:
19:80:af:06:5a:e2:9a:cc:51:9c:74:24:ff:ea:51:
56:2d:69:55:9b:5d:9b:87:9d:d0:42:61:4b:f8:9e:
63:13:e8:26:5a:55:56:67:8f:44:47:85:11:c4:5c:
de:a4:31:bf:5e:24:db:e1:09:59:02:1a:c5:a8:76:
d7:06:18:f7:74:06:75:31:5e:ed:d1:2a:94:e6:dd:
b8:fc:d0:21:eb:66:f9:e8:58:01:3a:30:3b:cb:98:
91:0e:8c:b8:b6:da:97:f0:63:49:69:d9:9b:84:fc:
69:6e:ec:c1:f6:52:9b:08:0d:89:de:fe:0f:f9:60:
f0:78:82:4a:42:eb:c7:fd:41:d3:ca:9d:64:f7:72:
40:d3:99:cf:38:fa:f5:fd:f0:8c:37:69:b8:16:5b:
c0:71:1e:01:e0:04:f3:8c:f0:83:9a:d8:da:f7:c1:
80:d1:2c:7c:43:87:59:6b:98:cd:a0:b0:a3:a4:70:
91:4d:a9:75:35:db:93:83:ff:61:6a:f3:7a:cb:42:
2a:b4:1a:fc:68:ff:e5:6a:2e:05:64:70:f0:31:0b:
6e:d7:03:88:ff:da:9c:6a:68:b0:20:6e:e9:ba:9c:
02:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:00:FB:C1:5C:F8:85:F8:31:A6:9F:4D:50:BD:EB:52:CC:CB:E2:DC
X509v3 Authority Key Identifier:
keyid:41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:80:0a:58:9b:06:42:bc:2d:0f:53:f3:f9:53:d6:da:78:12:
c3:63:c2:7d:1a:ad:79:6f:22:5d:d0:0f:f6:a9:f0:70:49:be:
f6:41:2b:6d:e4:6d:40:7b:8d:9d:4e:46:fd:db:91:08:d0:62:
fa:12:61:56:42:cd:b9:b5:59:0e:05:45:21:b6:65:00:33:ad:
7f:fe:19:90:43:28:ce:d0:b1:c6:f9:df:7b:27:06:4f:47:3d:
98:d9:ae:ff:fc:06:34:ea:7f:6f:db:db:29:b1:b0:cf:5c:61:
ee:5f:c5:96:b5:20:60:c2:2d:6f:ca:1a:9b:2e:8e:13:73:9d:
14:20:7f:cc:f0:26:65:5e:63:39:70:92:b9:2a:92:82:0b:3a:
55:e2:3f:ff:81:14:32:e9:58:ab:5d:d3:59:2c:a9:14:98:30:
6e:64:0e:20:65:1b:a5:9d:ac:ee:43:93:8e:c2:ed:5a:d1:5a:
ba:b4:9c:94:5a:ce:8b:6d:c3:d2:ca:c1:8d:f7:45:e3:df:d2:
09:98:04:3a:6d:8b:14:1c:50:fb:23:8a:e4:00:31:d5:f1:86:
eb:30:de:76:64:58:b1:99:bb:10:f4:a6:b2:0f:43:db:64:ab:
06:68:af:20:d4:a6:a6:6e:5f:58:03:0d:6f:86:55:07:99:30:
ed:8a:52:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:18:27 2025 by rpki-client