Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
File: Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft (raw, json)
Hash identifier: dH39b93tkumi4Bb7CPj/7s8pHrvnCfOqccszj/t06mI=
Subject key identifier: 74:0F:B4:95:D9:CD:25:26:8D:29:8B:59:1F:36:A3:04:DC:33:D8:D8
Authority key identifier: 43:77:2B:99:99:3B:06:08:D2:78:2A:F4:5A:22:EB:93:C7:FD:A6:3B
Certificate issuer: /CN=43772b99993b0608d2782af45a22eb93c7fda63b
Certificate serial: 01965424E561E8939326CA7C30ACE660DE98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
Manifest number: 11D0
Signing time: Sun 20 Apr 2025 17:00:26 +0000
Manifest this update: Sun 20 Apr 2025 17:00:26 +0000
Manifest next update: Mon 21 Apr 2025 17:00:26 +0000
Files and hashes: 1: Jz6Plky4nRwLQTJJcOF7jGNXrSw.roa (hash: /BEPfzyhvzI281lagKYoLrBP/3LTnv9Sk0+qZpDUYPQ=)
2: Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl (hash: yrWRaMctP4g5wxaRi7iXins+G8GuMDxKoda+fzfMSYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:24:e5:61:e8:93:93:26:ca:7c:30:ac:e6:60:de:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43772b99993b0608d2782af45a22eb93c7fda63b
Validity
Not Before: Apr 20 17:00:26 2025 GMT
Not After : Apr 21 17:00:26 2025 GMT
Subject: CN=740fb495d9cd25268d298b591f36a304dc33d8d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:14:0e:6a:b8:eb:8b:59:fd:0a:9e:24:04:8e:
3d:2c:61:e8:35:d3:bd:a7:92:d5:76:92:68:d0:75:
10:1b:16:ce:f6:75:d4:a0:64:4f:8c:f5:ab:6e:3d:
9c:b9:f4:88:27:41:52:e7:6a:0e:1d:e9:e3:db:12:
48:35:f3:b3:d8:dc:0c:02:0f:82:23:b8:c1:36:df:
4f:ce:fb:e0:9e:6f:dd:5f:53:a9:c9:de:23:bf:19:
4e:48:1d:fe:11:74:44:ee:97:c2:36:4a:55:97:6e:
a3:f6:5c:a5:da:87:81:77:76:5f:2f:ce:9e:93:59:
03:05:a3:a3:a6:df:bd:f8:3d:b9:cf:cc:2d:ed:be:
bf:f8:29:94:e0:ca:95:28:66:dc:21:ce:ed:d6:16:
3f:8d:d0:42:2c:3d:8f:59:62:34:81:4d:eb:f9:c5:
ea:a2:fc:f9:f6:fd:cc:25:53:ef:bd:28:2d:79:e7:
3b:38:c8:00:8a:51:3c:b9:fa:9d:00:9c:db:75:fa:
3a:32:00:82:1b:19:09:95:a4:d2:d1:df:77:aa:4e:
17:cf:5a:4f:6c:d5:f2:4a:08:04:9d:3a:30:65:0f:
10:82:7a:22:e7:02:0b:c9:e7:c6:2c:92:43:eb:d0:
b7:52:73:23:a3:bf:8a:82:29:00:be:b8:07:ba:b1:
4f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0F:B4:95:D9:CD:25:26:8D:29:8B:59:1F:36:A3:04:DC:33:D8:D8
X509v3 Authority Key Identifier:
keyid:43:77:2B:99:99:3B:06:08:D2:78:2A:F4:5A:22:EB:93:C7:FD:A6:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:44:57:d4:81:dc:3e:d2:5f:5f:46:a3:d0:4f:7a:cc:6f:d6:
