Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
File: 1QibzgjFXapXtPOjyQcPs5GFPM8.mft (raw, json)
Hash identifier: sq+feNxv759pR0FhgW1TB7jiog65eiMiiMRI35ZSxFE=
Subject key identifier: AF:26:A2:60:DC:CA:AF:F3:B2:F7:26:31:9B:83:3C:2A:3C:62:6D:7A
Authority key identifier: D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
Certificate issuer: /CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Certificate serial: 019675302FD6716E11FDC2332D48B8762F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
Manifest number: 09E3
Signing time: Sun 27 Apr 2025 03:00:14 +0000
Manifest this update: Sun 27 Apr 2025 03:00:14 +0000
Manifest next update: Mon 28 Apr 2025 03:00:14 +0000
Files and hashes: 1: 1QibzgjFXapXtPOjyQcPs5GFPM8.crl (hash: FJjY9sF/Ywx7xoEigW6g0SX4br6c/2EHNeuFOBaooLw=)
2: Vf8IRTOjd5EHRik_XU5SL231JR0.roa (hash: pdMIDPOwO8DUN6tctG8DJMO1R37Vl0PhbVyMv6IZEJE=)
3: x75CgHaNcNlIrskWea67UxRrM1c.roa (hash: xJt3cVolGlaYguNEQZsOwCLANVkSIZwIfqNsviXM16Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:2f:d6:71:6e:11:fd:c2:33:2d:48:b8:76:2f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Validity
Not Before: Apr 27 03:00:14 2025 GMT
Not After : Apr 28 03:00:14 2025 GMT
Subject: CN=af26a260dccaaff3b2f726319b833c2a3c626d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:1d:ff:5f:24:f0:ee:0e:1a:95:34:53:6d:
3d:80:0b:d6:c0:c7:4c:96:02:53:34:22:ae:6a:b1:
c1:ae:8f:99:47:77:ef:18:1c:ee:2e:7a:6b:bc:a2:
01:b2:ec:38:b6:79:f5:95:08:dd:bb:27:8f:ec:0f:
0a:9a:09:96:a5:d1:bf:22:a7:e1:4d:c6:fb:ac:1f:
5e:7a:0e:00:08:c0:c9:25:2b:ee:11:6d:1a:aa:cd:
98:52:22:02:2c:c9:93:c4:c2:b3:83:1f:7c:ec:a9:
95:f9:9a:a2:0a:b7:49:d6:63:af:b5:00:b6:81:cd:
78:c0:70:1e:4e:52:de:48:24:e7:4c:c4:96:9a:86:
33:29:c4:7b:f5:08:82:e4:ce:f4:fe:4b:ae:d0:e0:
15:0f:a8:62:41:c8:10:87:91:e1:25:69:82:93:ac:
b4:65:1e:f7:52:83:e0:c7:ec:b8:4c:18:b7:95:05:
a5:fe:95:0d:ce:da:da:ca:be:60:83:47:2d:26:7a:
af:b4:e3:b7:5a:64:70:92:7f:05:1e:2e:85:57:ff:
51:7f:84:28:ef:6a:4d:28:a5:e1:3d:72:c8:86:62:
04:07:cf:35:cd:dd:d8:b8:b5:eb:b3:bf:d9:21:f7:
91:0d:28:cb:fe:8c:3b:3a:13:3c:33:f7:56:48:dd:
0d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:26:A2:60:DC:CA:AF:F3:B2:F7:26:31:9B:83:3C:2A:3C:62:6D:7A
X509v3 Authority Key Identifier:
keyid:D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:12:2f:bb:79:16:0c:67:44:11:2b:59:6b:7c:6f:32:71:39:
93:2d:45:f5:2f:67:a3:4d:aa:90:19:1a:20:a8:03:9f:71:57:
e3:50:4a:cf:ad:d0:cb:a5:c8:1d:cd:13:c6:48:41:b7:71:96:
bc:6a:92:9b:e4:46:03:95:f7:5d:ed:a8:c6:09:53:46:98:f6:
fd:50:35:92:6f:3f:58:5b:26:0b:12:9d:6b:46:3a:bc:a5:c2:
61:10:40:b0:9b:f0:25:da:63:3c:78:68:26:f7:e9:6d:2a:20:
ee:e9:26:c8:de:8b:af:dc:fd:00:be:1d:6a:74:20:e9:0e:bf:
71:9d:f0:bb:f0:b3:71:97:cc:c7:d8:ba:8f:01:a6:b9:17:c5:
c3:af:74:41:5d:e4:75:26:52:77:55:d7:4e:68:12:0f:34:cb:
eb:23:96:d5:81:31:8c:7f:97:47:7e:46:b6:46:b5:7b:40:3f:
81:e2:2d:d4:80:cb:4b:d5:5c:38:c3:80:1a:28:08:7e:4a:62:
52:a7:6f:58:9d:61:c0:aa:38:45:00:7a:70:5b:c7:15:22:78:
b5:82:d1:c3:0c:81:65:ed:b3:f6:cb:27:59:2f:b0:26:1f:47:
73:6d:e8:cc:fc:7f:cd:76:a6:0c:6d:a8:73:8e:a0:a0:31:f6:
2b:cc:fd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:40:51 2025 by rpki-client