Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
File: Q68umH0rY63apa3BePMekNh2qqc.mft (raw, json)
Hash identifier: HnEHKoNkyuwDSTVXso6xTEGvrYFOd4raiCZs6HvuyiM=
Subject key identifier: 90:00:2B:5F:30:53:CD:96:D0:85:5A:60:66:45:C0:BE:F4:89:AF:48
Authority key identifier: 43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
Certificate issuer: /CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Certificate serial: 01967153AFA4758B2F43E99190A10EDE8CEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
Manifest number: 1510
Signing time: Sat 26 Apr 2025 09:00:31 +0000
Manifest this update: Sat 26 Apr 2025 09:00:31 +0000
Manifest next update: Sun 27 Apr 2025 09:00:31 +0000
Files and hashes: 1: 71gvIX06FZhti5C8KqbG-iL3ji8.roa (hash: ixliMnZsbefklIbCdZSQC08KvvVc2/x3CDK+CGl2CBA=)
2: IEgYKG7Z6QdmhTg8jbadzlqUL0A.roa (hash: czHiBi7aC7gYGx6TuroDY+vPvsviuucmLi9+d2nYML8=)
3: N7dkJGPV_ClH0zdsWhUXQhLf-fI.roa (hash: 61rIBj7suoaRe9FEYDOMgKbW4Bfv19fnscul85uRvy8=)
4: Q68umH0rY63apa3BePMekNh2qqc.crl (hash: YbBkKb3FfXmNOU4HoPKPQOklmQEmIdHeD72moclqwHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:53:af:a4:75:8b:2f:43:e9:91:90:a1:0e:de:8c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Validity
Not Before: Apr 26 09:00:31 2025 GMT
Not After : Apr 27 09:00:31 2025 GMT
Subject: CN=90002b5f3053cd96d0855a606645c0bef489af48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:23:51:10:a2:30:05:d9:3d:b6:4f:27:56:67:
25:c9:af:42:ba:1f:95:58:62:93:9d:56:5c:ce:b6:
b8:6a:02:6f:ed:95:6c:62:a1:ae:55:b6:00:32:61:
11:06:d6:fa:c8:52:9d:76:cc:95:fe:10:ef:7c:49:
f9:8a:6a:c0:86:f6:2a:0b:31:bd:c4:80:27:67:f1:
df:53:0b:33:b5:80:c1:db:1d:4d:98:bc:b9:79:25:
0a:97:b8:73:5f:b5:86:ea:7b:f6:99:1a:22:09:0c:
a7:45:b2:f0:da:41:4d:ad:81:1e:db:31:ff:66:64:
5c:d3:db:eb:17:48:57:66:10:02:53:f8:a4:1b:e3:
92:83:5b:9b:cb:ab:cb:8a:e5:aa:cd:5d:9c:e5:bb:
96:14:7d:6a:2e:9a:58:bb:c6:f7:19:a1:25:cf:7f:
91:8e:3d:92:67:4b:3c:46:31:3d:9b:b4:8c:fb:57:
4f:f2:be:15:58:4c:3d:6c:d3:c1:ad:7e:68:e6:07:
16:66:aa:d2:36:6e:55:0a:98:40:90:e6:23:eb:a9:
8f:8d:72:68:a5:d5:c4:96:ec:eb:d5:e4:b4:1d:a2:
c2:ff:c7:06:de:96:1b:33:f1:a3:76:7e:08:99:b9:
0d:54:45:b6:bb:b1:40:0b:3d:cd:f2:a0:a1:85:13:
23:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:00:2B:5F:30:53:CD:96:D0:85:5A:60:66:45:C0:BE:F4:89:AF:48
X509v3 Authority Key Identifier:
keyid:43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d9:42:84:61:ee:b6:b0:47:eb:c9:e2:cf:69:72:48:28:f3:
ee:c5:6a:b5:22:29:31:55:50:6b:27:e1:31:82:81:c8:86:ed:
1d:73:01:16:c8:ec:c2:fe:bb:59:37:19:5e:fc:44:b1:0b:af:
94:8e:b2:4e:e9:09:6b:5f:ad:99:26:61:ed:ff:03:e0:6e:55:
ac:f3:f6:65:07:a3:e6:95:60:38:b2:3b:b2:ab:ee:6d:67:ed:
5a:d6:1f:e5:50:4e:b1:aa:ac:43:60:98:43:fb:a0:e0:81:28:
38:39:04:8d:4c:12:26:5a:c4:fd:e8:a4:e2:eb:39:7b:c4:21:
29:c0:bd:82:02:9e:e1:34:7e:f2:9c:db:15:3a:01:34:ff:d1:
24:e4:0c:58:94:3e:7b:e6:ff:d7:33:2e:44:be:fb:55:25:e6:
45:79:3c:c9:1f:66:bd:60:91:5c:65:4e:19:d7:b9:01:79:80:
5d:13:82:af:ce:83:86:46:ba:a5:2d:f8:9a:c4:c2:e6:04:8e:
b9:51:47:b1:26:04:e5:77:f5:68:a9:65:aa:9f:b5:a8:87:7a:
4a:05:98:c3:aa:81:67:38:3d:e5:c2:a7:a9:05:1f:4f:32:04:
1c:61:1a:c2:3d:79:ae:90:8f:00:2c:84:96:e0:7b:a6:a0:9f:
d5:d9:ce:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:41:29 2025 by rpki-client