Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft
File: QFC8opwYE647EfOB8EQqoqipMb8.mft (raw, json)
Hash identifier: PDhfETHnD/8AzhDMwtQdvpwEPxP1gTsJLN4JiBBi7nU=
Subject key identifier: 09:3C:8F:03:BF:72:DB:C1:C7:B2:35:BF:22:D9:C5:4F:0F:DF:65:50
Authority key identifier: 40:50:BC:A2:9C:18:13:AE:3B:11:F3:81:F0:44:2A:A2:A8:A9:31:BF
Certificate issuer: /CN=4050bca29c1813ae3b11f381f0442aa2a8a931bf
Certificate serial: 01965EA8B16C935F9F5F43D76C6ABCC8D615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft
Manifest number: 1417
Signing time: Tue 22 Apr 2025 18:00:35 +0000
Manifest this update: Tue 22 Apr 2025 18:00:35 +0000
Manifest next update: Wed 23 Apr 2025 18:00:35 +0000
Files and hashes: 1: 19IQx82rzsiCoBb7iKS7zS0gXio.roa (hash: TEyMe4x0yj15nmcDqFTTZyRV6sHl2P5CCSlpIqh9COU=)
2: QFC8opwYE647EfOB8EQqoqipMb8.crl (hash: gqKRARLsWyJbEflgfqldCnwhU/6Ls1ZQFzM2TA0Td28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:a8:b1:6c:93:5f:9f:5f:43:d7:6c:6a:bc:c8:d6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4050bca29c1813ae3b11f381f0442aa2a8a931bf
Validity
Not Before: Apr 22 18:00:35 2025 GMT
Not After : Apr 23 18:00:35 2025 GMT
Subject: CN=093c8f03bf72dbc1c7b235bf22d9c54f0fdf6550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:52:22:0c:63:19:67:fb:f9:2a:66:a2:46:0c:
ff:02:ce:c2:26:06:72:a6:e7:3c:0e:ce:a1:81:2c:
cb:60:55:c1:95:c7:55:b3:e1:0f:3c:d2:f9:a0:f7:
d2:a2:5f:e9:f2:74:28:0c:5e:c2:27:fb:99:ef:16:
6f:c0:2c:1f:23:72:fe:c7:5c:42:52:8d:34:41:3c:
29:ba:63:1d:77:3c:6e:1b:cd:d3:fa:64:7c:ff:f5:
25:b1:32:14:f2:7e:27:02:fa:dc:58:e4:55:f9:58:
26:dc:52:60:70:86:65:f6:dc:ca:a2:dd:31:a6:74:
10:4b:35:83:c7:7d:93:d6:18:12:91:13:3b:07:37:
28:ce:0b:ab:54:43:fb:7f:b7:df:7e:d0:35:a6:b0:
8a:55:79:a3:9e:f8:6e:c7:25:76:d6:11:69:c8:e9:
43:57:4e:78:1c:86:24:81:28:fa:94:05:8b:67:ab:
76:e2:4a:31:74:35:1e:a3:60:50:33:ce:bd:83:40:
f1:b5:9c:1c:1d:3d:9b:c7:18:bc:0e:cc:ff:77:7a:
10:60:e5:8b:c9:fa:44:05:b5:0b:cc:40:2c:5a:41:
a7:d8:25:9e:36:ae:62:b6:38:ce:c9:b2:1e:1e:46:
92:d3:05:8a:d3:a3:a4:f5:b1:bf:d8:bf:f6:5d:dc:
1f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3C:8F:03:BF:72:DB:C1:C7:B2:35:BF:22:D9:C5:4F:0F:DF:65:50
X509v3 Authority Key Identifier:
keyid:40:50:BC:A2:9C:18:13:AE:3B:11:F3:81:F0:44:2A:A2:A8:A9:31:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:19:dc:97:3d:8f:5f:79:b4:0a:c0:c4:a7:c1:98:9d:e9:24:
