Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
File: Q2T-c0GbyG1fLnK0FLa01DedW_U.mft (raw, json)
Hash identifier: VIMZmT4DLRQ2h2HDAN9EhiC9B5NW4M2M6zrzAgFwCik=
Subject key identifier: 9C:A2:BB:E7:0B:8A:D4:30:E8:B5:F2:DD:05:43:DC:2B:7B:75:98:AC
Authority key identifier: 43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
Certificate issuer: /CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Certificate serial: 0196767A858712DDD1A5F2E57141B931C97B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
Manifest number: 1514
Signing time: Sun 27 Apr 2025 09:01:03 +0000
Manifest this update: Sun 27 Apr 2025 09:01:03 +0000
Manifest next update: Mon 28 Apr 2025 09:01:03 +0000
Files and hashes: 1: F_vaOKUje6wVSmmdNWKQj90pJEs.roa (hash: lSDHkW2GLzRQJdNUjIFPaHP5/gFVElG0iEqr3Re75Vs=)
2: Q2T-c0GbyG1fLnK0FLa01DedW_U.crl (hash: kY+TD1dQd5Uw3gwWUY4la4amTOa6r5DRtYx4K0qHM+g=)
3: mJRbgDWTWOF5d-waA4kjPdUwfKM.roa (hash: Cjg8Drs7NcYUITHcRSLo1PVz8MlOvWaOvbO+s0BbSe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:85:87:12:dd:d1:a5:f2:e5:71:41:b9:31:c9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Validity
Not Before: Apr 27 09:01:03 2025 GMT
Not After : Apr 28 09:01:03 2025 GMT
Subject: CN=9ca2bbe70b8ad430e8b5f2dd0543dc2b7b7598ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:03:60:16:4f:f1:34:8c:c4:05:e8:a9:63:fc:
3f:3e:cf:a2:c8:5f:8a:77:7b:5b:ed:ac:ae:58:90:
e0:d5:8b:6d:b0:83:b0:9c:09:49:02:60:35:be:50:
02:b0:25:df:79:31:eb:c4:c6:cc:68:11:34:2f:00:
8a:b7:e9:6f:71:27:5d:cf:65:77:15:b4:4e:b6:bf:
c8:b6:44:92:4d:3a:a1:96:c2:c6:b2:3a:22:ec:d2:
d5:d6:b2:a8:72:ba:bb:17:38:d2:42:9a:ba:70:8f:
6a:f4:90:b3:36:fd:bc:54:52:56:75:54:ca:98:cd:
4b:fd:0c:1b:df:ec:bc:69:dd:ab:ba:fa:e0:11:10:
79:a1:e1:fe:36:42:0d:ee:d1:59:b3:e7:81:99:88:
1b:5a:ac:b8:10:dc:6b:d5:33:6c:24:ce:4d:f9:93:
5a:a4:8a:d9:4b:d1:a6:bc:71:d5:00:05:52:08:b6:
07:d4:cd:71:02:bd:ab:e0:a7:16:7c:d2:12:7b:83:
c6:28:b8:31:e8:b7:5c:ed:a4:f8:fa:92:9f:43:9e:
a2:77:cb:f4:70:79:ae:0a:1f:e2:af:5f:cc:a8:e3:
aa:bc:57:ce:82:da:19:e4:1d:91:74:dd:8b:1d:5b:
53:04:72:1b:b3:72:7f:78:63:9f:97:62:e7:66:bc:
07:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A2:BB:E7:0B:8A:D4:30:E8:B5:F2:DD:05:43:DC:2B:7B:75:98:AC
X509v3 Authority Key Identifier:
keyid:43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d9:82:22:2e:1e:9f:49:ac:92:e4:a8:d5:1d:a7:f4:94:75:
31:ba:60:e5:e8:c4:95:39:f3:63:8c:cc:8a:07:51:ef:12:e8:
d4:52:a1:f7:7d:27:63:fc:27:f1:1b:15:a1:20:3a:9d:ec:75:
16:96:9c:9f:90:40:23:25:e8:94:bd:5c:65:4d:34:e5:0d:e6:
81:b5:e9:a4:e1:4a:58:10:0d:3f:0b:f7:6a:4c:94:2d:5b:1a:
2d:54:c8:4e:e7:b5:fb:67:88:3c:c0:b4:93:85:86:2e:1d:e0:
92:75:ea:08:8f:c5:15:ad:fe:95:4e:18:2a:1d:00:d2:e6:55:
03:01:0e:af:9d:23:5c:2a:bc:8a:ea:b0:28:01:9c:9f:53:22:
69:c8:61:4f:9c:8a:ae:72:de:ce:03:86:ee:a3:c8:28:60:39:
49:92:08:ed:b4:85:03:94:cd:5b:aa:fa:c8:eb:08:d5:f4:92:
eb:99:6e:97:06:8a:10:81:db:88:66:9d:4c:80:65:1f:e3:db:
4e:d0:7f:06:5e:01:91:0c:dc:20:37:da:ee:f5:d9:24:50:f5:
01:99:53:55:df:4b:a0:47:ff:20:76:59:f2:bc:a3:e5:7c:a6:
2f:03:24:6d:75:a1:38:8e:df:a0:73:14:4a:bb:c9:49:06:5a:
9f:0a:e6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:10:17 2025 by rpki-client