Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
File: qGBDVsdQGuIQSyzO087cXb3BFjs.mft (raw, json)
Hash identifier: dwyJurm8trgtjjMjGHGayEI3oqp+lo6o40xD0Mq+gNo=
Subject key identifier: 5B:B9:62:2D:DC:84:F8:A5:6C:20:6C:1B:FB:BD:E2:21:4F:6F:BD:25
Authority key identifier: A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
Certificate issuer: /CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Certificate serial: 0196741DB4492E560A06695FC3B6EB4B3BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
Manifest number: 05CB
Signing time: Sat 26 Apr 2025 22:00:25 +0000
Manifest this update: Sat 26 Apr 2025 22:00:25 +0000
Manifest next update: Sun 27 Apr 2025 22:00:25 +0000
Files and hashes: 1: jnSve3XmFe0Ms43uzQn1WmoreJ0.roa (hash: JpZLimfc7+7aqyHJzwRKIdaJc+FFYashS7WERx4Vf3Q=)
2: qGBDVsdQGuIQSyzO087cXb3BFjs.crl (hash: Q8RkHIcb0xliojkUo28U2/zbDU3GvcA5orau50Wk1Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:b4:49:2e:56:0a:06:69:5f:c3:b6:eb:4b:3b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Validity
Not Before: Apr 26 22:00:25 2025 GMT
Not After : Apr 27 22:00:25 2025 GMT
Subject: CN=5bb9622ddc84f8a56c206c1bfbbde2214f6fbd25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b2:8c:c0:6b:44:94:4e:9f:26:e4:d7:e9:6d:
65:3a:b1:ee:b7:3d:f8:19:5c:d4:f8:d2:47:9a:bf:
72:d2:28:9f:e7:29:ec:c9:e2:69:fd:16:f3:a1:55:
cd:04:79:6a:3d:51:22:42:cd:1b:7a:54:29:ee:f6:
cb:78:a1:bb:0e:e3:9f:d8:ee:6a:46:6f:4e:73:cf:
df:a5:85:10:43:e2:ad:96:3b:37:cd:6e:04:02:49:
3d:2d:a1:7b:05:5e:4b:c4:81:68:0d:fa:8a:84:8e:
d9:15:4e:65:1a:20:05:6e:32:bf:3d:f5:c1:80:79:
83:8d:5b:9e:bb:36:6b:44:66:05:b4:f9:88:2a:b7:
6c:22:1b:8c:1c:e3:79:1f:03:ae:48:37:56:cc:fc:
2b:9a:e7:67:9d:68:0a:36:36:1a:27:c2:2c:84:b2:
8f:3d:87:12:54:1b:1d:f2:94:85:a4:99:60:12:82:
a8:39:eb:c4:e1:b5:5e:e1:3f:05:cc:0d:6f:41:69:
32:b7:41:3b:08:f2:8a:0c:7c:22:9b:4e:52:c4:5b:
89:30:41:8e:b3:16:69:e3:9b:ef:58:b8:63:5c:b6:
a8:24:f2:e7:ba:17:57:22:51:ed:d8:c7:21:c2:12:
b5:e9:9e:25:b4:12:76:38:00:9e:42:42:aa:b8:e9:
1b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B9:62:2D:DC:84:F8:A5:6C:20:6C:1B:FB:BD:E2:21:4F:6F:BD:25
X509v3 Authority Key Identifier:
keyid:A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a7:ff:93:af:d0:ea:14:dd:b7:f9:65:9e:0e:d2:88:c2:96:
cd:9c:f5:95:40:4f:f0:d4:12:b1:41:d3:c7:72:50:b0:f0:79:
16:f3:bd:f0:b0:e7:01:0a:61:9d:a7:03:12:c4:c3:43:bb:ab:
96:fa:c4:e9:d9:51:29:15:f4:5f:82:66:1a:a9:42:d4:23:b1:
d8:be:3c:0c:e1:d1:8b:62:5f:e3:74:3a:d5:8a:76:16:6a:e9:
43:8e:7c:83:cc:dc:24:2f:f3:e8:f0:3a:06:79:60:a1:11:ac:
ad:5f:29:76:30:cd:41:8f:e6:9e:af:2c:ba:0e:24:ba:23:09:
00:3d:b4:fc:2e:8c:6c:5d:5b:a9:91:b2:a0:9f:af:67:f5:23:
d8:31:b1:08:ac:b8:d1:43:61:7f:9e:ea:87:c6:c9:11:9c:9e:
51:aa:22:cb:48:1b:d5:34:8a:73:09:07:f9:9a:ea:83:aa:55:
88:a0:32:d0:3e:d8:a4:ff:dd:9e:42:64:24:12:f8:28:b4:16:
9c:57:d5:85:a5:f1:71:70:4e:48:8c:8d:45:a0:0f:a5:66:4a:
97:57:bd:a9:f6:a6:dd:02:9f:c0:43:fa:35:c7:a5:6a:c5:46:
6f:4b:f0:00:60:76:46:d9:79:cb:2b:a2:45:10:d2:9c:c4:62:
e8:4c:eb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:44:25 2025 by rpki-client