35:96:30:27:a7:ee:e4:1c:7e:f5:42:9c:6f:21:97:d8:ed:8e:
c2:95:24:4b:70:65:bf:f3:e8:ce:bb:79:9f:83:f4:9f:73:8a:
12:63:76:ce:66:ae:de:7c:ce:0d:24:37:6e:d2:b7:ba:06:44:
c4:8b:29:b1:fb:ab:8e:bd:f9:99:f4:a2:c1:81:af:30:7a:1f:
9c:f4:bd:29:85:05:3c:03:c8:9b:ae:56:75:3d:b3:ba:67:ea:
23:c1:ff:0a:88:33:4c:b7:08:3c:0d:e0:6a:2d:a1:72:99:84:
7a:a3:50:c1:2d:76:e1:4b:3c:cc:d6:05:e5:8c:a0:7a:92:7f:
91:6e:2d:43:03:6b:33:44:b0:9b:b3:22:18:21:e7:83:aa:46:
f4:c8:13:10:19:f7:c7:21:b4:b9:08:53:43:e9:89:00:b7:f4:
12:e3:b9:a3:bf:2b:9f:ec:a0:c4:2c:fa:f1:e6:15:e1:cd:cf:
50:1b:dc:ad:a3:07:3f:cd:fc:ee:68:2a:57:e0:a9:00:3a:fc:
dc:fc:d3:a1:03:4f:47:86:7f:cb:32:b1:64:21:47:3e:c7:b1:
e4:04:f1:ca:90:cc:e1:41:76:7d:6f:fd:84:82:f3:ab:87:35:
56:02:41:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUJOVh6JOTJsp8MKzmYN6YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNzcyYjk5OTkzYjA2MDhkMjc4MmFmNDVhMjJlYjkzYzdm
ZGE2M2IwHhcNMjUwNDIwMTcwMDI2WhcNMjUwNDIxMTcwMDI2WjAzMTEwLwYDVQQD
Eyg3NDBmYjQ5NWQ5Y2QyNTI2OGQyOThiNTkxZjM2YTMwNGRjMzNkOGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRQOarjri1n9Cp4kBI49LGHoNdO9
p5LVdpJo0HUQGxbO9nXUoGRPjPWrbj2cufSIJ0FS52oOHenj2xJINfOz2NwMAg+C
I7jBNt9Pzvvgnm/dX1Opyd4jvxlOSB3+EXRE7pfCNkpVl26j9lyl2oeBd3ZfL86e
k1kDBaOjpt+9+D25z8wt7b6/+CmU4MqVKGbcIc7t1hY/jdBCLD2PWWI0gU3r+cXq
ovz59v3MJVPvvSgteec7OMgAilE8ufqdAJzbdfo6MgCCGxkJlaTS0d93qk4Xz1pP
bNXySggEnTowZQ8Qgnoi5wILyefGLJJD69C3UnMjo7+KgikAvrgHurFPVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQPtJXZzSUmjSmLWR82owTcM9jYMB8GA1UdIwQY
MBaAFEN3K5mZOwYI0ngq9Foi65PH/aY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTNjcm1aazdCZ2pTZUNyMFdpTHJrOGY5cGpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi80ZmJlYTgtNWU3OS00NmEyLWJhNWMt
YTE2ZDk3YWZhNjQzLzEvUTNjcm1aazdCZ2pTZUNyMFdpTHJrOGY5cGpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi80ZmJlYTgtNWU3OS00NmEyLWJhNWMtYTE2ZDk3YWZhNjQz
LzEvUTNjcm1aazdCZ2pTZUNyMFdpTHJrOGY5cGpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeURX1IHc
PtJfX0aj0E96zG/WNZYwJ6fu5Bx+9UKcbyGX2O2OwpUkS3Blv/Pozrt5n4P0n3OK
EmN2zmau3nzODSQ3btK3ugZExIspsfurjr35mfSiwYGvMHofnPS9KYUFPAPIm65W
dT2zumfqI8H/CogzTLcIPA3gai2hcpmEeqNQwS124Us8zNYF5YygepJ/kW4tQwNr
M0Swm7MiGCHng6pG9MgTEBn3xyG0uQhTQ+mJALf0EuO5o78rn+ygxCz68eYV4c3P
UBvcraMHP8387mgqV+CpADr83PzToQNPR4Z/yzKxZCFHPsex5ATxypDM4UF2fW/9
hILzq4c1VgJBPw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:29:21 2025 by rpki-client