25:94:a0:27:28:44:61:e1:22:9a:2b:61:cb:da:3b:6d:d9:ff:
68:07:b8:4e:a3:0a:64:b2:f1:43:d1:97:dc:59:c9:59:77:7e:
6d:f8:0d:9f:6f:1c:a3:88:a0:64:28:db:79:e7:41:5c:b2:74:
56:ce:62:8a:9d:df:46:b1:7f:22:ab:c7:6f:73:46:09:21:07:
5c:11:b6:37:e5:25:ab:3f:14:59:93:f0:3f:86:fc:73:3d:cb:
71:91:78:90:81:5e:79:fb:81:dd:75:24:f3:52:9c:61:b4:42:
04:ef:ac:a7:2b:a4:4c:e2:f3:60:77:74:37:ae:e9:10:3e:4f:
d3:46:bc:6b:eb:c1:48:af:11:b4:e0:7d:89:b1:e0:79:7c:97:
bb:65:12:c2:f9:75:92:b3:5f:76:8d:54:cb:5b:c7:e1:94:fe:
de:28:bb:b1:04:f4:ef:a1:05:b2:0d:7e:8c:a7:b1:3d:c1:6c:
46:1c:dd:f0:47:bb:47:5e:08:12:85:af:32:5e:33:61:89:23:
73:a9:13:c3:c5:13:9f:1e:ef:be:22:46:3b:ce:82:63:89:a6:
54:7c:ea:1a:e7:37:28:5a:31:21:f6:b2:dc:a1:a8:e6:27:b0:
9d:8c:e3:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZeqLFsk1+fX0PXbGq8yNYVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNTBiY2EyOWMxODEzYWUzYjExZjM4MWYwNDQyYWEyYThh
OTMxYmYwHhcNMjUwNDIyMTgwMDM1WhcNMjUwNDIzMTgwMDM1WjAzMTEwLwYDVQQD
EygwOTNjOGYwM2JmNzJkYmMxYzdiMjM1YmYyMmQ5YzU0ZjBmZGY2NTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFIiDGMZZ/v5KmaiRgz/As7CJgZy
puc8Ds6hgSzLYFXBlcdVs+EPPNL5oPfSol/p8nQoDF7CJ/uZ7xZvwCwfI3L+x1xC
Uo00QTwpumMddzxuG83T+mR8//UlsTIU8n4nAvrcWORV+Vgm3FJgcIZl9tzKot0x
pnQQSzWDx32T1hgSkRM7BzcozgurVEP7f7ffftA1prCKVXmjnvhuxyV21hFpyOlD
V054HIYkgSj6lAWLZ6t24koxdDUeo2BQM869g0DxtZwcHT2bxxi8Dsz/d3oQYOWL
yfpEBbULzEAsWkGn2CWeNq5itjjOybIeHkaS0wWK06Ok9bG/2L/2XdwfmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAk8jwO/ctvBx7I1vyLZxU8P32VQMB8GA1UdIwQY
MBaAFEBQvKKcGBOuOxHzgfBEKqKoqTG/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUZDOG9wd1lFNjQ3RWZPQjhFUXFvcWlwTWI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy80NmQ4OTEtMjQ5Yi00YTRjLWEzNWQt
N2ZlOWVkN2Q2NDdkLzEvUUZDOG9wd1lFNjQ3RWZPQjhFUXFvcWlwTWI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy80NmQ4OTEtMjQ5Yi00YTRjLWEzNWQtN2ZlOWVkN2Q2NDdk
LzEvUUZDOG9wd1lFNjQ3RWZPQjhFUXFvcWlwTWI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFBnclz2P
X3m0CsDEp8GYnekkJZSgJyhEYeEimithy9o7bdn/aAe4TqMKZLLxQ9GX3FnJWXd+
bfgNn28co4igZCjbeedBXLJ0Vs5iip3fRrF/IqvHb3NGCSEHXBG2N+Ulqz8UWZPw
P4b8cz3LcZF4kIFeefuB3XUk81KcYbRCBO+spyukTOLzYHd0N67pED5P00a8a+vB
SK8RtOB9ibHgeXyXu2USwvl1krNfdo1Uy1vH4ZT+3ii7sQT076EFsg1+jKexPcFs
Rhzd8Ee7R14IEoWvMl4zYYkjc6kTw8UTnx7vviJGO86CY4mmVHzqGuc3KFoxIfay
3KGo5iewnYzjBw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:47:14 2025 by rpki-client