Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
File: QM_TpJvHHnSg0L9-NGyomylZehI.mft (raw, json)
Hash identifier: zxaFO0ShDap+sFk/Gd/Sk3nPpzSPTbGt54qvfJAbgn8=
Subject key identifier: FB:5F:E9:13:5C:0F:7D:F3:7C:BA:E6:19:FE:90:5E:E0:0F:68:78:92
Authority key identifier: 40:CF:D3:A4:9B:C7:1E:74:A0:D0:BF:7E:34:6C:A8:9B:29:59:7A:12
Certificate issuer: /CN=40cfd3a49bc71e74a0d0bf7e346ca89b29597a12
Certificate serial: 01967DC607E35AF5143CD41C64E25056583C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 19:00:52 +0000
Manifest this update: Mon 28 Apr 2025 19:00:52 +0000
Manifest next update: Tue 29 Apr 2025 19:00:52 +0000
Files and hashes: 1: QM_TpJvHHnSg0L9-NGyomylZehI.crl (hash: cbv3+HJcZWgp+9rpyLqkHP94TcaknSDTOIhb8b56bFg=)
2: cOU0f1SCKSAnKUQtSDidcXUui3Y.roa (hash: SxetuqQIAbe3h1o0xhzW+JEeQWRKvCIOYuGwJHKjEXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c6:07:e3:5a:f5:14:3c:d4:1c:64:e2:50:56:58:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cfd3a49bc71e74a0d0bf7e346ca89b29597a12
Validity
Not Before: Apr 28 19:00:52 2025 GMT
Not After : Apr 29 19:00:52 2025 GMT
Subject: CN=fb5fe9135c0f7df37cbae619fe905ee00f687892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:86:46:f5:41:7d:52:b9:1e:69:1d:2b:5b:e1:
52:cb:ec:16:e2:78:b2:df:6f:9c:61:2b:2e:80:b5:
19:1b:af:97:22:6c:70:cf:3f:82:5e:b6:42:5f:30:
79:3f:de:b0:11:e8:57:ea:4f:a4:2a:74:12:0a:23:
bc:2a:43:ad:9a:6d:7c:44:80:54:7a:4c:38:f1:96:
30:bc:fd:7c:e7:ae:5a:2b:86:93:60:2d:59:4a:9d:
c7:0d:e0:21:6d:d3:dc:f3:d2:48:c5:30:8e:5d:f1:
8f:b6:b5:cf:96:87:14:96:93:e6:11:f2:9e:15:5d:
7a:69:ac:91:07:a6:b7:8a:0c:f9:1e:7c:7b:05:09:
87:31:63:91:98:e7:34:c8:18:db:bf:a4:8f:d6:43:
b2:c3:68:5e:78:70:b7:60:c3:52:37:1f:f5:1d:07:
c4:b9:b5:2a:fb:21:a9:f9:eb:9d:73:7d:f8:ff:4c:
4d:7c:3f:c5:b8:5a:82:7b:27:a7:d7:27:23:de:ca:
a3:de:c6:12:76:8b:c4:16:6c:12:41:e0:c1:1a:0c:
40:6a:86:7c:2d:77:29:08:a0:7d:4f:67:66:d9:10:
6a:f1:ea:ed:96:e1:60:54:1f:d0:4a:00:a7:1c:f8:
51:78:98:c6:92:02:d2:8f:35:2f:e7:b6:17:ec:11:
bd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5F:E9:13:5C:0F:7D:F3:7C:BA:E6:19:FE:90:5E:E0:0F:68:78:92
X509v3 Authority Key Identifier:
keyid:40:CF:D3:A4:9B:C7:1E:74:A0:D0:BF:7E:34:6C:A8:9B:29:59:7A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:3c:65:e6:ed:21:6d:ad:de:53:76:a2:58:ca:b8:77:b8:12:
62:f6:24:ca:b2:61:e3:d7:72:2b:60:b4:e6:36:65:7c:2c:58:
00:76:fe:88:f9:f7:9c:8f:2d:bb:2d:a8:44:0a:95:49:04:f5:
48:8a:14:6c:7b:35:bb:80:7f:b0:6f:4a:96:27:a2:a0:d6:66:
e7:0b:b6:7d:39:1a:7a:01:b9:66:d5:d8:ab:6b:28:79:26:dd:
02:37:7b:96:ac:4e:b7:45:e2:bb:5e:37:61:2b:85:89:17:6b:
8c:e4:32:d8:07:e3:51:0b:41:26:6c:ab:d3:f5:5d:95:8e:b0:
ef:76:7c:39:05:e9:4c:bc:35:39:0e:67:33:40:39:df:57:e7:
f7:2e:ae:ef:0c:c6:86:d5:94:e1:2b:28:ca:a9:96:f3:4e:13:
6b:a3:2a:ad:c9:68:e7:19:1a:cb:2e:ab:0a:27:ab:20:27:dd:
84:02:58:e0:9e:b7:36:46:db:88:77:94:6c:4e:e3:b8:40:7c:
d7:ef:e8:7d:0a:a9:fe:73:ad:d8:07:3c:f1:83:a3:de:1b:df:
94:2b:5d:c8:8b:05:54:af:3d:d3:5a:84:10:fc:6d:d4:16:e4:
6e:9a:85:ad:6e:22:77:47:6e:64:52:ae:6d:7c:c7:04:70:46:
63:68:a8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:53:06 2025 by rpki-client