Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
File: XQoNOW92k2k2XyuYPFMa_sqXEKc.mft (raw, json)
Hash identifier: fIboIjZaHIkPrFWKarAX/D1Mq6Q9pmpBbN9r7pKaVvM=
Subject key identifier: 9D:E3:7A:3E:3B:C0:0D:7B:9D:21:41:D3:E0:C3:EB:6E:A5:5D:97:E9
Authority key identifier: 5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7
Certificate issuer: /CN=5d0a0d396f769369365f2b983c531afeca9710a7
Certificate serial: 0196797B36611F1E3F533A6B56A95F8542FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
Manifest number: 03D9
Signing time: Sun 27 Apr 2025 23:00:40 +0000
Manifest this update: Sun 27 Apr 2025 23:00:40 +0000
Manifest next update: Mon 28 Apr 2025 23:00:40 +0000
Files and hashes: 1: 4qFSko06M6ldKhEnW5jCnn4ySD4.roa (hash: 9ZDGMUNQVPx9Ca0E8soIFoMtBGmde/WvzWxmQVvH3aE=)
2: ODlja_b59i-133EBdAMvNxg_FGs.roa (hash: BeeBcCK5yZ18C4O3Tfyd1bLor0is1i1bKSBKlJMjrjE=)
3: XQoNOW92k2k2XyuYPFMa_sqXEKc.crl (hash: bKDbtRqmOSAXSpqDFrtb176Jlfz5YadlOq0TglJW1qY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:36:61:1f:1e:3f:53:3a:6b:56:a9:5f:85:42:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0a0d396f769369365f2b983c531afeca9710a7
Validity
Not Before: Apr 27 23:00:40 2025 GMT
Not After : Apr 28 23:00:40 2025 GMT
Subject: CN=9de37a3e3bc00d7b9d2141d3e0c3eb6ea55d97e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:95:9a:71:20:32:c7:c6:d4:c6:d9:02:68:03:
04:b3:8e:15:b3:e4:93:1b:7c:d3:d9:f8:bf:c7:ff:
5a:87:61:2c:60:b4:f5:29:bf:2f:fe:82:f4:11:83:
83:1c:0d:3d:35:a1:03:aa:59:34:ca:f5:d4:06:1a:
6f:1d:bc:02:e2:9d:91:e8:5c:82:4a:fc:71:da:d2:
e2:73:5c:73:ab:46:33:26:3c:ec:53:82:08:8f:f3:
29:77:c6:a9:6b:3e:a2:84:41:a4:30:cb:f1:02:e1:
1d:0e:e1:21:0e:b4:e0:60:2a:00:c3:a4:65:76:ec:
d7:c9:6e:96:7f:d3:4d:86:e9:19:10:2e:1f:86:15:
8f:e2:c9:4a:be:29:4c:cf:fc:d6:b4:d4:f8:f1:6a:
c9:b0:3c:1c:3d:b7:a6:e8:40:5a:2b:2f:29:99:6d:
7c:35:74:b0:b7:fe:bb:bc:62:cd:0e:64:14:93:54:
1e:be:f2:f9:13:6b:45:98:8f:ff:04:ef:f6:28:b4:
13:e3:f9:52:d2:04:e6:d8:3d:65:74:88:4f:03:c4:
24:86:ed:5c:6c:ea:49:ef:50:08:92:b2:28:36:7f:
b1:18:21:07:2a:70:66:63:ab:39:1b:e7:c6:5c:62:
de:f9:6d:2a:80:d6:e0:c3:83:94:40:01:28:fe:b1:
9f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E3:7A:3E:3B:C0:0D:7B:9D:21:41:D3:E0:C3:EB:6E:A5:5D:97:E9
X509v3 Authority Key Identifier:
keyid:5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:05:a5:20:fe:3e:3c:7d:02:11:5d:9f:0b:8a:8b:c1:84:f9:
cd:30:9e:66:1d:43:03:22:8f:c2:d2:96:b2:ad:11:10:25:50:
66:02:11:35:ed:59:97:cf:3f:c1:1d:72:86:20:1c:b5:fc:17:
bf:35:67:ec:d7:40:3e:36:c7:be:c2:98:29:41:85:63:d9:49:
4f:8b:9b:0a:43:6a:ce:ae:4e:65:83:07:ee:52:18:5a:3e:10:
29:8f:78:d0:f0:f5:d2:f9:f0:46:e5:57:a4:ff:76:d9:56:24:
55:74:07:c5:d6:eb:c7:28:93:02:1f:83:2f:1e:a6:01:5b:c8:
03:d2:6e:36:23:a1:67:5f:0f:ff:6d:a6:c7:32:f7:3b:d3:91:
d2:6f:96:9c:02:60:a8:37:36:d7:14:33:2d:92:7b:e0:2b:5a:
ad:32:9d:d5:97:e8:16:67:6d:0f:70:05:e0:0b:4f:5e:e8:3d:
6f:6c:f6:fb:6b:fe:5d:e6:d6:63:c7:ec:f0:aa:f7:8e:12:4d:
d8:89:2d:fc:a5:b6:53:54:2f:9a:5d:36:e0:24:7f:9c:66:a2:
41:de:37:f9:c2:34:8f:ea:3a:5a:88:66:e8:e4:17:12:15:75:
5b:29:a6:60:ea:13:51:a8:1a:e9:ba:2e:dd:cf:79:02:e9:f0:
64:6c:1a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:14:01 2025 by rpki-client